Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa
File: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (raw, json)
Hash identifier: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=
Subject key identifier: 00:10:FC:2D:2A:66:F4:AA:3E:E7:39:FD:83:4A:FD:1A:C7:A6:30:80
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 0195A3BD0950787A41184D2638422C3FBD83
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa
Signing time: Mon 17 Mar 2025 10:53:49 +0000
ROA not before: Mon 17 Mar 2025 10:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.244.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:bd:09:50:78:7a:41:18:4d:26:38:42:2c:3f:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Mar 17 10:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0010fc2d2a66f4aa3ee739fd834afd1ac7a63080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:06:1c:1e:d8:7d:75:23:24:7c:4a:df:ad:
9b:9e:3e:2b:8f:be:8e:2f:90:75:2d:fc:0f:48:cb:
ac:39:ec:f9:a6:f6:48:ef:00:57:47:51:93:98:1f:
38:5d:c3:f4:68:bb:f5:2e:56:ac:88:ec:c9:bf:4d:
a3:0e:60:ad:6d:97:d1:b0:89:23:ee:88:15:f3:22:
ce:4a:c8:ca:c5:3a:74:45:cb:51:44:97:ae:44:c2:
12:f1:e3:09:c4:cf:80:22:ff:30:9a:c9:5b:35:d5:
58:f1:4e:a0:ef:b0:1b:a2:de:0e:6b:6b:02:85:83:
0e:64:f5:a9:cf:ca:53:d1:68:5c:14:9b:3b:5e:26:
d7:32:66:f4:f4:05:24:9c:2a:4a:e3:ca:fb:72:6c:
3b:1b:11:e8:c5:3d:89:b1:29:b3:80:1c:6c:7a:4c:
46:c5:9f:e5:00:fb:70:a1:ad:c9:f3:9c:58:d7:3f:
30:1c:5c:6e:4b:c3:62:49:48:cf:94:f1:64:2f:58:
ec:15:3f:05:5d:98:8c:69:52:a9:47:6a:50:38:50:
a8:97:51:c9:06:5c:24:77:60:c5:cf:48:0a:ad:bf:
16:b8:ac:cc:ef:1e:9d:d4:1f:a4:76:67:82:26:73:
ad:8f:a0:56:ad:00:fd:a3:2f:28:e6:c9:50:32:ea:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:10:FC:2D:2A:66:F4:AA:3E:E7:39:FD:83:4A:FD:1A:C7:A6:30:80
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.201.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2b:7c:ad:0d:4c:4c:88:23:29:70:a0:28:db:54:e0:8f:7b:
9d:1d:43:4d:c1:0c:92:5b:f2:a5:f3:9e:a3:c0:37:fc:e0:21:
ff:2c:e9:19:23:ec:4c:89:29:98:44:fa:ad:eb:b7:5b:e5:5e:
21:4a:67:7b:e4:77:0e:bf:20:e4:ef:ed:37:bc:ef:d8:4f:d4:
28:8a:04:1d:84:3c:2f:b0:a9:15:5f:24:47:51:ef:9a:d2:7b:
e8:1d:83:88:99:93:c1:e8:b9:6f:85:99:6f:85:eb:55:d6:37:
eb:89:2b:9a:06:47:cc:db:93:4d:96:0b:ad:0d:21:b8:12:9f:
40:4f:06:e2:8c:b1:53:4a:4d:c6:9c:a6:19:1b:83:03:28:0f:
4d:8b:7c:b6:18:37:52:af:ea:fa:6c:0c:1a:39:b7:8a:92:4f:
e3:5e:89:fc:b9:06:fc:35:93:60:67:8b:0c:eb:46:8f:76:98:
ca:02:d2:8a:ab:12:1f:fd:f8:1c:a3:ae:af:b7:5b:71:3f:8b:
92:33:80:7b:fc:c1:b1:d6:ca:92:38:cd:86:fc:5d:4c:e0:98:
bc:50:a0:61:18:9e:5f:a8:5c:a3:43:0b:63:ac:e7:7b:6a:09:
5a:65:47:bf:79:95:4b:dc:a2:e5:e2:68:af:5b:63:b3:63:3a:
24:dc:d0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:12 2025 by rpki-client