Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/mrSrlKE7xCslqlPTXvwVWDdiqIY.roa
File: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (raw, json)
Hash identifier: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=
Subject key identifier: 9A:B4:AB:94:A1:3B:C4:2B:25:AA:53:D3:5E:FC:15:58:37:62:A8:86
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019421B1EE2D035E46F3DDB343625DA40E01
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/mrSrlKE7xCslqlPTXvwVWDdiqIY.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29317
IP address blocks: 91.194.118.0/23 maxlen: 23
91.194.124.0/23 maxlen: 23
2001:1578::/32 maxlen: 40
2001:1578:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ee:2d:03:5e:46:f3:dd:b3:43:62:5d:a4:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ab4ab94a13bc42b25aa53d35efc15583762a886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:7d:a1:8c:86:e0:9f:a8:c4:cc:32:de:d8:
db:3b:51:bb:a2:f6:29:85:19:5f:69:ec:44:de:a9:
07:ec:ec:b2:f7:7f:e1:26:97:7b:08:27:e0:58:47:
0b:db:55:63:4e:05:77:44:c4:99:bd:1b:97:88:9c:
30:53:9c:f7:69:50:34:a8:8d:94:c7:d8:db:1f:1e:
20:4c:79:7b:c4:7d:30:06:4e:0e:e9:ad:b7:43:e6:
48:5e:9d:44:00:9e:48:ef:26:c0:b5:ce:f6:92:63:
1e:47:d5:f0:49:81:a3:da:91:98:d3:0a:e6:79:61:
40:4f:82:df:f6:9e:4e:01:29:c7:be:c5:c2:ca:b6:
f5:27:db:cb:31:76:c5:85:b5:67:2f:93:62:a4:fe:
d9:75:4c:10:ee:49:7f:2d:ef:48:ec:22:6f:71:00:
eb:a6:91:e3:4d:62:e6:a9:ad:70:d7:c9:00:63:d6:
a3:10:14:1d:8e:65:28:0a:39:9b:54:6f:b5:a7:a8:
43:05:5c:d5:9f:9b:3c:f0:93:bd:79:6a:2c:3f:a9:
66:ec:fc:30:d6:68:45:90:dd:6e:9f:01:67:eb:2e:
ee:ea:60:a4:95:99:5c:c7:f1:bc:e1:bb:11:cd:8f:
46:ca:ea:ac:ef:20:0f:dc:63:55:db:2f:fe:99:cb:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:AB:94:A1:3B:C4:2B:25:AA:53:D3:5E:FC:15:58:37:62:A8:86
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/mrSrlKE7xCslqlPTXvwVWDdiqIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.118.0/23
91.194.124.0/23
IPv6:
2001:1578::/32
Signature Algorithm: sha256WithRSAEncryption
06:f9:b3:8a:5b:09:d2:d6:44:78:f6:87:80:90:d3:da:05:f3:
1a:4a:95:b9:0c:36:29:d7:c7:d0:dc:7f:92:9d:66:06:dc:fd:
96:e8:1a:1e:71:e3:e7:ef:39:4d:e8:83:d6:9b:ce:aa:99:78:
60:b4:2f:0e:c6:e2:2e:4a:96:8e:eb:d7:6e:e2:d1:df:7e:06:
75:a2:a1:d4:e0:98:b4:e8:d3:13:28:50:45:8c:5e:cf:76:60:
66:99:35:4c:3c:66:3f:94:42:bd:94:23:87:b3:26:c1:1f:ef:
77:f4:a4:a3:7e:80:36:1c:eb:a7:8b:43:e0:35:df:de:a6:6b:
62:89:ac:43:57:25:49:31:73:6a:fa:6b:0f:82:a4:d3:2b:cb:
b0:ba:80:95:c1:b1:e7:a8:ca:85:38:96:77:04:8b:17:ee:0e:
83:29:a0:ea:ee:f5:c6:a8:60:30:93:d1:bf:e5:28:cb:88:fb:
6f:a4:eb:88:d6:60:c0:de:eb:d4:7a:cb:b7:e8:f1:d3:23:a8:
80:86:d5:58:73:6c:de:0f:00:34:c1:41:f7:c2:01:60:57:d2:
2a:28:67:67:a7:81:9d:3c:38:32:d6:e5:8e:bf:de:7f:d4:f3:
77:ad:a4:60:a4:62:02:9e:6f:71:03:70:62:a1:2c:2f:2a:f9:
4c:50:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:23 2025 by rpki-client