Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ag6XaEkyYHyWFP_-xW31nxAHdG4.roa
File: ag6XaEkyYHyWFP_-xW31nxAHdG4.roa (raw, json)
Hash identifier: HhTYik5hcg8bQM9D6RIkoSRf+CtXTEvQdXGUjDccfr4=
Subject key identifier: 6A:0E:97:68:49:32:60:7C:96:14:FF:FE:C5:6D:F5:9F:10:07:74:6E
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019426D904435D62E1FCE90DD8C41547AC74
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ag6XaEkyYHyWFP_-xW31nxAHdG4.roa
Signing time: Thu 02 Jan 2025 11:49:04 +0000
ROA not before: Thu 02 Jan 2025 11:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207957
IP address blocks: 91.196.32.0/24 maxlen: 24
91.196.33.0/24 maxlen: 24
91.196.34.0/24 maxlen: 24
91.196.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:04:43:5d:62:e1:fc:e9:0d:d8:c4:15:47:ac:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jan 2 11:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a0e97684932607c9614fffec56df59f1007746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:dc:19:23:a7:9d:4b:8d:7f:8f:a7:b5:ac:
ac:17:0f:7b:3f:f1:b9:27:f4:a1:cf:c9:5d:2f:dc:
9e:9b:2f:e7:1a:e7:6c:8d:41:b3:eb:8b:e6:46:2b:
c0:b6:55:6b:ee:4a:c3:d6:68:9e:66:0e:b8:6a:f7:
4f:9d:53:1c:4c:6b:81:86:0f:09:2f:31:42:f6:e3:
c4:1b:60:23:06:ad:7a:37:98:21:fc:63:7f:c5:fc:
bd:4e:11:39:a4:e0:3c:b7:4e:36:0c:81:1a:05:f0:
40:da:a3:67:2a:52:9d:ed:f8:db:54:29:38:d6:98:
40:3a:bb:74:61:da:cd:1a:ca:c9:43:b2:29:2e:6b:
54:c9:09:ec:61:2e:96:58:8e:c4:a0:b3:ed:c8:7d:
a8:ae:3f:a1:32:f0:78:c3:4b:aa:4f:9a:f2:f0:24:
4e:73:17:f4:20:6c:fb:7f:3f:6e:ff:12:a9:fe:0d:
d5:75:eb:a9:d4:32:75:7d:f6:66:6e:67:04:2a:2b:
fd:7c:83:b8:0a:de:b6:22:20:67:b3:99:22:e2:61:
c1:3e:ba:4b:e8:1d:00:e8:e2:68:9b:a1:12:d1:b3:
bc:fe:40:d3:56:b6:e4:ed:82:a7:49:bc:0e:b5:47:
ca:43:c0:be:a0:20:c0:eb:68:e7:39:5e:c2:00:84:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0E:97:68:49:32:60:7C:96:14:FF:FE:C5:6D:F5:9F:10:07:74:6E
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/ag6XaEkyYHyWFP_-xW31nxAHdG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
93:6b:a8:b3:a5:81:d5:68:b8:29:ce:61:2d:5b:41:ae:52:de:
97:f0:f8:4a:5d:0b:ef:1c:37:47:45:30:dd:f2:77:2f:9d:6a:
10:f3:bb:40:ef:49:d0:e1:46:e1:40:30:fa:95:a1:5e:81:bb:
1c:fc:dd:1f:7d:98:5f:2d:0b:66:14:41:1e:cb:cf:63:4e:0e:
c7:ba:ba:e2:f3:a2:86:42:5a:80:24:58:e1:0d:27:b4:bf:0f:
cf:22:77:66:5f:6b:30:75:5e:9b:e3:a5:ed:9c:8a:4c:22:76:
ae:8b:c4:85:56:f7:01:1f:a9:58:eb:16:a1:ff:27:74:46:ed:
c3:45:af:08:4d:c4:3f:a4:8f:58:b4:25:02:48:a9:71:55:2d:
02:13:46:e9:66:6d:a7:c9:64:22:da:bf:93:27:09:59:9b:85:
74:4c:e0:ab:23:6f:0d:73:d1:5a:c6:3f:c3:ec:65:91:6e:ce:
3d:57:7c:4a:65:27:7e:0e:0e:8c:6d:6a:81:ab:e0:0e:06:0e:
84:c8:d7:ac:5c:8f:4c:ea:62:a7:3f:68:47:ce:06:48:e8:dd:
05:ae:33:b6:1d:cf:20:00:c4:2e:90:98:7d:98:5b:a2:f6:a4:
92:dd:9f:99:84:c0:37:99:9c:d9:26:ad:f5:a8:48:7a:5e:52:
04:aa:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:54 2025 by rpki-client