Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa
File: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (raw, json)
Hash identifier: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=
Subject key identifier: 88:6D:90:8F:C9:FA:7D:9C:3E:1A:2A:ED:CC:68:62:89:1E:15:C1:12
Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial: 0194266AC2C8BAFE5039CB7FFBC6A8D1D695
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa
Signing time: Thu 02 Jan 2025 09:48:38 +0000
ROA not before: Thu 02 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50572
IP address blocks: 91.223.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:c2:c8:ba:fe:50:39:cb:7f:fb:c6:a8:d1:d6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Validity
Not Before: Jan 2 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886d908fc9fa7d9c3e1a2aedcc6862891e15c112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:94:92:6f:cd:a7:d7:25:dc:5c:67:6b:bc:
07:1f:24:fe:39:57:7e:ea:c9:4b:61:b0:02:0a:1a:
f0:54:39:ab:8a:c3:4d:df:a3:29:e1:44:55:e5:ab:
d8:13:c9:69:0c:e7:cd:10:7a:95:17:13:a9:d6:bb:
b5:f0:98:df:27:b6:aa:be:d9:42:07:46:e9:e3:b7:
a5:b5:0b:8a:9b:aa:3c:c7:00:4d:dd:0d:49:9c:36:
72:4e:35:28:aa:f2:b4:7b:ca:58:4e:44:be:17:e8:
ce:3d:3f:5f:28:72:a7:48:75:35:0f:0d:5e:70:82:
c6:3b:cc:6c:d9:51:b1:9d:bd:11:5e:6e:84:bb:46:
0e:3b:4d:db:12:db:51:61:4b:2e:51:be:37:1d:b8:
25:9c:41:34:7e:02:39:81:4a:86:b8:47:4d:c1:41:
d4:0e:dc:23:af:aa:64:2f:5d:f1:d6:91:57:fa:7f:
9c:bd:ef:32:bb:0a:cc:a8:3f:3a:e6:48:e4:fe:cb:
3a:78:98:e5:6d:68:d6:44:aa:59:92:df:88:a4:6c:
80:38:ee:15:bb:96:d9:d8:82:9f:97:59:b0:b3:da:
05:0c:f0:f2:26:3a:35:ba:64:91:d8:1e:43:4b:09:
ec:17:18:2d:6c:fc:92:b1:02:c8:1d:f9:c0:54:cd:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6D:90:8F:C9:FA:7D:9C:3E:1A:2A:ED:CC:68:62:89:1E:15:C1:12
X509v3 Authority Key Identifier:
keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.47.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4a:d7:ce:93:cd:fe:f4:1d:86:7b:64:5e:e3:c5:c2:c7:83:
e6:c8:5b:bf:0a:10:4f:80:4c:99:da:d1:be:99:0f:03:4c:01:
06:28:d3:12:54:73:0c:00:1f:58:76:d1:69:14:ad:c3:39:9e:
e1:8c:b8:0b:30:2c:17:96:f7:44:6a:c6:e7:ec:a3:1b:e1:cd:
79:37:80:98:88:2d:9f:0a:43:74:ee:f5:ba:b7:3b:a4:d3:cb:
d6:d0:d7:39:4b:51:24:a4:18:b0:6e:a6:b3:c5:cd:bb:33:b5:
3a:69:62:e4:b1:83:d6:dd:76:4a:3e:9a:32:e3:a2:3c:04:37:
a6:a3:1c:e2:2a:ee:13:c8:05:25:2c:72:5f:b5:0a:ce:e6:c8:
57:c0:0c:cd:a2:79:7b:a3:1b:ef:8a:e7:fa:ae:d8:55:30:3d:
fd:1d:91:fe:12:74:b9:69:cb:7e:97:40:0c:00:1d:bd:5e:3f:
ba:eb:4f:e4:0f:0b:c8:4a:d8:ce:66:64:c4:ef:47:31:f8:75:
12:84:cb:a1:6e:be:0f:f7:a7:fb:c3:b7:40:b0:23:d2:4a:d9:
a9:ed:4b:cb:f8:07:30:14:a7:bb:a5:f8:a7:30:5f:b0:a4:98:
24:9d:c3:a4:fd:5d:1c:6a:5c:a0:5e:59:b7:65:aa:90:34:d6:
fb:44:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:48:21 2025 by rpki-client