Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa
File: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (raw, json)
Hash identifier: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=
Subject key identifier: 6B:14:38:41:C1:93:99:60:AF:86:CE:D7:60:4D:0B:4B:22:F4:6D:1F
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0194266C44F5A751081CCE161D004C847E5B
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59676
IP address blocks: 91.212.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:44:f5:a7:51:08:1c:ce:16:1d:00:4c:84:7e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b143841c1939960af86ced7604d0b4b22f46d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:a8:96:d5:fd:30:71:e7:55:26:bc:16:95:
bf:16:d4:c6:30:1b:08:dd:16:c3:81:3c:fd:4a:24:
4a:ff:cb:36:46:63:a6:d2:7a:ea:3c:39:b8:b1:62:
ee:c3:ce:ae:9c:b7:0a:42:07:1b:9e:02:98:20:c0:
78:77:d6:97:e6:f7:59:0e:43:8d:8f:11:1d:2b:35:
9e:28:cd:14:dc:59:23:b8:f0:c4:08:84:bd:95:4d:
14:6b:d0:7c:1a:a6:9e:fe:fe:ae:83:d7:31:62:b7:
af:ce:45:01:3b:72:8e:4f:c1:2f:14:2c:2b:fb:36:
ea:0f:16:fe:94:94:ed:3f:ac:e8:8e:2c:65:28:fc:
9d:2f:7e:b5:ae:2d:a5:b8:4b:a2:a4:19:90:2e:0d:
47:b0:ae:53:b4:28:29:1f:52:b3:d9:00:d5:4e:1b:
98:a3:f2:c9:a0:c5:ca:bb:ca:f4:8c:08:79:37:51:
06:8b:fd:e3:6e:8c:2e:1f:d3:9c:0e:52:56:47:30:
78:50:02:ec:d9:11:75:ef:4c:46:a7:6f:ab:4b:11:
37:17:2c:a1:55:dd:5d:08:1a:07:8b:59:a6:94:0e:
c7:2f:64:b0:1b:c1:f2:61:34:1c:2b:87:f8:a9:27:
c1:df:00:3a:21:70:ed:95:5f:a7:70:0e:19:eb:fa:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:38:41:C1:93:99:60:AF:86:CE:D7:60:4D:0B:4B:22:F4:6D:1F
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.90.0/24
Signature Algorithm: sha256WithRSAEncryption
73:73:15:92:62:14:7a:2c:5b:22:f7:51:a0:1e:91:45:42:9f:
7d:af:24:f3:7f:7e:8a:8c:ae:e7:6d:60:87:67:05:7f:6d:01:
ff:99:b8:37:5d:5e:45:5a:b7:f1:a7:67:e1:b2:df:0e:09:d3:
3f:01:fa:34:29:58:b8:3e:b5:a0:22:bf:6f:c6:0e:65:73:0f:
f5:74:40:b2:4c:37:2a:84:3b:a5:3c:ab:d6:58:dd:4d:dd:d8:
fd:ca:f1:10:2d:be:fb:3c:9c:16:aa:07:5a:fd:16:91:d8:d8:
ec:28:79:cc:c3:5c:5e:d7:e1:ea:a3:05:29:c3:10:4a:76:10:
28:5e:1a:a5:03:17:67:5e:94:3f:9b:8d:94:33:85:a3:fb:5f:
db:d1:f0:67:9a:aa:e0:21:bf:32:34:cc:d7:57:42:3e:8c:14:
51:c5:20:97:29:77:c7:4b:a3:0c:c5:f7:96:fb:d0:7d:1a:aa:
cb:bb:b0:a0:0c:16:cd:3f:d3:3b:4e:b2:36:0d:5d:d4:f2:4c:
ff:84:7c:af:a5:08:30:3d:cb:11:88:1e:d2:65:ea:78:84:76:
c3:b1:d4:4e:ed:17:03:e8:7b:ca:e4:84:ab:c9:e6:28:63:9c:
ad:d6:ea:a0:6c:54:7b:5d:77:38:cf:6a:dd:57:c6:28:81:4a:
62:af:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:43 2025 by rpki-client