Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa
File: 9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa (raw, json)
Hash identifier: /I1wfagsAtpLvGcRUkgr5rbaITh/yY12WpQcMZ73aQ0=
Subject key identifier: F5:E3:7D:BF:F8:66:63:80:57:86:AC:20:C0:F6:E6:75:1B:70:6B:18
Certificate issuer: /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial: 019427B5DFB496300553C2A359EAB1274699
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12732
IP address blocks: 91.199.214.0/24 maxlen: 24
2001:67c:27fc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:df:b4:96:30:05:53:c2:a3:59:ea:b1:27:46:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5e37dbff86663805786ac20c0f6e6751b706b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:dc:9e:42:bb:dc:86:6e:b6:40:a1:9b:0f:
89:f3:26:bb:a5:c8:cc:b5:74:1b:bc:48:f4:0a:e5:
ce:60:d1:c9:db:bd:60:d4:0e:99:c4:b7:23:08:b4:
6a:3a:49:65:26:7a:39:1f:75:7f:28:7c:52:1c:24:
b6:b9:16:a7:2c:80:94:4b:ae:5d:b5:11:2d:53:62:
0f:27:61:cc:a9:d2:d5:80:ed:75:23:61:14:cb:01:
3f:93:16:ca:37:64:b7:0c:1f:89:fe:b3:d3:86:15:
da:68:41:be:0a:ea:19:e2:93:a3:d1:44:d7:92:30:
a2:fa:70:b5:4d:d6:5b:22:bf:49:c3:0b:60:b3:04:
ba:3f:8f:74:cf:33:8b:b6:fe:7a:d2:4c:0f:a2:a8:
e6:81:d1:cc:86:f2:b2:51:a3:a7:22:f0:ce:aa:38:
e5:00:7a:12:db:a6:ca:15:ba:1f:48:21:3c:d3:ca:
d0:f6:8d:ff:b4:92:22:21:13:09:5a:5c:b4:bf:e1:
02:e7:95:3c:c8:a7:c0:de:a8:f4:26:83:62:d3:99:
da:01:50:78:52:58:35:74:ac:c4:ac:28:b8:2d:6c:
4c:f9:7e:cc:e4:08:b8:aa:89:bd:c4:15:33:97:7f:
c9:9a:f1:54:1d:ab:77:42:e7:c2:76:07:3f:6a:62:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E3:7D:BF:F8:66:63:80:57:86:AC:20:C0:F6:E6:75:1B:70:6B:18
X509v3 Authority Key Identifier:
keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/9eN9v_hmY4BXhqwgwPbmdRtwaxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.214.0/24
IPv6:
2001:67c:27fc::/48
Signature Algorithm: sha256WithRSAEncryption
5a:96:b8:a5:2e:4d:e9:b1:60:1f:7f:d4:fc:fa:10:01:5f:cf:
07:5f:aa:81:6f:22:fb:f7:f6:85:d9:8c:1b:c2:e8:b7:8d:d9:
09:ac:c7:d6:37:5d:93:3b:19:4d:29:fe:a7:15:26:40:0f:03:
54:c7:f5:a0:50:df:f8:87:86:79:7a:93:53:ba:02:17:71:0e:
5f:d2:ce:fb:a2:e7:fb:6b:0e:15:7f:39:0f:d2:8b:c0:f1:31:
bd:77:93:df:cc:39:dd:fd:52:2e:0c:77:b6:f0:fe:f6:b8:52:
f0:5b:ed:e9:4b:f6:ff:12:35:b8:56:32:82:0d:f0:fc:f7:9a:
69:01:42:25:1d:7d:fe:dd:89:d6:be:63:0f:ea:89:cb:f3:76:
9d:35:ab:cc:73:8f:5b:e4:e6:3e:96:04:d4:6b:f0:56:ad:9d:
a0:9a:af:16:8f:81:3f:9d:98:1c:cb:e0:ff:a4:1c:9c:33:f7:
b3:db:18:b9:7a:f6:64:db:50:1c:c1:80:9b:68:bf:d0:2b:f3:
96:0e:94:6c:b8:f8:50:b0:1b:42:11:7a:1f:29:bc:2b:07:ee:
5c:9d:96:7b:d1:b4:48:47:99:9e:a2:06:96:b9:f6:6c:9e:bb:
80:a9:de:87:62:bc:61:f6:1f:5d:f9:32:1b:88:61:2c:1e:19:
36:76:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:54 2025 by rpki-client