Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/9gdq4DPxWANqV88tyEbEG8Ldy2s.roa
File: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (raw, json)
Hash identifier: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=
Subject key identifier: F6:07:6A:E0:33:F1:58:03:6A:57:CF:2D:C8:46:C4:1B:C2:DD:CB:6B
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDA2ECDA0C2C47DCCE436623CB6B5D
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/9gdq4DPxWANqV88tyEbEG8Ldy2s.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24739
IP address blocks: 91.108.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a2:ec:da:0c:2c:47:dc:ce:43:66:23:cb:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6076ae033f158036a57cf2dc846c41bc2ddcb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:c8:fa:18:06:63:1c:91:27:9e:f8:90:31:
4c:4b:23:27:8d:ea:9a:2a:8c:94:c2:63:a5:72:8e:
d3:c5:5a:df:b7:cb:c9:40:fe:bd:3b:05:1f:12:93:
95:40:85:9e:89:fc:04:37:d3:1c:a3:1c:9d:e2:0b:
b4:d7:12:90:6d:07:24:e3:30:5c:7e:ba:cb:9f:54:
ab:48:27:4d:6e:b3:ea:d4:91:52:6a:ac:46:e7:03:
a7:22:9e:a1:24:cb:29:d6:f5:e3:12:af:c0:b9:7b:
10:e1:92:ba:b8:6a:ca:5c:d1:f1:19:e1:e3:a1:c8:
35:86:74:fd:5b:f4:2d:af:52:62:dd:a6:be:40:64:
35:36:69:06:4e:59:78:6d:ed:83:e3:20:03:aa:ac:
19:79:5c:5b:b3:4d:e1:45:91:07:49:cf:8d:29:9b:
57:3f:86:da:a0:d8:85:b3:f1:e6:72:3f:6f:c6:fa:
17:4c:0f:ef:95:23:e2:f8:03:81:a0:f9:74:39:3c:
93:1e:d7:0b:a4:2e:41:7d:42:76:42:11:d6:0f:c6:
cb:e1:3e:84:34:0e:a6:5f:42:49:0e:f0:c6:52:0d:
13:9f:26:e6:3f:80:e2:86:8b:ff:8c:47:df:c0:42:
f9:88:b6:4f:8d:a6:15:eb:d1:91:90:35:a5:30:b4:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:07:6A:E0:33:F1:58:03:6A:57:CF:2D:C8:46:C4:1B:C2:DD:CB:6B
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/9gdq4DPxWANqV88tyEbEG8Ldy2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.43.0/24
Signature Algorithm: sha256WithRSAEncryption
be:8e:e8:9d:83:a0:35:48:1b:3f:1e:47:ea:41:3e:b3:01:1b:
81:1f:3d:73:24:90:ea:35:e7:31:9e:40:f6:8b:bf:36:a6:82:
65:c3:36:12:22:db:37:d8:b9:18:cb:e1:02:f5:81:f6:9b:27:
e5:fd:b3:e4:22:20:d4:6a:39:32:f7:43:d8:6a:de:3d:06:22:
c9:c6:6c:ac:f5:55:3f:27:eb:9d:c9:3a:82:10:ef:24:2d:af:
a3:91:d4:f8:02:54:67:87:07:30:f7:81:f4:1d:d5:d3:e0:0a:
06:61:67:99:b0:96:25:0e:aa:0c:4e:99:0d:6b:d2:2d:43:c6:
fb:4d:bf:da:f7:5f:7a:9f:5e:3d:d4:33:b7:d0:63:de:39:30:
51:67:95:48:83:56:b0:0b:99:eb:fb:93:43:8b:af:82:bc:2a:
69:18:e2:11:fc:84:25:19:8b:17:57:94:de:ce:a3:08:90:a1:
3d:b3:91:eb:5b:09:ff:52:80:75:de:8a:ed:02:18:85:73:9d:
45:15:c4:ab:1e:ff:44:56:e3:29:1e:3d:2d:39:dd:ba:42:a2:
5d:c2:cd:a9:72:60:b2:35:ee:b4:86:51:08:70:19:9d:42:a5:
7f:2e:47:e4:95:8e:d5:2d:fb:da:f8:86:6b:5c:2f:20:43:76:
a2:4f:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:13:27 2025 by rpki-client