Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa
File: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (raw, json)
Hash identifier: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=
Subject key identifier: 09:97:CD:D5:21:37:29:CF:44:95:08:97:F5:CF:F0:CA:90:6E:09:1E
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 019421443445C01A77AC324AF227AD150D85
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31244
IP address blocks: 91.216.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:34:45:c0:1a:77:ac:32:4a:f2:27:ad:15:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0997cdd5213729cf44950897f5cff0ca906e091e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:46:dd:69:70:1b:5b:77:48:8e:65:30:c5:
4e:1e:67:f8:05:7e:a5:03:f1:00:97:c4:37:d8:06:
ac:db:8d:a8:69:42:b5:38:41:4b:ad:ef:e1:36:73:
df:40:5f:74:6a:54:26:f0:91:13:90:70:cd:c3:d0:
02:ef:0d:36:c4:c3:67:43:87:9c:68:23:cb:8b:55:
f3:d8:c7:34:74:93:90:10:dc:fc:5f:ec:bb:ab:35:
c9:5f:7a:45:f0:5b:0c:03:79:68:52:23:8b:3a:d0:
89:99:27:39:94:93:c3:4c:7e:d2:3c:09:58:0c:58:
ce:70:5b:9a:c0:93:d9:68:eb:53:f3:54:04:bd:6b:
33:6d:a4:40:f0:87:21:66:a9:0e:48:f0:7e:fd:0a:
c2:42:89:a7:91:fe:cc:47:8f:17:d3:a8:4d:47:61:
cc:e4:4c:20:c0:92:23:44:ea:ce:c0:2d:69:fd:ae:
ce:bc:d4:28:d5:f8:b3:85:03:f6:41:02:c1:99:f4:
2f:18:6d:ab:ca:9b:7f:15:78:32:48:59:ba:3d:ab:
ba:48:45:2e:b7:b7:3b:76:ee:80:8c:cb:da:2d:f1:
ea:af:f8:7b:ad:ba:ed:d0:a8:3a:36:31:3b:ee:e8:
75:a0:a4:84:05:e4:b8:bc:4f:d5:22:87:89:2d:e0:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:CD:D5:21:37:29:CF:44:95:08:97:F5:CF:F0:CA:90:6E:09:1E
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.156.0/24
Signature Algorithm: sha256WithRSAEncryption
36:26:f5:9a:f9:d1:61:be:dc:c3:12:dc:1e:5b:76:6f:f8:8d:
7f:47:a3:90:4b:e8:e6:65:10:da:bd:26:64:20:94:4f:d8:45:
9f:4b:e2:c5:26:e8:b2:fc:ad:00:bb:31:6b:8b:5e:a0:98:41:
b7:80:0d:32:70:3c:42:b9:a4:97:55:6a:7d:1d:a7:0f:24:23:
db:65:32:da:27:40:a7:1e:2b:53:3b:73:f3:c9:e4:a2:8f:ae:
1f:f8:85:f3:d4:bb:fc:36:30:10:59:df:5d:49:cd:56:4c:37:
32:b1:c7:7c:8d:8a:8b:51:83:32:80:cd:1b:ab:a0:da:83:ff:
20:e3:12:1b:19:18:e2:97:16:29:43:36:7a:48:a9:53:14:1f:
17:78:64:71:bb:24:96:35:9a:fd:8e:16:e8:4a:51:a4:7e:34:
cc:51:b6:85:62:51:38:e9:83:7e:e0:e1:80:3b:74:66:95:62:
e7:5a:d3:fc:38:96:d1:44:25:75:0a:4a:02:4e:3d:fe:8a:ac:
a7:3e:e9:0e:26:a8:0b:44:2d:4b:c6:b6:27:c8:5d:c6:76:f7:
c3:7f:31:98:ef:70:3e:36:cc:40:ba:fc:f8:42:99:5a:66:2b:
19:1c:41:07:57:d4:98:93:98:c3:3b:15:b1:3a:e5:cc:50:35:
5f:a1:a5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:47 2025 by rpki-client