Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/n5jiYoIoGZQqwQOVrCfprt-PApk.roa
File: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (raw, json)
Hash identifier: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=
Subject key identifier: 9F:98:E2:62:82:28:19:94:2A:C1:03:95:AC:27:E9:AE:DF:8F:02:99
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 01941FFAA507907628AE063C9A8879CBEFFA
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/n5jiYoIoGZQqwQOVrCfprt-PApk.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198732
IP address blocks: 91.238.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:07:90:76:28:ae:06:3c:9a:88:79:cb:ef:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f98e262822819942ac10395ac27e9aedf8f0299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:f0:96:5f:ee:0b:39:f7:1b:a5:3d:9d:38:
3b:ef:e5:e2:2c:a8:3a:3b:7a:1c:86:12:13:21:9b:
06:10:a1:1c:e4:ba:67:e7:9a:be:f5:03:93:96:e3:
72:b8:1d:05:9d:2e:e8:b4:2f:0d:fe:fe:dc:f1:1b:
77:0a:2f:bf:aa:92:ce:28:0b:8e:5d:24:9a:52:ee:
40:34:2b:bb:d5:8a:1b:04:2e:5d:28:2b:12:b5:9f:
4d:3d:57:f6:5e:5a:62:df:61:4b:ae:6d:7b:ef:97:
84:b1:8f:4b:61:40:32:21:e6:90:b2:96:82:60:87:
86:7f:7e:2e:8d:49:d7:b6:c7:3a:b9:6f:e0:d6:44:
cd:7f:9b:8b:5a:53:e5:1d:ff:70:e9:3f:d2:63:78:
f2:fe:df:79:65:b8:fe:fe:69:c8:9e:1c:5c:f3:73:
67:79:97:9d:c3:01:9c:7c:10:9c:87:ef:a1:e9:83:
ec:b9:cb:08:98:db:1b:8e:67:14:1f:81:8c:e2:0a:
1d:d7:49:e0:9f:a2:36:d7:a3:6c:17:21:06:b8:a9:
14:75:39:ed:12:80:74:e7:3b:b2:8c:9d:a0:78:db:
87:8a:05:22:db:53:7d:72:6e:78:92:30:d9:dc:3b:
1e:33:7c:12:61:16:9a:84:26:ed:04:4e:52:98:a2:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:98:E2:62:82:28:19:94:2A:C1:03:95:AC:27:E9:AE:DF:8F:02:99
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/n5jiYoIoGZQqwQOVrCfprt-PApk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.220.0/24
Signature Algorithm: sha256WithRSAEncryption
56:70:30:6c:02:04:87:6d:7a:f4:23:b9:6f:b5:57:91:fe:0a:
0c:82:6e:ba:81:47:8e:b8:82:38:d6:a2:dc:e0:0d:29:5b:d1:
a9:48:56:d7:9e:67:ed:b3:48:a7:2d:ae:40:00:df:94:da:1f:
fc:6e:bd:ee:d3:de:7d:fc:75:c9:dd:22:ef:b0:44:03:70:27:
9d:a9:2e:4a:5e:e7:7c:04:e2:9e:40:d1:a0:37:12:17:4e:d5:
16:6d:7d:6a:e4:28:6d:b9:1b:74:46:57:e1:b3:81:f8:72:c2:
22:a0:5b:35:b3:c7:67:69:3e:36:a9:1f:06:2f:47:20:0b:b7:
5b:0d:5f:51:05:7c:60:a8:19:fb:11:8f:1d:6f:0a:e2:b8:aa:
b6:98:dd:9d:7b:44:1e:85:1c:16:c1:fb:d7:f6:57:40:9f:64:
5a:81:b6:21:5e:43:f4:ca:d1:a9:48:57:21:58:78:4f:bd:1d:
fa:aa:7a:b5:69:86:d9:a6:9b:7d:d5:2c:e6:a2:92:e8:36:4c:
12:c8:7f:88:6e:9b:52:a1:f8:9a:e7:08:69:15:25:06:39:75:
8a:34:cb:c6:89:ce:c2:23:8a:e5:f5:6e:11:c3:7d:94:35:9d:
cc:42:8b:27:41:d0:15:ee:6c:65:7f:9a:4d:0b:04:85:78:72:
dd:01:cd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:48 2025 by rpki-client