Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa
File: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (raw, json)
Hash identifier: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=
Subject key identifier: 4F:41:8B:0B:D8:AF:82:24:89:57:01:90:E4:A2:0E:2C:22:8E:8E:AB
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 019425FCC70A197EB6E808DA0954BB612435
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa
Signing time: Thu 02 Jan 2025 07:48:30 +0000
ROA not before: Thu 02 Jan 2025 07:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35421
IP address blocks: 91.209.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c7:0a:19:7e:b6:e8:08:da:09:54:bb:61:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Jan 2 07:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f418b0bd8af822489570190e4a20e2c228e8eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:f9:f0:eb:a7:3a:3c:bb:23:17:f4:55:61:
7f:69:fd:7a:4c:dd:50:e8:5b:e9:9f:50:fe:76:5e:
fd:9f:b8:20:42:77:e2:4e:19:74:24:32:5c:a3:e3:
bf:af:b2:12:95:68:8b:bc:dd:9f:e6:26:ee:41:f1:
ff:43:32:d0:d4:e6:15:f7:e7:eb:51:b2:05:7b:d6:
76:ff:94:00:4b:2d:22:05:5e:2f:6c:a3:2d:99:35:
88:ca:a7:7e:c2:d0:f1:59:4e:1e:a2:28:1b:5f:28:
63:ed:7d:64:84:cb:f0:fa:ad:04:23:58:1b:3c:c2:
17:50:96:41:67:e5:72:3c:e1:c7:12:6e:6d:c2:2f:
91:e3:59:88:13:d8:c0:51:0a:ba:16:e7:b5:15:e9:
1b:1f:4b:15:4e:7b:e5:35:59:c8:ad:16:ae:0e:83:
3a:63:f9:42:2d:bd:ad:f4:1c:0e:da:4b:c8:35:99:
f3:bc:e2:a1:bb:ad:4f:d1:97:f7:ac:33:e6:a5:93:
d5:8d:3d:df:49:93:f4:02:8c:9f:d9:a6:09:b6:2f:
96:64:4e:ed:f2:26:74:50:a9:6e:39:47:6f:8a:f0:
79:fd:d5:5d:8e:a8:e1:c0:74:d7:7e:bd:06:f7:f6:
e2:19:54:50:43:c0:d0:f6:d3:c6:2e:a5:56:e2:78:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:41:8B:0B:D8:AF:82:24:89:57:01:90:E4:A2:0E:2C:22:8E:8E:AB
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.13.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5a:da:06:4b:a0:f0:5d:38:e7:c1:9b:c8:0d:d6:c0:0d:aa:
c4:9b:ec:fa:1e:14:01:3a:0b:c9:0a:02:51:8f:c5:c1:c7:cd:
82:9a:de:5f:e3:ea:a2:79:bb:04:f3:bb:d5:4e:8c:f8:34:75:
a7:69:44:8a:0f:56:dc:ad:6c:91:25:78:a6:54:80:b5:2a:1e:
53:ff:a6:48:c6:d5:bf:35:df:96:a3:46:d0:57:88:b5:30:b4:
22:8f:cd:44:de:c3:73:64:38:17:bc:f3:6f:58:b4:38:51:82:
69:cb:91:30:0d:58:a4:dd:c8:0b:1c:5c:46:f1:9c:5e:ed:34:
eb:5a:68:f9:7e:7e:c2:c1:ad:fd:9c:fb:fe:6d:98:f6:a7:7b:
0a:d8:ae:96:e8:b5:58:11:9a:9f:ec:fd:25:52:72:63:26:84:
9c:21:b8:b2:18:64:68:2a:82:15:e3:0a:25:cd:5d:3f:d9:77:
f0:e5:cb:95:51:13:db:e7:af:8d:95:a7:02:36:f7:71:b6:43:
b4:cb:1f:67:08:ea:60:67:a0:32:5e:58:74:a7:1a:c0:d5:6b:
0f:a0:ed:e1:c6:d6:51:27:7c:31:a4:fd:d1:f8:a2:42:8a:07:
24:3c:2b:c0:85:34:8d:82:1d:a8:01:91:2e:dd:ce:d5:a0:c5:
44:10:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:48 2025 by rpki-client