Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa
File: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (raw, json)
Hash identifier: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=
Subject key identifier: D6:7F:CD:E9:AB:98:89:74:35:A7:20:50:62:3E:E6:DD:02:3F:75:2B
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 019423D73C610678BE76756039A72CC7CDC6
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa
Signing time: Wed 01 Jan 2025 21:48:15 +0000
ROA not before: Wed 01 Jan 2025 21:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44105
IP address blocks: 91.201.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:3c:61:06:78:be:76:75:60:39:a7:2c:c7:cd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Jan 1 21:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d67fcde9ab98897435a72050623ee6dd023f752b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:ab:58:dc:91:ff:45:f7:17:07:9b:ce:c3:
74:d9:79:5a:27:66:c4:6b:b9:88:dd:70:da:e0:fc:
81:06:1f:28:63:f6:f2:99:4b:65:0b:56:81:2f:05:
6d:2e:72:5e:c8:2b:43:98:08:64:3b:e6:34:26:44:
08:b4:17:c0:27:39:d4:e5:9e:17:4b:87:3d:b1:0d:
d5:a0:4b:eb:91:b2:e9:50:97:55:3d:e3:e0:0c:9e:
07:d6:5b:52:91:bf:98:be:9a:8e:a7:c9:0e:6e:b3:
aa:5e:fd:24:4b:19:35:b7:4b:25:8a:bf:71:a7:f7:
b1:75:ac:f1:10:08:ce:e2:4d:99:39:bf:37:c3:a5:
a6:55:fe:e5:ec:6e:45:74:12:15:fc:da:5f:63:27:
00:c9:c8:3f:d3:90:a6:88:fb:4b:16:36:32:84:70:
1c:d3:79:b8:cd:e1:5b:58:56:94:9a:ad:ac:b0:9a:
4d:4f:9f:71:f1:a3:b0:ce:4a:68:d3:cd:c3:df:10:
d1:89:ec:cf:80:74:03:9e:ea:45:ea:40:46:89:38:
b4:8c:8a:6d:fe:45:eb:20:01:e5:c8:bf:e3:cd:0e:
60:33:dd:76:0a:bb:7f:7f:0f:02:94:40:cb:f5:22:
58:30:89:5d:a3:93:ca:09:b7:c2:b0:0a:5e:1a:06:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:CD:E9:AB:98:89:74:35:A7:20:50:62:3E:E6:DD:02:3F:75:2B
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
78:17:f5:1c:51:b7:de:a5:71:38:87:cc:f2:05:c0:c1:28:6c:
c3:b4:4e:1e:84:ff:f1:cf:76:e4:5a:18:62:ea:0c:e3:93:a0:
44:f8:c2:d9:1e:29:2f:b6:77:13:06:16:ac:d6:20:45:dc:fb:
91:40:e0:5d:b4:34:65:34:e8:c4:c2:ff:c5:fb:c4:4a:85:b6:
5e:7e:4b:06:ad:5d:3e:84:5d:e0:e4:8d:58:e7:c0:a6:e1:15:
a8:ac:e5:5f:87:8b:2d:7f:ad:8f:12:f4:36:c4:56:aa:2d:6f:
bb:0c:67:e3:92:4f:45:d4:97:a6:c8:26:8c:dc:10:32:2c:fd:
56:25:af:da:53:02:96:52:d2:cc:1a:46:2a:32:99:27:7b:f0:
36:58:94:df:ba:9a:93:da:be:1b:68:1c:fe:9e:b9:0f:cd:77:
2f:86:68:9f:d4:b3:b7:70:b6:0a:7a:bb:6b:dd:20:7c:a1:2f:
c4:47:b7:b7:ec:f3:28:76:c6:31:a4:ec:1e:dd:d0:c0:5f:90:
f8:ed:08:ad:71:a8:e4:b9:aa:bc:4e:fa:5d:2d:8f:e4:f7:19:
a8:4c:25:ca:52:f2:c1:4b:c0:61:ac:04:ea:28:42:0f:b3:04:
4d:54:8d:f5:12:b1:d1:fd:93:4c:50:5e:9c:b0:1b:2d:14:9a:
c5:ea:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:50:00 2025 by rpki-client