Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa
File: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (raw, json)
Hash identifier: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=
Subject key identifier: 83:61:B2:62:D2:45:38:A5:81:93:2A:C2:17:76:67:E8:2F:57:FE:A0
Certificate issuer: /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial: 01942747ECF8AF0EE6ABF8B4DE07B537B121
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 91.213.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ec:f8:af:0e:e6:ab:f8:b4:de:07:b5:37:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594b79990f616a8344c860148fc922910e154dad
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8361b262d24538a581932ac2177667e82f57fea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:2e:99:7d:f3:c1:f8:b8:8c:70:f6:c7:17:
c1:df:8a:42:42:b7:38:8c:d8:53:3b:b3:9b:eb:39:
80:3a:3d:58:cd:dc:ce:8d:01:3e:0e:fa:24:c0:da:
82:fb:2e:82:a6:a9:c9:94:74:bb:2f:5e:cc:21:f5:
af:cc:60:d3:13:85:fa:27:7f:3f:8a:bc:31:6b:95:
f0:c5:42:92:a5:9b:8b:4b:6b:bb:78:e1:ce:a9:a8:
26:48:af:5c:06:81:9f:b7:b9:df:fa:79:9e:27:dc:
4e:ce:6d:e8:4a:c5:19:a1:6c:db:b1:65:e8:d1:b5:
4e:23:e8:0a:11:94:25:d1:e3:cd:5e:2c:dd:0b:5a:
c2:d7:58:77:7c:6a:6f:e9:8e:92:cf:1d:36:fd:6e:
28:c9:54:7e:c5:86:5c:ba:a9:9c:b4:0b:2a:7e:aa:
cd:14:05:c0:d7:72:de:93:9a:b3:2d:02:79:30:fc:
b1:b1:bd:e6:4b:2e:86:f4:3d:26:77:0c:11:88:ad:
c6:3a:50:d2:1b:4a:e6:7e:aa:f6:40:25:a4:f7:d6:
34:eb:b9:22:9b:8d:80:d1:6b:1b:6a:cf:1c:f8:9b:
5d:ba:13:25:10:8c:da:88:e2:c4:c8:9e:9a:ca:1c:
61:f8:25:05:d5:b3:bf:4e:cb:50:26:a9:d5:1c:e1:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:61:B2:62:D2:45:38:A5:81:93:2A:C2:17:76:67:E8:2F:57:FE:A0
X509v3 Authority Key Identifier:
keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.65.0/24
Signature Algorithm: sha256WithRSAEncryption
be:97:cf:82:15:64:a4:e4:57:5d:8d:c5:32:b5:a2:11:9a:65:
30:72:cb:0a:5d:2f:51:05:c9:19:0c:51:00:33:a7:13:47:f6:
e9:2b:e0:37:4c:b5:f3:b3:b0:d0:47:3b:84:ea:fa:3d:0c:bc:
d3:c4:0b:83:7b:37:fd:a6:69:15:92:7d:e2:6a:bb:b7:07:36:
1f:62:c6:29:92:5a:73:6b:19:56:01:56:18:44:2e:cb:c2:ba:
11:98:3b:9f:27:b4:c5:b4:88:0a:88:c5:84:df:b0:f2:e0:a0:
1f:77:1d:a0:0a:5a:78:33:6f:f5:fb:2b:ee:a4:e6:f4:0d:a7:
b8:05:47:c3:fa:02:93:2f:02:13:5b:2f:05:93:ae:39:a3:42:
e9:b1:8f:44:60:69:f3:f8:ae:f5:45:60:d1:4b:7b:f9:80:91:
20:6f:c6:cf:1d:52:77:ee:67:17:f5:e1:4a:d1:09:f1:83:86:
6e:f9:a4:13:83:58:4f:51:b5:85:ec:42:40:21:bb:5e:3b:78:
91:31:27:96:90:92:ba:e2:1c:01:ce:c1:cd:c2:66:38:b6:bf:
0f:93:da:f8:34:c9:a5:bf:26:23:f0:dd:6b:13:49:b4:13:72:
83:92:48:62:fc:12:61:8a:2d:8b:2f:cb:d0:e2:92:71:c1:4a:
64:32:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:43 2025 by rpki-client