Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/X6geWX5nM159UJnYLrAlkyag0CM.roa
File: X6geWX5nM159UJnYLrAlkyag0CM.roa (raw, json)
Hash identifier: i2/ukSqH8f8rPwnYXz8bpqJPbVxP6Pdogw7nGkBUWWU=
Subject key identifier: 5F:A8:1E:59:7E:67:33:5E:7D:50:99:D8:2E:B0:25:93:26:A0:D0:23
Certificate issuer: /CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
Certificate serial: 0194221F7B88C40B259B0875FED2CAA6D9BC
Authority key identifier: 12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/X6geWX5nM159UJnYLrAlkyag0CM.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48129
IP address blocks: 91.210.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7b:88:c4:0b:25:9b:08:75:fe:d2:ca:a6:d9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12779763ad3f1f4b5a4a0552c6039496bcff3a54
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fa81e597e67335e7d5099d82eb0259326a0d023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:61:f4:01:fd:73:e9:35:0a:49:dd:44:b6:
18:89:ce:d4:17:b1:12:ad:97:78:d9:08:e3:58:3e:
c0:2a:43:38:77:56:0c:71:4f:0e:27:ea:ca:30:8a:
98:cf:50:d0:47:99:f9:18:ea:a0:ba:cd:cd:1d:0e:
fa:3b:65:fa:30:7f:f5:cf:a2:74:01:82:9b:3b:9a:
df:04:3b:ef:a3:66:a4:de:9e:de:00:81:24:4a:39:
87:c7:02:84:27:78:a7:64:ff:37:de:51:09:6d:77:
ae:d4:af:5b:0d:6c:64:fd:25:ee:93:02:6d:08:d3:
c1:59:7a:e4:d1:98:54:e9:3f:11:6f:03:5e:35:d9:
94:99:dd:8a:6a:bc:48:2d:19:a9:59:57:46:c6:42:
8d:6b:8d:aa:15:c8:1b:c5:af:fc:f8:e7:72:90:1d:
80:16:d2:0f:81:dc:cd:90:f9:21:ef:26:97:b2:4b:
5f:28:fb:4f:83:c3:03:09:1d:3a:f8:b5:91:cf:96:
00:45:3c:9a:4a:d3:db:8a:a2:67:8b:aa:88:9a:58:
84:43:75:28:56:c2:04:e2:f3:4c:c0:ce:6e:fc:b4:
57:be:f9:b7:4e:70:75:a4:bb:af:2e:c4:03:4c:43:
c5:61:13:62:bc:c3:44:67:78:29:05:02:1f:ec:90:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:1E:59:7E:67:33:5E:7D:50:99:D8:2E:B0:25:93:26:A0:D0:23
X509v3 Authority Key Identifier:
keyid:12:77:97:63:AD:3F:1F:4B:5A:4A:05:52:C6:03:94:96:BC:FF:3A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EneXY60_H0taSgVSxgOUlrz_OlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/X6geWX5nM159UJnYLrAlkyag0CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70a8fa-0fc9-4a97-aade-2ac62657f463/1/EneXY60_H0taSgVSxgOUlrz_OlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:8c:65:76:8f:be:fe:c0:a9:a1:63:ef:fc:65:90:59:ad:57:
bf:68:7a:b0:6b:95:a8:4a:b1:03:9e:a2:12:7b:f0:72:b8:99:
b8:d6:79:b7:6d:07:4e:dc:4a:63:e4:d4:22:16:6d:d0:a6:23:
30:81:2f:fc:ad:76:06:ce:49:58:1c:9e:18:00:f8:7c:bb:cc:
07:69:af:6a:e5:e8:59:8d:df:83:71:39:c5:26:a2:98:ef:39:
c3:a0:e8:96:72:5e:95:67:6a:cc:6d:ad:08:a4:f8:6f:df:26:
da:28:12:30:19:93:a2:4d:f6:44:20:a6:b1:5e:b9:54:f8:cf:
de:12:9a:a3:4b:f0:24:c5:f6:46:95:f5:83:cd:ef:d6:43:18:
36:4c:d4:76:51:8a:f3:12:3c:19:cb:ba:04:56:46:ea:7b:18:
3f:3b:47:ac:f3:e0:09:b7:0b:7e:f9:0c:2b:0e:84:05:ff:e6:
c3:0a:6c:1e:93:fa:4f:52:f9:14:d9:17:03:94:27:d2:af:ba:
ee:68:39:45:4d:8e:32:f8:7d:e6:97:9e:4a:07:25:cb:bf:a9:
a7:39:01:31:03:bd:fe:99:cb:7b:91:80:19:4c:48:b6:38:e4:
e1:85:b6:3f:70:75:aa:6b:68:82:d3:97:57:3c:6f:c8:ed:81:
03:a7:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:46 2025 by rpki-client