Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/RiW5W8SWQ6-vverb8NRdVDj6CjU.roa
File: RiW5W8SWQ6-vverb8NRdVDj6CjU.roa (raw, json)
Hash identifier: 4IAwVod5pwysrRco/iSy8Lzx8KDdHZ/Q8/hyLLW5E4w=
Subject key identifier: 46:25:B9:5B:C4:96:43:AF:AF:BD:EA:DB:F0:D4:5D:54:38:FA:0A:35
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019421441390FC0779DA0D9160D9196720FD
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/RiW5W8SWQ6-vverb8NRdVDj6CjU.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61154
IP address blocks: 91.238.142.0/23 maxlen: 23
193.9.127.0/24 maxlen: 24
195.78.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:13:90:fc:07:79:da:0d:91:60:d9:19:67:20:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4625b95bc49643afafbdeadbf0d45d5438fa0a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:8d:80:dd:10:12:05:2a:e5:f0:13:46:13:
66:a9:f6:9d:e7:a5:7e:fd:ef:cb:80:26:80:a5:a1:
4b:ea:76:5a:d3:89:03:b4:06:be:88:43:b0:00:7c:
42:22:e4:6f:6e:9b:1f:06:52:ed:db:2e:1b:ce:cf:
9a:03:4b:bb:25:0c:ab:77:b8:bc:d6:1c:de:28:9e:
fb:c6:6b:e1:a7:df:30:5f:d7:a3:96:29:53:7a:85:
c8:ac:28:f0:62:de:5b:15:db:53:5f:3f:23:9e:a9:
15:55:df:e4:a4:aa:62:e4:8f:4e:fd:98:5d:9f:19:
80:2a:c7:a4:ad:49:56:64:d7:85:ec:12:31:de:b1:
2f:b1:78:c1:19:a9:ac:90:e4:66:7c:f9:e9:20:6f:
4d:76:9d:3a:30:52:f6:c4:6a:e7:32:8a:3f:3a:d5:
5e:d7:d5:7f:ef:74:d7:d7:ae:38:96:a4:c2:07:ee:
bf:00:8b:bc:14:31:c3:c5:8a:53:36:29:fb:5b:4b:
d6:9c:1e:10:cf:1a:d4:77:9b:d9:1a:13:78:a9:9a:
e2:07:a6:51:8c:f2:d7:b2:ae:81:6a:2d:1a:cd:fb:
57:19:c1:67:94:91:91:ee:eb:b8:7e:ce:d5:8a:40:
5c:62:72:4b:0a:83:25:86:ad:a3:42:cc:78:ae:56:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:B9:5B:C4:96:43:AF:AF:BD:EA:DB:F0:D4:5D:54:38:FA:0A:35
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/RiW5W8SWQ6-vverb8NRdVDj6CjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.142.0/23
193.9.127.0/24
195.78.236.0/22
Signature Algorithm: sha256WithRSAEncryption
79:be:c6:8a:4d:7b:2b:48:3e:95:d9:c3:0d:08:ae:6e:d9:36:
2c:75:03:85:01:4a:62:2c:8a:5f:18:57:98:71:4c:a3:2f:65:
02:37:39:2e:01:8d:e9:a4:da:f3:6c:41:6b:37:2e:ee:82:d5:
8a:f1:b7:0f:30:69:c5:f7:79:06:6f:8b:ee:bf:0c:8c:f0:79:
3f:8b:3d:d4:16:1d:98:44:c9:33:6c:46:53:a4:d6:ed:dd:c2:
93:9e:47:ba:15:de:ed:d0:f8:1d:82:6d:9b:80:a7:3b:79:53:
63:40:86:5a:31:16:6c:76:3a:1a:52:fe:27:c9:9e:0d:f3:95:
88:b9:7a:fc:d4:8b:98:a6:b8:8d:d3:f1:04:e5:5b:46:34:02:
6f:ec:3f:23:d2:4c:54:76:a8:c8:dc:6b:db:ce:59:78:bf:01:
60:b6:73:29:f9:7d:3d:4a:2e:4c:bf:9a:95:23:95:87:74:4b:
b2:dd:eb:2d:74:82:a6:60:47:c9:c7:2a:ad:53:99:27:cc:f6:
85:3c:70:29:d5:11:69:1d:8b:80:41:ee:94:5b:b1:40:14:f6:
8b:06:3b:4b:1e:5b:27:2c:18:6b:7c:97:6e:49:80:2a:6c:ed:
9d:57:d9:f7:e1:22:51:7b:58:a5:d8:e9:ab:f1:fd:91:09:13:
da:c9:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:11 2025 by rpki-client