Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa
File: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (raw, json)
Hash identifier: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=
Subject key identifier: 4A:81:15:44:8A:9A:3F:02:06:40:10:B0:E5:20:AA:4F:F0:2B:19:7D
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 019422200DD1A655ED15208FCB3D42F15690
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200966
IP address blocks: 91.215.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0d:d1:a6:55:ed:15:20:8f:cb:3d:42:f1:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a8115448a9a3f02064010b0e520aa4ff02b197d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:da:41:83:9c:11:ae:29:09:fc:d0:53:a9:
b0:52:92:ac:11:a5:41:04:f5:7e:ff:b2:c0:c3:35:
f4:a0:20:d3:fe:85:05:f1:ae:ec:c1:d6:35:33:05:
04:ea:83:52:6e:1d:aa:cc:1d:41:ad:3b:b8:e7:ad:
32:60:31:23:5b:c3:22:4f:46:f3:e2:35:da:44:aa:
86:79:bf:6e:55:36:3c:a1:14:bf:b8:a1:a6:42:fc:
9d:22:97:e8:ac:04:2c:06:e9:3e:c6:72:a3:14:97:
a4:25:8c:36:1c:9c:94:60:d5:c7:e4:e4:6f:c0:f7:
66:9f:3b:a7:18:7a:3a:fc:7d:bf:6a:29:17:22:7f:
6a:29:eb:cd:5e:cc:9d:59:f4:af:a7:d4:73:be:a3:
64:ac:46:e1:0a:14:e9:e6:e1:3b:92:43:0c:fa:7d:
87:94:f8:3f:b9:24:44:9b:84:f9:a0:39:f0:f7:57:
f6:ba:40:de:81:f8:d8:69:7b:61:24:a0:e5:e2:83:
40:f6:f8:37:b2:a2:9b:9e:e6:2b:0a:88:6a:4c:03:
39:e1:3f:fc:45:a5:70:a4:20:6f:3f:4c:59:65:9d:
59:1b:72:ac:6b:69:c4:c0:b2:1b:56:d5:2f:1d:a4:
8b:8a:58:83:b1:43:9a:af:3c:9e:a3:4c:bc:1f:35:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:81:15:44:8A:9A:3F:02:06:40:10:B0:E5:20:AA:4F:F0:2B:19:7D
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:42:55:3a:da:4c:f2:9c:89:9c:c4:fc:fe:30:59:9e:72:f6:
0a:52:b6:ec:e8:92:de:5e:8e:54:73:23:80:c5:5c:3d:79:98:
7f:ab:34:f9:bc:9d:06:6c:30:52:2c:af:d8:91:d1:65:39:1f:
05:2f:69:79:21:b0:d0:4c:16:2c:cd:4a:50:9c:ba:ab:e8:6e:
18:ab:04:af:8f:fd:cd:9f:99:ca:a5:6e:d3:84:1c:08:97:30:
fb:ce:63:2d:a3:3d:6a:89:17:4b:2b:fe:17:8e:11:b7:cb:6b:
07:42:c9:87:35:bd:f8:4a:ef:79:9a:14:9d:5c:69:e2:c1:1c:
7a:67:6d:e1:c6:dc:7a:2e:45:68:67:bf:4d:15:28:eb:59:91:
21:a8:b6:f3:2c:8b:b3:87:c3:73:d7:79:76:5a:2e:58:fc:e1:
fe:3e:b1:fa:fa:51:73:3a:e8:e8:06:97:d7:05:55:43:ad:4f:
e0:fe:37:1a:99:03:5a:df:97:41:7f:30:69:d3:84:88:d9:61:
89:47:7f:03:87:a5:fb:43:5c:dd:c4:84:73:42:c0:a2:c4:ca:
fc:e5:75:76:a0:73:9e:39:57:71:3d:e4:ac:93:49:1c:bf:e0:
a1:39:4a:61:0f:ac:79:7d:f2:43:0f:f8:ef:1e:e4:be:2d:d9:
19:47:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:53 2025 by rpki-client