Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/nGO94LVpAftFk0cxQqxciVyzpKE.roa
File: nGO94LVpAftFk0cxQqxciVyzpKE.roa (raw, json)
Hash identifier: gBidmeqe+e3zFcpHELKMJ1VFL1JsnyKYqnhhn+j7eLE=
Subject key identifier: 9C:63:BD:E0:B5:69:01:FB:45:93:47:31:42:AC:5C:89:5C:B3:A4:A1
Certificate issuer: /CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Certificate serial: B39FC7
Authority key identifier: 6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/nGO94LVpAftFk0cxQqxciVyzpKE.roa
Signing time: Sat 01 Jan 2022 08:04:31 +0000
ROA not before: Sat 01 Jan 2022 08:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.241.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11771847 (0xb39fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Validity
Not Before: Jan 1 08:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c63bde0b56901fb4593473142ac5c895cb3a4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:d4:7a:73:97:b2:67:9c:1b:a9:f9:f1:9f:
a8:c1:60:a9:73:ee:99:1b:5a:7c:37:0c:c2:f1:64:
ba:ac:f6:e4:94:ab:65:11:7c:ae:c8:b6:8a:37:65:
e2:b6:ae:bc:aa:ae:96:a4:01:d8:25:b7:8c:48:52:
93:19:0d:8d:dd:04:c3:19:5a:29:9d:46:00:07:80:
da:13:b0:43:e4:38:f9:00:48:11:60:d3:3e:e8:d8:
1d:3e:da:02:9a:f3:91:53:23:81:b0:e6:64:30:9a:
7e:53:46:0e:79:19:23:7c:ad:4d:9a:17:6b:c7:eb:
05:da:0a:d5:13:0c:c0:ed:df:8b:c6:03:0c:bc:fb:
bc:81:fb:34:f6:ba:a8:73:bc:1d:2c:53:a0:c9:18:
aa:b3:9b:44:ab:2c:b1:47:ba:87:f7:21:9e:5d:0d:
04:21:01:21:e1:8a:86:3f:27:de:46:da:f6:d9:8a:
d6:ce:fd:5e:7c:4f:c9:bc:a7:de:cf:61:15:8d:a5:
aa:23:aa:0e:0d:18:56:12:e8:b3:30:cd:86:31:0e:
9a:21:05:b1:0c:a5:ef:8e:00:eb:54:01:bf:9c:01:
99:a9:99:c8:47:c3:5c:8e:41:1a:2f:63:23:f5:c2:
58:5a:ef:66:eb:84:20:41:dd:75:42:99:61:7a:c4:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:63:BD:E0:B5:69:01:FB:45:93:47:31:42:AC:5C:89:5C:B3:A4:A1
X509v3 Authority Key Identifier:
keyid:6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/nGO94LVpAftFk0cxQqxciVyzpKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:53:3c:19:13:15:3b:9e:36:f4:8d:15:27:7f:9d:44:10:25:
3b:81:89:61:f9:d6:82:c6:c4:8c:85:9a:0c:4c:94:ef:84:01:
35:28:80:1b:b4:0d:ad:35:b7:39:b1:8b:60:b8:b0:bf:a8:c6:
18:ee:ed:fe:94:8f:fb:ad:4b:20:53:0a:03:6f:67:72:c9:34:
c4:64:ed:da:d3:0d:e8:c5:95:27:8b:98:17:9b:30:23:8c:8e:
47:89:71:29:4f:b1:f0:c2:ff:44:4f:eb:d3:10:4d:25:7e:79:
21:89:2e:88:eb:c2:7c:f5:30:c9:e5:34:61:ff:46:4d:66:0d:
8e:8a:29:c9:d1:69:2b:7d:0d:e2:d3:a1:73:fd:16:fd:2f:f5:
d0:16:4e:dd:4d:55:c9:6f:7b:d9:fc:66:16:e3:f1:66:27:49:
98:9c:44:ee:3d:b7:55:7a:11:e5:02:b4:3a:5e:ca:0e:56:dc:
cc:6b:60:e3:f3:70:de:2a:a8:df:26:05:55:48:6a:20:a6:72:
31:39:18:ca:84:87:55:1b:f6:41:25:42:df:fe:53:97:fb:21:
49:77:cd:a8:73:bd:a2:6f:c2:85:7e:0d:f6:d9:a1:1e:bf:fc:
86:ae:49:81:b3:f4:f4:ed:55:9d:27:20:ff:08:be:2c:ee:e5:
01:79:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:40 2025 by rpki-client