Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/zBSuOK6TSZdyfy80PgMlJMzpxoY.roa
File: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (raw, json)
Hash identifier: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=
Subject key identifier: CC:14:AE:38:AE:93:49:97:72:7F:2F:34:3E:03:25:24:CC:E9:C6:86
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019422FAF29D734D1067D0756C3FF85D8ECF
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/zBSuOK6TSZdyfy80PgMlJMzpxoY.roa
Signing time: Wed 01 Jan 2025 17:47:38 +0000
ROA not before: Wed 01 Jan 2025 17:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 91.202.248.0/22 maxlen: 24
91.202.248.0/24 maxlen: 24
91.202.249.0/24 maxlen: 24
91.202.250.0/24 maxlen: 24
91.202.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f2:9d:73:4d:10:67:d0:75:6c:3f:f8:5d:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jan 1 17:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc14ae38ae934997727f2f343e032524cce9c686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:f1:81:7f:11:ff:6f:b7:0e:3c:dd:7b:83:
c2:3c:ea:c9:fd:64:30:58:55:d8:43:bf:9b:10:3a:
cd:62:a6:73:33:91:ef:9c:66:05:65:1b:c3:90:50:
b5:62:84:5f:46:31:6b:ee:a7:53:48:d7:68:67:26:
0f:f7:33:54:e5:3c:5a:fa:80:4e:9b:e0:a0:78:8f:
03:ed:71:08:13:5a:20:57:97:06:cb:ab:c3:af:74:
be:2f:5e:81:10:75:e9:9f:60:d2:f4:b2:f1:ed:e7:
3a:21:10:1a:93:78:30:12:db:d7:af:dd:3f:c4:2c:
f5:86:e8:3b:84:cf:be:a9:ac:c9:26:24:c4:de:e7:
ff:c2:b8:dc:f3:64:a6:50:95:be:79:d5:20:95:cb:
1e:81:12:b1:62:71:82:3d:1f:aa:eb:90:b5:e2:fe:
da:09:b3:a0:a2:bf:5b:b4:a9:d1:a4:6a:9f:d4:5b:
bb:20:e1:59:fd:ad:e3:10:92:d9:2d:36:09:2e:07:
c4:56:b9:0f:7b:8e:da:31:02:68:59:22:42:c9:f9:
63:28:c5:b5:ea:de:04:23:2f:23:60:74:c5:99:ed:
af:44:97:de:ed:81:31:37:0f:f5:d4:19:d7:86:a7:
a6:7e:c9:de:1f:33:3f:6e:24:33:bf:b4:03:78:d1:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:AE:38:AE:93:49:97:72:7F:2F:34:3E:03:25:24:CC:E9:C6:86
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/zBSuOK6TSZdyfy80PgMlJMzpxoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.248.0/22
Signature Algorithm: sha256WithRSAEncryption
51:7f:ad:e3:23:3d:ac:4a:91:f3:7d:23:d6:16:7a:c9:26:e9:
28:c6:af:03:e1:01:17:27:3e:9d:a7:41:ef:43:9a:ef:c8:c1:
64:c4:0f:e9:53:4f:5f:8c:86:7c:70:4e:1b:67:28:f7:9a:41:
f0:cd:8d:87:ba:48:db:8f:76:05:cf:39:bf:9d:a5:6b:07:bf:
47:04:78:d2:c0:90:ac:37:d7:e3:52:8b:38:b8:08:7d:44:7f:
bb:20:b5:93:fd:40:8d:eb:15:6c:8e:fb:4c:30:29:ed:bc:a6:
76:c8:f0:5b:82:7f:c5:5a:19:07:10:81:a8:e9:50:d5:0e:86:
ce:ca:4b:8d:26:86:98:49:45:85:08:b0:76:42:02:fc:df:a9:
c9:33:1d:08:a0:cb:8b:ff:dd:82:ef:18:b4:7c:c0:ef:2e:5e:
17:d2:4d:e3:eb:36:a0:d3:4e:81:2e:00:1f:a8:29:c3:2e:5a:
8e:8d:13:97:6c:5b:9a:8a:9e:9d:7b:34:39:c3:b2:69:98:13:
34:46:6b:c6:d4:6d:a7:b6:e2:1e:49:09:04:3e:9a:89:2b:9d:
89:3c:2f:fb:54:79:68:a5:7b:f8:29:79:f9:dd:28:a9:49:4a:
ef:df:ff:08:c6:ef:3a:8b:5f:4b:32:76:b1:27:a6:6b:52:a5:
bd:71:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:30:20 2025 by rpki-client