Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/BDdPGN7UjftTDoXeDAuPO5qRh38.roa
File: BDdPGN7UjftTDoXeDAuPO5qRh38.roa (raw, json)
Hash identifier: njYLuAMMEqojifdhTge2BEhA1fzjx7LySZ9quuI87xc=
Subject key identifier: 04:37:4F:18:DE:D4:8D:FB:53:0E:85:DE:0C:0B:8F:3B:9A:91:87:7F
Certificate issuer: /CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Certificate serial: 0182207BD93CA6C424136D469723C724E758
Authority key identifier: 6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/BDdPGN7UjftTDoXeDAuPO5qRh38.roa
Signing time: Thu 21 Jul 2022 11:19:23 +0000
ROA not before: Thu 21 Jul 2022 11:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 91.241.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:7b:d9:3c:a6:c4:24:13:6d:46:97:23:c7:24:e7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Validity
Not Before: Jul 21 11:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04374f18ded48dfb530e85de0c0b8f3b9a91877f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:6d:7a:48:25:59:97:1d:e9:72:9a:79:7d:
eb:0c:96:08:41:89:e7:f7:7b:7b:6e:f8:fb:ee:0f:
28:50:c4:82:50:fc:57:9a:47:67:0d:6b:0c:95:19:
d6:7b:3a:b2:32:7f:3a:c6:3f:5a:9d:19:e0:d7:7b:
3b:7d:ad:9b:5c:f3:7d:b3:05:e9:a2:1b:6b:82:97:
c5:7e:87:db:f2:19:56:83:18:1c:91:66:8f:ce:03:
3e:ca:ff:49:dc:36:9b:a5:86:cc:05:21:02:6c:e2:
ea:6f:a6:b2:57:90:85:06:31:0d:26:5c:06:c1:26:
94:19:9f:3e:36:0a:47:c3:7f:ce:f6:61:e9:d7:46:
7a:44:da:f1:41:9e:a0:d9:91:66:bc:d2:2e:c2:13:
21:a9:87:73:e8:03:3a:82:77:11:40:b4:66:39:67:
49:38:34:03:d5:9a:6b:7d:48:e3:fe:df:a3:f9:23:
86:3e:44:5e:5c:d9:5d:df:d7:24:f8:8e:f5:69:29:
f0:f1:8d:1e:77:b1:f5:99:97:ee:98:38:41:78:1f:
72:2f:b0:4e:4c:c3:5c:6c:c6:1e:3e:8c:f3:ee:56:
61:bf:0c:75:72:bd:75:55:9e:73:16:d1:85:ca:40:
98:b4:06:2c:44:0a:d6:40:70:ca:41:24:65:86:1b:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:37:4F:18:DE:D4:8D:FB:53:0E:85:DE:0C:0B:8F:3B:9A:91:87:7F
X509v3 Authority Key Identifier:
keyid:6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/BDdPGN7UjftTDoXeDAuPO5qRh38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:dd:97:3f:17:92:a2:10:bd:f8:ec:30:9d:db:12:98:72:a3:
12:0b:71:7c:8f:ae:6e:cd:c6:2c:4d:36:3d:cb:9b:ab:8a:c4:
e9:10:fa:69:75:8c:73:04:b4:e3:b8:ab:12:72:79:02:ad:44:
c0:58:86:ae:b8:bc:b5:45:a6:66:15:05:5e:e3:a6:9b:26:3d:
87:fc:fc:d7:90:88:db:04:47:bd:72:85:3e:55:db:c1:98:bb:
b0:46:27:d7:89:9a:26:23:c1:96:a3:e5:7a:8f:08:5c:53:77:
24:0c:51:e6:c5:0b:36:10:18:20:da:bf:02:67:0f:a6:b0:50:
aa:91:ff:24:92:bb:3c:dd:5a:88:d3:34:f4:fa:e1:08:1a:09:
44:a6:34:c1:7b:7b:4f:a0:ab:9a:f4:a4:6c:52:ac:1f:67:ea:
6f:45:3f:34:0a:fd:e1:91:30:ec:89:46:37:82:64:a7:79:dc:
0c:d2:7e:7b:27:5e:d7:49:14:60:7c:70:ec:08:13:90:0f:e9:
90:11:ec:71:ca:54:80:14:70:bf:ce:23:32:72:12:57:a0:19:
4d:8a:e9:ce:37:23:b0:a2:d3:4a:d4:f4:37:0d:6b:48:53:50:
f5:ef:e7:3c:13:60:94:8e:f8:73:aa:00:97:16:3e:02:75:1b:
17:7c:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:40 2025 by rpki-client