Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/x-emvaBG0yODHcq9WdDdgLV2XAo.roa
File: x-emvaBG0yODHcq9WdDdgLV2XAo.roa (raw, json)
Hash identifier: b96Etx1aMheoFV1bF2c8092VJFG+jbpLUU8MH7daheE=
Subject key identifier: C7:E7:A6:BD:A0:46:D3:23:83:1D:CA:BD:59:D0:DD:80:B5:76:5C:0A
Certificate issuer: /CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Certificate serial: 01856F42D32D1F628CA935C4A1D60E482D52
Authority key identifier: 6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/x-emvaBG0yODHcq9WdDdgLV2XAo.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.241.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d3:2d:1f:62:8c:a9:35:c4:a1:d6:0e:48:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7e7a6bda046d323831dcabd59d0dd80b5765c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:f9:d8:6f:e1:4d:1c:7d:13:42:7b:b8:36:
74:57:d0:5e:c8:30:6c:13:bc:c1:48:0f:57:09:fd:
96:8b:14:ce:09:2b:c5:75:72:16:c9:6f:ea:1b:74:
ba:5a:42:2f:e1:e4:22:f1:28:c3:27:5a:c7:4b:28:
57:8a:a3:38:d6:3b:32:a2:52:73:0b:df:4f:de:60:
5e:db:4f:ff:13:4b:0d:f8:d1:73:94:a4:52:26:1d:
34:7e:64:90:91:d2:31:23:ba:1a:8b:b0:43:f3:5b:
b9:3b:91:2a:12:7d:27:7e:d4:43:44:97:71:ce:7b:
5f:04:42:31:8f:c0:08:6a:92:85:b4:c8:07:dd:41:
3e:db:82:bd:14:2a:2e:ec:3b:0f:7b:4f:f1:ee:c7:
b3:2c:c2:de:7a:73:6f:eb:e6:a5:5a:8d:e9:30:9f:
4c:83:4b:5b:d8:39:c4:f9:f5:ba:89:8e:18:a3:46:
5c:e9:ab:e9:0c:de:ba:f6:a1:11:17:23:ed:a8:b4:
93:a0:bd:ce:fc:f5:af:cd:46:aa:85:92:cc:50:e5:
63:bb:44:9e:f9:52:3a:8f:c9:04:ea:7f:81:dd:9c:
61:8a:02:16:24:ae:ad:74:1a:e2:72:ca:be:0e:30:
d9:ab:f9:fb:b8:04:50:c7:8f:94:90:dc:45:8b:ed:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:A6:BD:A0:46:D3:23:83:1D:CA:BD:59:D0:DD:80:B5:76:5C:0A
X509v3 Authority Key Identifier:
keyid:6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/x-emvaBG0yODHcq9WdDdgLV2XAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.55.0/24
Signature Algorithm: sha256WithRSAEncryption
41:33:4d:fc:37:ac:51:ed:61:50:65:99:37:1c:a3:c7:ab:cc:
d6:ce:f6:bd:a1:68:0b:1a:45:1a:ac:90:96:c5:da:f3:40:59:
0f:9e:ce:04:4d:f2:09:86:57:f2:63:25:60:c8:76:41:e6:63:
23:bd:b9:19:b2:92:b3:53:d7:8c:0d:e2:8f:13:3f:09:5c:1a:
6b:a2:15:00:08:78:e7:a5:06:cb:1a:21:e4:1e:3d:0f:f1:71:
38:35:3e:62:d5:79:de:f7:fb:eb:ef:37:7a:b6:06:20:b1:30:
0e:92:ac:0f:bc:44:0c:63:f8:9b:bd:42:b9:bb:af:27:ee:58:
96:8f:31:3c:70:fa:ee:81:25:62:1f:1c:e2:2d:b7:3a:c0:c3:
df:1a:8f:56:0e:30:9a:f3:11:bc:d4:d0:17:4d:2c:68:e0:28:
d6:a1:28:b3:cc:ce:09:3a:b2:de:f0:01:20:dc:c8:56:78:6c:
04:c5:45:4b:fa:8a:99:a8:00:32:8c:7c:df:17:d2:87:39:94:
ad:92:16:fb:56:4a:a3:ea:64:e4:80:95:07:72:07:1b:a8:5a:
ba:9b:eb:6e:0e:cb:3f:0e:98:51:3d:3c:9c:ad:86:7a:8e:ed:
b2:59:2c:40:25:34:88:e5:e0:ee:31:b5:fb:78:9b:c8:a4:58:
c6:d3:df:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:15 2025 by rpki-client