Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/ODrsbMjG9qdaweSVu2hQiAWib_4.roa
File: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (raw, json)
Hash identifier: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=
Subject key identifier: 38:3A:EC:6C:C8:C6:F6:A7:5A:C1:E4:95:BB:68:50:88:05:A2:6F:FE
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 01942521C49DAB165CB7487DA47303C32D8A
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/ODrsbMjG9qdaweSVu2hQiAWib_4.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 91.200.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c4:9d:ab:16:5c:b7:48:7d:a4:73:03:c3:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=383aec6cc8c6f6a75ac1e495bb68508805a26ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:5a:b7:70:c2:ce:59:42:15:97:a8:28:b0:
56:45:d1:cc:9c:39:e8:6e:0f:7e:ea:e4:18:2b:be:
27:d5:78:db:5c:75:f8:de:a5:db:d9:6d:93:e8:4b:
06:f3:c6:0f:c3:1a:16:e4:78:16:0d:a4:7a:c7:27:
d3:ac:7a:e2:bd:bf:e8:b5:8e:05:2d:2a:07:94:e6:
7b:b9:f0:95:30:0f:b3:5c:b8:92:e9:af:08:96:c4:
4d:2c:9b:6e:37:76:c6:7d:01:4c:04:ab:74:2f:2f:
4a:8a:5a:94:6f:19:1e:6c:e1:e0:c3:9d:d5:15:bd:
76:bc:03:46:bc:00:77:7a:a7:c6:52:6a:3b:19:f7:
b6:c7:02:b7:29:1b:2a:a4:3c:f5:05:92:67:05:3d:
7c:55:78:dc:c7:3c:fc:6e:50:28:4a:ed:b9:de:62:
eb:2a:e7:3b:52:69:97:7d:b7:e5:95:eb:15:8d:7a:
28:3b:53:bb:6d:7d:b7:e2:b4:7a:84:97:9d:46:74:
d4:c0:0a:b6:0c:ce:78:ca:e6:5a:20:a4:16:3b:99:
ad:72:4e:af:2a:5f:ba:19:85:8d:a6:cf:41:0c:b2:
58:9b:4d:84:a7:81:0a:3b:d3:e1:9f:d5:87:12:84:
46:c9:ee:15:74:6a:e5:e0:da:d6:2f:76:08:06:3b:
80:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:EC:6C:C8:C6:F6:A7:5A:C1:E4:95:BB:68:50:88:05:A2:6F:FE
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/ODrsbMjG9qdaweSVu2hQiAWib_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.59.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:3a:55:5f:24:03:c3:a2:f8:92:3e:7a:bd:4f:87:1c:b5:6e:
c3:02:1e:0d:f6:4c:41:fe:8a:c7:f9:b0:2c:5b:51:1b:ce:dc:
9a:5d:61:7a:11:e4:f0:25:d6:37:87:92:60:d0:38:da:4d:26:
cd:1c:6a:02:33:d1:65:96:13:2b:cf:5b:c8:64:4f:d1:96:66:
8e:6d:62:a3:3b:b8:46:dc:17:d3:0c:8a:b9:db:40:a1:4a:f1:
49:c5:c6:c2:bf:10:35:67:5f:e4:d7:53:2a:88:38:57:e6:58:
a7:d3:c6:2b:0c:93:02:9d:4d:46:77:17:d9:4c:f7:a2:71:5d:
77:49:3a:2d:3f:aa:b2:06:66:23:e8:0c:7b:ad:0f:05:a0:cc:
96:c4:44:93:7f:a1:33:d8:5a:6f:d7:af:1f:a0:f0:e0:15:17:
eb:ae:01:33:1d:67:2e:b8:15:e3:5d:c2:27:60:df:12:a0:4a:
47:d1:03:0f:71:c7:2b:09:5c:7e:78:58:fb:d9:a1:15:bc:e8:
da:b6:28:86:27:35:45:b9:28:2e:a6:f8:fd:b2:4e:63:cd:99:
37:ad:39:bc:21:da:d8:10:a7:c3:bf:1a:be:e5:61:d1:e6:f5:
04:f6:31:ec:b3:da:12:6f:8b:4d:7d:3c:1b:55:bb:32:21:ec:
bf:fe:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:57 2025 by rpki-client