Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/K6bM5601EY4aWoYwlB_yWaSAYWg.roa
File: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (raw, json)
Hash identifier: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=
Subject key identifier: 2B:A6:CC:E7:AD:35:11:8E:1A:5A:86:30:94:1F:F2:59:A4:80:61:68
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 01941F8C161421063D45BD34EF3ECC6965CE
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/K6bM5601EY4aWoYwlB_yWaSAYWg.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60809
IP address blocks: 91.205.20.0/22 maxlen: 22
91.206.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:16:14:21:06:3d:45:bd:34:ef:3e:cc:69:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ba6cce7ad35118e1a5a8630941ff259a4806168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:92:c0:3d:13:a1:fd:b4:cf:ee:91:26:77:
86:bd:08:2f:a1:aa:4a:73:45:2c:e7:3e:94:dc:26:
0c:20:84:42:2a:71:7e:3d:0d:8d:16:7e:8b:ce:61:
59:29:96:f5:4c:2a:07:0d:71:e5:70:df:de:d2:e1:
55:3b:cb:e8:78:73:79:5d:9f:b2:e3:85:0a:fe:bb:
12:fc:fc:21:27:dc:97:3d:dd:38:89:5b:b4:e8:07:
6b:c9:e4:89:f9:a8:38:a8:19:a3:6b:c1:d7:74:97:
78:6e:eb:87:33:c2:80:f3:36:8b:4d:57:bb:d1:aa:
e0:14:65:88:04:f9:82:96:0d:d6:81:89:99:a3:01:
45:df:1a:a7:3d:f7:e3:71:99:b8:26:3e:84:a8:b2:
02:49:54:25:60:14:3e:04:fa:89:7f:d8:b9:89:24:
b0:5f:7b:90:e4:58:d8:fa:ca:33:14:8f:34:04:ed:
fe:8b:55:64:9f:89:87:42:24:61:cb:13:ac:54:33:
d9:08:4c:7d:f3:ab:90:3b:6d:fa:ae:63:92:bf:50:
85:87:d3:7d:6e:5d:7d:72:9a:c1:4b:ef:b5:ec:3f:
08:ba:41:e1:74:8b:37:80:6f:aa:29:a7:b0:cb:fc:
d7:5e:1d:ae:31:58:0f:c4:44:8f:d3:95:5d:a7:11:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:CC:E7:AD:35:11:8E:1A:5A:86:30:94:1F:F2:59:A4:80:61:68
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/K6bM5601EY4aWoYwlB_yWaSAYWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.20.0/22
91.206.181.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3e:28:b8:1e:e5:ee:53:55:06:7e:fe:0e:65:17:b7:14:0f:
5c:50:01:4e:b5:44:3e:70:93:cf:20:d3:b9:4e:63:9f:48:cf:
eb:ac:52:21:c6:65:64:ee:7a:01:58:cf:0f:e2:50:9d:0c:f3:
1c:d7:43:3f:dd:68:87:59:64:5f:35:1a:9c:0d:cf:35:cb:0a:
a6:e9:2f:e8:5b:48:cb:a5:3a:d9:ac:55:d4:63:fa:94:36:ab:
2b:39:9b:d2:a1:b4:e7:58:e4:f2:27:4b:c8:5a:83:47:90:53:
2a:31:c1:06:8d:07:1a:b5:b0:ad:36:0d:4f:8a:e1:46:04:db:
52:18:1a:f9:68:93:4e:d7:c3:d7:27:0f:5d:c0:68:44:6e:a0:
9a:57:60:01:0a:53:1e:fa:d3:92:fb:09:1c:39:24:de:0b:6d:
d3:c6:c6:fb:ed:d5:06:2c:64:6d:5c:17:0d:88:2a:4d:56:5b:
01:cb:da:53:3c:af:ef:98:37:6d:b0:21:4b:b7:fa:6f:72:37:
0e:d7:7d:99:3f:24:c4:e9:f7:80:cc:08:5f:c7:e1:2c:39:85:
7e:e9:93:ee:ca:63:1d:1b:52:70:56:d3:81:91:82:fa:e2:da:
01:ee:36:3e:c4:ce:41:22:a5:0d:46:fd:c4:7b:8a:40:f3:89:
e5:ef:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:53 2025 by rpki-client