Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa
File: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (raw, json)
Hash identifier: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=
Subject key identifier: 64:F8:15:0D:12:3F:1B:FC:20:8D:52:DD:F2:43:53:1E:D8:C4:DF:76
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 0194266BB65BE622DFA98A3D81F820E29639
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51193
IP address blocks: 91.216.198.0/24 maxlen: 24
91.216.198.0/25 maxlen: 25
91.216.198.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b6:5b:e6:22:df:a9:8a:3d:81:f8:20:e2:96:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64f8150d123f1bfc208d52ddf243531ed8c4df76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:e7:ef:40:03:99:2f:77:e3:b0:d0:4a:51:
5e:fb:85:a2:b9:8f:d6:70:78:70:38:50:ad:0e:bb:
0c:2d:c1:56:cd:04:0e:20:72:28:f6:0f:2f:f4:d8:
29:af:76:4c:bb:94:f8:1f:15:48:77:6d:b7:1e:aa:
ba:aa:84:eb:08:19:23:f3:d4:d2:96:68:8a:f5:60:
2b:af:15:a0:27:06:ce:8e:54:d4:0e:40:1f:da:8b:
17:d0:43:7f:2b:07:59:6c:95:0d:63:a2:d9:08:d3:
f7:6b:a5:3a:ee:b1:f6:e2:73:49:e4:a3:9d:a2:73:
cb:fd:8f:41:67:5f:1a:66:60:22:c5:ce:66:e9:b4:
de:74:5e:54:0f:9a:33:dd:01:0e:45:b1:c7:64:c8:
86:fc:c6:00:3b:da:d2:17:61:c0:c8:57:37:b7:8a:
58:c9:97:70:c6:cd:74:1d:95:4c:b5:06:06:e3:4b:
3a:41:c1:68:4c:21:b0:d8:e8:04:f1:e8:dc:3c:b7:
cf:68:15:e3:38:df:7c:1f:53:e7:5c:02:7d:98:41:
a6:b5:92:7b:36:15:b2:86:e8:21:31:c9:5f:f9:41:
c9:56:7b:04:b6:8e:58:db:f4:a1:da:86:78:1f:20:
f1:9b:68:60:e5:4f:5e:7a:58:2e:c5:ca:df:7d:d3:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F8:15:0D:12:3F:1B:FC:20:8D:52:DD:F2:43:53:1E:D8:C4:DF:76
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:42:6f:cf:ef:50:88:af:55:16:c7:67:f6:75:20:1e:6a:
17:4d:5d:cf:d0:6f:55:38:d8:db:23:27:9a:70:6e:c1:5d:31:
e7:ef:0b:7f:83:89:8b:5c:0a:c4:a1:a8:30:dd:c0:4a:55:5e:
52:b4:34:a1:84:35:b5:fc:52:70:ea:45:93:60:66:4e:ce:97:
3f:9b:1e:b9:2f:71:f7:cf:bf:6e:cb:fd:39:1b:90:4d:d7:5f:
f3:2e:db:85:00:7d:c0:b8:ed:77:c1:f8:4e:b8:d8:4b:41:c8:
a1:b4:fe:6b:1f:fb:6d:21:2b:de:da:dc:9c:46:3d:18:70:62:
1a:68:6d:3d:e5:75:36:a4:53:4b:b3:c4:3c:43:8b:55:87:37:
04:6f:72:bc:af:ed:c8:a4:9f:f0:6c:8f:25:40:61:63:ed:39:
e5:c8:bb:71:a0:bf:cc:47:6b:bf:68:41:58:bd:4a:00:fa:84:
c2:fd:72:df:51:ba:3f:6f:73:5e:a8:f8:7f:24:e3:58:ee:9d:
3c:72:46:d9:98:89:4b:61:a8:71:4a:71:f3:1a:e2:47:4a:18:
2d:d3:58:c4:c2:20:98:6f:6a:a2:c8:38:52:aa:03:47:e7:55:
b7:81:c2:17:78:27:c4:6a:05:8b:4b:a6:c6:f2:57:8e:4f:c3:
df:83:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:53 2025 by rpki-client