Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa
File: 9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa (raw, json)
Hash identifier: DY2LhwUZIsCiZof3w2j02FU4GvRZOJ3xOlslZBpIU3g=
Subject key identifier: F4:7A:E3:F8:40:3E:1A:46:28:A6:A6:EC:3E:6D:D3:D4:9F:6B:71:D8
Certificate issuer: /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial: 0194274757476CE29004CEFE4C12BD804BCC
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa
Signing time: Thu 02 Jan 2025 13:49:34 +0000
ROA not before: Thu 02 Jan 2025 13:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197033
IP address blocks: 91.220.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:57:47:6c:e2:90:04:ce:fe:4c:12:bd:80:4b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Validity
Not Before: Jan 2 13:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f47ae3f8403e1a4628a6a6ec3e6dd3d49f6b71d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:e8:06:71:a8:11:05:dc:24:53:16:dd:52:
20:c4:c8:f0:7b:da:36:f2:3b:3c:2b:d3:4b:9c:60:
f7:d1:23:1c:7a:17:93:0d:89:1c:98:5b:c8:05:f0:
00:d3:c3:f9:8e:28:ae:a6:0e:47:bc:20:d1:f5:98:
31:c2:3b:dd:6a:2f:0b:c1:3e:ef:16:6b:92:11:9e:
12:51:b2:75:1a:5a:3a:35:32:24:e1:59:11:62:76:
a5:cb:99:d8:be:ab:ec:38:d2:c3:62:6e:47:87:bc:
d5:f5:07:f6:af:6a:2e:d3:a2:9c:58:c1:5f:24:84:
b3:56:7e:23:98:8b:c4:a9:73:01:c0:03:9a:90:29:
44:54:6d:06:ee:a1:09:75:b6:e1:d7:61:e9:b0:b1:
33:ad:58:ba:7d:85:42:a9:1f:a3:72:3f:85:00:02:
73:dc:96:2a:3f:41:7f:00:c5:4f:c8:1b:76:fa:79:
04:87:82:6f:d7:4b:05:5f:a6:62:21:28:56:2d:39:
5b:91:48:e1:8f:d0:fa:96:3c:e7:27:30:9f:12:ee:
d7:5f:b0:d9:19:79:8f:7e:22:a5:e1:27:e4:55:f1:
f9:df:eb:58:3e:de:db:1c:65:3b:e8:ee:de:4f:91:
b9:e3:eb:2e:ca:31:be:27:9c:c1:90:e7:8c:db:3a:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:E3:F8:40:3E:1A:46:28:A6:A6:EC:3E:6D:D3:D4:9F:6B:71:D8
X509v3 Authority Key Identifier:
keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/9Hrj-EA-GkYopqbsPm3T1J9rcdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:51:9a:8b:35:9e:fb:4f:f4:16:84:8b:d1:07:d9:55:76:bb:
33:05:ac:3e:14:91:d9:4f:58:d3:16:2b:23:96:f0:57:d3:9b:
e9:01:60:05:ac:e3:78:f3:96:f3:17:cf:40:00:19:f1:34:4e:
9e:28:f4:ec:b5:10:56:29:b2:a3:09:bd:27:b3:84:1b:f4:8c:
83:1b:30:ab:7f:99:64:00:dd:ad:c2:4c:6d:2c:37:7e:e1:6b:
e8:f3:1a:3d:d3:b1:8d:3c:a3:57:4d:d7:82:f8:07:a8:f7:af:
fe:89:2f:1e:7d:02:ea:48:37:ea:39:2d:72:91:70:7d:73:89:
04:ac:8d:f6:65:3c:f2:fe:61:80:d2:18:f4:2c:1a:7d:f7:37:
c0:ef:ea:7f:a0:cc:c5:08:b7:79:74:7f:bc:d3:cf:45:63:5a:
5b:31:a2:0f:17:df:eb:a5:91:1a:f3:dc:fe:c7:04:d6:f1:19:
ff:c5:92:77:df:47:a2:9d:8a:b0:71:76:ce:4f:3b:21:90:ac:
1b:f8:3d:53:ee:5b:d9:1c:5c:3a:c9:72:c5:2a:52:2f:aa:3e:
a1:61:69:a3:5f:bb:03:90:b5:63:70:4d:70:98:e9:76:ab:e4:
25:70:2b:63:b6:82:ed:de:fc:fc:25:15:df:aa:d7:ba:e0:83:
17:56:30:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:28 2025 by rpki-client