Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/aW7CIH9THP_A_IUSjPSDQj4OB_s.roa
File: aW7CIH9THP_A_IUSjPSDQj4OB_s.roa (raw, json)
Hash identifier: 3CR9jYGSAUnr8tm9+NOJlM2eXyEyWaUsyQOyrnBdR0Q=
Subject key identifier: 69:6E:C2:20:7F:53:1C:FF:C0:FC:85:12:8C:F4:83:42:3E:0E:07:FB
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 019428230F6AB094426417791A6CE8BEAC1B
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/aW7CIH9THP_A_IUSjPSDQj4OB_s.roa
Signing time: Thu 02 Jan 2025 17:49:33 +0000
ROA not before: Thu 02 Jan 2025 17:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39077
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:0f:6a:b0:94:42:64:17:79:1a:6c:e8:be:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jan 2 17:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696ec2207f531cffc0fc85128cf483423e0e07fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:d2:80:45:ec:6a:9a:fb:17:33:ee:21:11:
12:25:c5:82:ee:cd:22:0c:5a:9d:9b:05:60:10:32:
b5:ed:ab:79:3b:30:da:ec:cd:9f:01:15:70:3d:2a:
ae:e1:77:ed:25:60:8a:eb:8d:af:2f:54:c3:72:0f:
dd:79:b1:3d:88:7b:0f:a3:95:a1:b1:3a:0d:d7:6b:
12:4e:58:06:df:d9:50:69:82:39:39:79:5a:52:00:
95:ad:ca:49:22:e4:b5:fa:d0:2e:1d:80:5d:64:54:
54:5b:51:34:19:d4:07:76:9f:e8:c1:8a:5e:b1:c3:
f5:e2:76:9a:d5:7d:3e:20:b4:8f:7b:45:3c:aa:c7:
58:38:08:98:d4:aa:3d:77:fd:18:22:b5:30:5f:5a:
b9:8a:cb:26:80:6d:f3:56:29:c5:a3:db:45:f7:ab:
02:09:d1:e4:6a:55:3a:1f:ec:57:ae:ab:60:84:9f:
20:f6:f3:08:2f:20:65:c2:68:a7:82:32:1f:a2:45:
9b:2f:9b:96:2e:4d:4a:e9:80:99:12:2d:76:c6:0e:
23:ef:f1:8d:82:c2:ec:91:c5:f7:21:ef:8d:aa:24:
84:3b:f9:1a:bb:8c:31:64:5d:b9:90:1e:03:9f:7f:
25:06:0a:16:da:12:7c:d8:d5:b0:16:cb:74:03:a8:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:C2:20:7F:53:1C:FF:C0:FC:85:12:8C:F4:83:42:3E:0E:07:FB
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/aW7CIH9THP_A_IUSjPSDQj4OB_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d2:d5:73:f3:53:b5:5b:cf:10:03:e2:c1:e3:35:d0:5b:09:
6e:86:44:62:9c:55:da:50:58:bb:31:b3:b5:a7:97:33:ba:ba:
3e:ed:e5:3d:4e:13:d5:e6:93:01:a9:34:01:cf:27:71:44:31:
ee:d7:61:e7:9f:8d:d1:1f:bc:5a:96:25:96:b3:a3:3a:75:e1:
69:56:7c:96:b5:07:22:f0:23:f9:cc:56:dc:d0:7d:ac:f3:88:
eb:66:5f:64:75:9a:5a:94:ce:cb:9e:10:80:ec:ba:e2:0c:5b:
bb:23:af:6a:68:c1:42:6a:03:58:4c:9a:dc:82:7a:22:98:82:
72:8f:13:3f:f3:b4:e5:8d:c0:09:d3:e1:3c:f0:1c:d8:1f:9b:
d2:9a:d2:67:a7:8f:93:40:e2:ef:53:ea:ce:b5:51:0e:86:db:
cd:36:00:cb:1c:ef:b4:05:8e:5b:71:2c:cc:60:fd:48:b5:80:
f6:bd:48:2f:12:c9:68:7b:87:12:60:e4:1a:fc:d2:21:ba:e7:
12:2e:5f:2d:cf:fb:44:fd:57:08:54:f1:09:93:aa:db:14:48:
69:b6:f0:75:23:78:e5:2e:6b:46:44:c3:f2:f1:74:92:11:35:
8e:d7:77:34:63:26:aa:40:19:a9:65:71:88:f9:bb:29:9f:59:
ca:0b:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:32 2025 by rpki-client