Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6c0281-c827-4769-a83a-210b1553f69a/1/ccNY1oeO0rhSRQF7Zdk3VdQ3oik.roa
File: ccNY1oeO0rhSRQF7Zdk3VdQ3oik.roa (raw, json)
Hash identifier: nPpvzY4qhEaM9ZGf/WBjPcWX6Wolw+kXkVbBH79zujE=
Subject key identifier: 71:C3:58:D6:87:8E:D2:B8:52:45:01:7B:65:D9:37:55:D4:37:A2:29
Certificate issuer: /CN=d5086bfec52bbe10c6cea30cafc89cab34c22834
Certificate serial: 01959429EAEBF39AF6BE1FB13C7C2BA59E26
Authority key identifier: D5:08:6B:FE:C5:2B:BE:10:C6:CE:A3:0C:AF:C8:9C:AB:34:C2:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Qhr_sUrvhDGzqMMr8icqzTCKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6c0281-c827-4769-a83a-210b1553f69a/1/ccNY1oeO0rhSRQF7Zdk3VdQ3oik.roa
Signing time: Fri 14 Mar 2025 10:18:49 +0000
ROA not before: Fri 14 Mar 2025 10:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.199.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:29:ea:eb:f3:9a:f6:be:1f:b1:3c:7c:2b:a5:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5086bfec52bbe10c6cea30cafc89cab34c22834
Validity
Not Before: Mar 14 10:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71c358d6878ed2b85245017b65d93755d437a229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:ed:32:f5:ad:9a:aa:ca:d0:91:0a:39:a2:
5f:96:1f:e2:0c:aa:e5:b2:2d:b6:23:fc:e3:ca:8d:
af:47:39:b1:8b:21:d4:cc:55:f0:e7:c5:9f:0f:80:
c9:59:b4:32:a9:21:fa:f5:3b:f9:36:4d:fd:22:c5:
15:1f:b2:e3:4b:b8:a6:cb:e9:ba:39:e3:93:6f:ec:
fa:b5:9d:c4:be:15:24:37:79:5e:3d:e7:fd:11:d4:
8b:c3:14:9f:ee:19:04:2e:01:d2:5f:eb:72:6c:09:
25:fb:22:20:40:68:91:c0:b7:a8:88:fa:9b:6a:e2:
f6:95:72:f9:ee:e1:37:6c:6a:ea:cd:a7:59:72:ab:
dc:43:0c:23:91:2a:79:bc:e8:40:06:71:f1:f7:f4:
17:92:28:2e:61:fe:2c:ae:e8:56:52:c7:72:e6:f1:
79:59:3b:78:35:38:09:cd:65:5a:d6:8a:4b:b7:03:
64:42:7e:02:1a:db:1e:95:59:e4:5d:ef:51:e7:09:
41:5f:f9:cb:43:a0:1d:ac:94:31:74:49:1a:ff:ef:
64:05:ef:47:17:b2:d8:7e:8f:ca:70:62:4e:0e:49:
64:32:e8:90:08:88:1e:48:54:59:32:ec:da:82:73:
a5:94:ae:03:8d:4f:af:93:3a:95:21:82:c1:b0:5a:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:58:D6:87:8E:D2:B8:52:45:01:7B:65:D9:37:55:D4:37:A2:29
X509v3 Authority Key Identifier:
keyid:D5:08:6B:FE:C5:2B:BE:10:C6:CE:A3:0C:AF:C8:9C:AB:34:C2:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Qhr_sUrvhDGzqMMr8icqzTCKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6c0281-c827-4769-a83a-210b1553f69a/1/ccNY1oeO0rhSRQF7Zdk3VdQ3oik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6c0281-c827-4769-a83a-210b1553f69a/1/1Qhr_sUrvhDGzqMMr8icqzTCKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.222.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:aa:6c:f2:f6:b1:a8:df:10:d3:18:27:30:75:31:31:69:06:
20:4a:92:9e:bc:d4:2b:ae:c1:a2:b7:ad:24:0a:93:13:7a:24:
a9:4e:8d:a7:33:d6:20:f7:5b:79:55:56:85:d7:08:26:e8:ca:
56:fb:37:62:69:19:1a:6b:a9:43:b5:bc:65:d9:db:f4:ea:4c:
6c:d9:25:88:09:31:87:b7:a9:21:f4:aa:56:58:19:16:75:ad:
18:54:3c:b4:ab:a8:7f:56:44:3d:70:89:dd:59:9a:9f:7a:7e:
ec:85:30:aa:a4:e3:e6:43:48:bb:98:d0:b1:1a:d7:f7:a6:4f:
25:6f:01:68:42:4b:09:e7:dc:50:54:6c:da:fc:ef:fc:15:47:
3c:65:9a:93:ed:2c:19:80:92:a3:59:ec:30:8d:2f:f5:2a:fe:
87:0d:24:c0:dd:a2:9d:c1:f1:bc:eb:3f:f7:03:2b:b6:6f:11:
ff:43:50:47:5b:38:ac:7b:5f:50:8c:95:ea:6e:9d:25:d5:f0:
25:94:8e:c3:79:b4:ba:f5:35:9f:f6:a6:de:49:09:31:8e:3a:
96:ae:0d:8f:a1:8c:7e:fc:6e:f2:dd:21:56:3e:41:28:8c:f1:
ac:1e:a2:1d:fe:da:df:b4:1d:96:92:f6:2e:0b:4a:0f:45:bf:
5c:52:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:44:09 2025 by rpki-client