Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa
File: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (raw, json)
Hash identifier: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=
Subject key identifier: AE:38:F4:FC:76:6A:57:10:7D:B9:3A:81:6E:10:4E:C4:82:8F:06:08
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01951814FA2682D46945A97CEBE15CD67890
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa
Signing time: Tue 18 Feb 2025 08:03:02 +0000
ROA not before: Tue 18 Feb 2025 08:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 91.200.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:14:fa:26:82:d4:69:45:a9:7c:eb:e1:5c:d6:78:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Feb 18 08:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae38f4fc766a57107db93a816e104ec4828f0608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:bc:d1:23:ae:e9:1a:8f:5c:4d:38:45:b1:
1e:de:5c:5e:61:9b:50:21:17:d8:75:95:8e:7e:d5:
8a:ac:e7:ef:9f:01:8a:d3:9e:1f:0f:71:3c:1d:59:
40:8a:06:f2:a9:b8:35:07:00:3e:6c:2f:8e:69:91:
15:b3:03:2d:49:d7:25:26:e6:09:3f:b0:68:28:d0:
20:fd:44:54:46:12:a2:b6:e9:5d:89:1a:47:6a:8c:
17:7a:aa:f7:64:01:25:bb:5e:9c:ef:46:2d:a4:70:
b4:12:7b:3e:88:64:a2:86:9e:f3:b3:2e:45:7e:02:
17:6f:7c:66:62:f2:09:c0:bc:64:2a:36:c3:0e:1d:
30:e5:4d:c9:1b:5d:14:7a:a2:2d:d6:4f:1c:10:aa:
b2:0b:43:2d:f4:a4:a4:d8:a9:79:da:43:26:7b:d2:
91:98:19:e6:92:9e:a8:7b:7d:73:1d:d3:ec:22:13:
8d:4f:bb:9f:2c:2d:a6:65:9c:0d:65:e5:d3:6b:57:
46:5f:d3:7e:8b:e7:70:56:95:c1:c6:ac:a6:f0:ee:
36:07:ea:38:85:98:b8:0d:35:19:8e:d9:dd:eb:2a:
b6:be:2f:3c:23:e9:48:10:fb:d8:58:ec:4d:ca:e6:
10:16:63:1e:7d:55:e9:3f:b7:86:9d:d6:a5:6f:ed:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:F4:FC:76:6A:57:10:7D:B9:3A:81:6E:10:4E:C4:82:8F:06:08
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c2:85:2b:9c:59:13:fc:0f:14:01:92:86:13:28:1a:6e:78:
d6:a9:b9:37:cc:8d:88:70:21:32:44:e4:df:ae:3e:c0:bd:36:
b2:d7:91:cc:7b:e8:b9:26:90:53:f8:08:b5:fe:1b:ca:17:9f:
3f:ce:ac:d1:65:4f:86:aa:2d:67:eb:d1:2a:77:51:20:9e:0b:
65:1b:06:d1:df:7d:94:ee:2c:df:c1:b0:d8:2a:21:77:20:f5:
bf:9a:9f:3c:9a:7e:62:de:2e:5e:9b:45:a3:d4:6e:f5:fe:3e:
22:b7:e8:8d:79:64:18:a3:af:a8:54:3c:2e:ed:28:f2:93:f6:
b6:a9:d8:b3:ae:a9:82:16:1e:a6:fe:e0:5c:8a:c0:80:2f:b0:
18:ed:f0:e8:c2:63:b5:f1:96:95:2a:f1:2b:f1:b5:0f:d1:68:
d4:c6:f2:88:4b:57:10:26:3d:01:30:17:94:5a:a7:ac:19:69:
8c:5f:c2:ea:e0:1a:99:36:ef:8a:a1:0e:f5:66:25:bd:3f:71:
0d:5e:f2:d6:8d:e8:1a:ee:19:d9:1a:d7:52:c4:fe:28:5b:0b:
99:8b:37:8b:7e:a3:c7:9a:80:90:5a:85:42:ee:cc:53:f1:ed:
24:a9:b0:bb:78:8e:5d:b4:1f:f1:2d:b1:a2:67:6f:f0:75:e2:
69:8a:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:50 2025 by rpki-client