Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/bXoYWqZ8SZ3O254pyQ-8Ntd1z4c.roa
File: bXoYWqZ8SZ3O254pyQ-8Ntd1z4c.roa (raw, json)
Hash identifier: SSRjGMTCvYyiRQBTkMm0FwNDoWOeK9fjlGXzPAh16l8=
Subject key identifier: 6D:7A:18:5A:A6:7C:49:9D:CE:DB:9E:29:C9:0F:BC:36:D7:75:CF:87
Certificate issuer: /CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Certificate serial: B3FACE
Authority key identifier: 6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/bXoYWqZ8SZ3O254pyQ-8Ntd1z4c.roa
Signing time: Sat 01 Jan 2022 08:04:32 +0000
ROA not before: Sat 01 Jan 2022 08:04:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 91.241.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11795150 (0xb3face)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Validity
Not Before: Jan 1 08:04:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d7a185aa67c499dcedb9e29c90fbc36d775cf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:9a:4c:5a:ec:ea:cf:86:72:36:68:91:20:
06:28:6f:c0:02:86:53:e1:b3:e2:41:ee:d9:24:7d:
e5:51:b2:b5:63:82:2a:55:da:0b:c5:e4:1f:5c:57:
ab:84:2b:40:5c:36:83:14:ca:3b:49:48:6a:d2:fa:
33:c0:dc:56:64:c2:0f:0c:44:1a:b0:a5:c0:b4:3b:
b9:79:77:91:05:db:ab:d0:9a:4a:5d:aa:e6:81:19:
05:88:2c:14:81:e8:11:43:08:e0:40:ee:00:e0:ce:
01:2b:2c:df:83:b9:25:aa:35:97:60:c3:c8:59:89:
30:6f:a3:ab:cb:50:0e:f8:b5:cb:49:3e:ab:71:b1:
6e:c7:8a:04:9b:d4:22:26:50:04:eb:4f:9f:7d:50:
48:e4:34:dc:b4:41:6a:ac:22:ae:48:e0:3d:25:80:
e8:e1:0f:02:28:7f:5f:ff:e9:e0:4f:42:46:6e:28:
81:d7:26:d9:59:0d:d5:d7:8a:a6:69:e3:0f:d3:68:
eb:0d:51:c7:e3:40:d7:02:a3:41:90:87:15:89:35:
f3:f7:fc:ea:ab:90:f5:0c:0e:22:ad:b5:94:ea:3a:
90:9f:97:d9:1e:9b:91:bc:ad:a4:ee:c9:1c:be:d7:
13:f9:f9:9b:89:29:d1:bd:8b:15:27:c6:4a:45:8d:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:18:5A:A6:7C:49:9D:CE:DB:9E:29:C9:0F:BC:36:D7:75:CF:87
X509v3 Authority Key Identifier:
keyid:6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/bXoYWqZ8SZ3O254pyQ-8Ntd1z4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.55.0/24
Signature Algorithm: sha256WithRSAEncryption
90:be:23:f2:c1:df:59:84:05:5e:08:29:42:e8:84:ac:51:53:
3f:25:f0:5d:f3:c2:90:b2:6f:77:e3:91:e9:c2:c6:a2:d6:c9:
bc:1f:ae:d9:14:89:0b:97:c8:a8:85:27:db:29:36:cb:b1:f2:
bd:36:6c:b8:f8:6c:79:d8:9f:de:89:e9:9c:ea:05:4b:eb:2e:
af:de:6e:92:36:bc:e7:30:2a:f7:42:bf:be:0e:e2:c9:25:21:
4f:ce:c5:cc:5d:36:1b:cf:06:ef:cb:52:ae:f7:cb:8f:36:f5:
04:d6:fe:a0:00:6c:bc:10:db:c0:bc:ce:97:71:77:7a:07:3b:
dc:26:3b:48:30:31:bf:bc:c9:37:40:08:c5:d8:5f:03:ad:14:
f8:71:e0:ba:1a:d4:d3:a4:ab:bd:93:e2:4e:2c:86:f9:c9:8b:
50:32:c0:f2:92:47:c5:b2:c2:c0:8a:99:42:79:e2:7d:74:9e:
9e:f2:8b:26:48:65:db:d5:45:bd:9a:30:0a:c3:60:89:06:aa:
4a:58:b4:1b:b7:51:b6:6c:06:10:ba:6f:73:f6:09:b3:cf:0b:
db:72:4a:38:08:ae:bb:27:60:38:e3:41:78:38:1d:27:b3:a7:
7f:cf:9c:35:f6:6c:d3:b0:2a:e7:20:e0:b9:5a:4c:0f:d9:7c:
8c:ab:a4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:07 2025 by rpki-client