Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/bTO64h5evq1f9pQ3aMuk10F39TM.roa
File: bTO64h5evq1f9pQ3aMuk10F39TM.roa (raw, json)
Hash identifier: Mp11M/3Cigc/Rf8yRz/GlW3lsq9BX6t6EA5L3pAMsUk=
Subject key identifier: 6D:33:BA:E2:1E:5E:BE:AD:5F:F6:94:37:68:CB:A4:D7:41:77:F5:33
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019552328F127871E56637B6034033F4ED4C
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/bTO64h5evq1f9pQ3aMuk10F39TM.roa
Signing time: Sat 01 Mar 2025 14:53:19 +0000
ROA not before: Sat 01 Mar 2025 14:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57014
IP address blocks: 91.108.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:52:32:8f:12:78:71:e5:66:37:b6:03:40:33:f4:ed:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Mar 1 14:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d33bae21e5ebead5ff6943768cba4d74177f533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:90:a4:5d:c7:76:dc:34:cb:27:02:27:10:
40:16:4f:93:df:c2:7b:53:d5:66:04:57:a7:41:3a:
f9:11:82:bc:d9:bf:91:af:41:d0:8a:fd:ae:b1:28:
33:a6:89:f0:1e:fa:2f:ca:5f:ad:67:7e:05:79:81:
d6:f3:90:3b:5c:8e:c6:48:6d:fa:65:11:1d:4c:d0:
e1:a5:28:65:e3:b7:81:65:78:14:7b:49:4d:d0:bd:
20:46:bb:82:a4:01:69:51:60:94:85:5f:45:97:d8:
1c:6f:7c:b5:0a:90:f8:b4:90:76:80:ed:8b:21:70:
1e:bb:e0:63:29:c4:e1:13:e9:d4:aa:5f:44:84:61:
94:11:90:1c:37:34:9b:d1:df:22:9f:59:5e:e4:91:
11:2f:6d:03:a7:4f:f7:88:54:c2:65:23:b0:7f:95:
d4:51:03:aa:14:12:85:4e:ee:24:df:dd:ec:a2:a3:
6b:1f:0a:52:19:03:f1:8e:32:4d:90:2b:18:e0:6c:
3f:15:e9:e1:a0:b6:f4:c8:b3:42:8d:e5:c4:f4:56:
fc:14:69:e4:c5:21:00:46:ec:20:45:f4:a5:92:24:
b1:5c:47:a6:e0:97:85:76:05:e4:d5:2e:b0:e4:0c:
6e:52:dc:94:09:eb:96:02:1f:94:8a:d7:7e:be:63:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:33:BA:E2:1E:5E:BE:AD:5F:F6:94:37:68:CB:A4:D7:41:77:F5:33
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/bTO64h5evq1f9pQ3aMuk10F39TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.254.0/24
Signature Algorithm: sha256WithRSAEncryption
57:91:a4:ad:f0:d0:3e:60:ab:87:09:17:3b:6e:ac:7d:43:cc:
4e:38:85:fc:35:28:3c:e7:53:e8:aa:c1:81:06:53:9b:71:57:
40:9e:c8:4a:9a:38:af:04:b4:17:df:53:49:b7:5f:b9:0e:6d:
ed:cd:dd:5d:89:af:93:13:bb:67:38:3a:51:d0:23:98:79:c5:
27:08:56:c5:ec:44:04:00:9f:3f:4e:9e:cb:80:c8:7d:a5:0b:
15:57:cc:30:7e:51:3a:5a:c2:61:2e:69:1a:16:88:33:43:0c:
50:55:93:60:13:8c:d1:de:4e:8d:05:a4:fa:ef:f9:b5:8e:3c:
56:21:e8:6a:16:27:67:ee:1d:c3:03:86:c9:d0:11:cc:bf:4e:
6b:d4:1a:b7:43:2d:a9:17:c9:66:bd:05:15:ce:dc:0f:38:94:
af:61:fe:b8:74:bd:3b:aa:46:9d:16:77:69:72:87:25:b4:91:
be:d9:1d:9d:11:f3:e6:8b:49:77:2b:82:5e:1a:fd:e6:98:d7:
95:e3:3e:00:b4:e6:23:80:36:84:64:75:bf:fe:2e:2a:95:46:
c1:5f:96:8e:dd:1a:5b:e6:a1:29:d8:60:b2:6e:9f:3b:dd:d0:
1d:5d:b3:dc:6c:77:64:36:b3:c2:a7:46:e8:31:c5:88:99:73:
ac:71:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:03 2025 by rpki-client