Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/16Vx9JFdsAydCBt8o5HI01kMvEY.roa
File: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (raw, json)
Hash identifier: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=
Subject key identifier: D7:A5:71:F4:91:5D:B0:0C:9D:08:1B:7C:A3:91:C8:D3:59:0C:BC:46
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 0194236A20A1E24B3F1D4E983F7B473CE4FC
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/16Vx9JFdsAydCBt8o5HI01kMvEY.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57903
IP address blocks: 91.236.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:20:a1:e2:4b:3f:1d:4e:98:3f:7b:47:3c:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a571f4915db00c9d081b7ca391c8d3590cbc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:1f:00:19:09:0a:c2:60:c8:f4:eb:0e:58:
59:04:34:e0:0e:a5:8a:35:e4:41:e1:9a:92:03:81:
38:c3:47:7f:6b:fd:38:a8:42:74:dd:21:25:9b:b0:
13:88:f7:c7:ca:f5:16:f2:81:7c:f1:9a:e6:74:b5:
38:c7:87:1c:e6:99:77:81:f1:1a:b0:25:10:8a:9f:
a5:c4:28:f5:f1:f9:50:77:ee:4f:01:95:c3:65:4d:
77:88:37:d6:c9:ee:ee:ec:e7:14:5b:45:9f:00:06:
3d:bc:16:d8:fa:00:27:57:b6:a7:9f:72:79:19:e6:
4e:4b:5a:1a:7e:d2:9b:03:31:26:6a:16:fc:76:4c:
9e:9f:97:a7:19:1e:3d:05:42:ea:c8:6f:61:5b:34:
6f:8c:28:35:9c:cd:12:70:61:8f:8f:fd:77:32:15:
60:a3:67:5a:50:93:5d:61:80:c8:d4:8b:27:ba:74:
18:f1:de:6c:3a:8e:3e:1e:9d:dc:8c:73:55:b0:8d:
93:97:c6:d2:2a:35:b7:47:a1:81:2f:8e:48:44:0a:
af:5f:53:7d:49:26:31:fb:0f:6b:e8:f9:2f:46:3f:
30:50:d7:ab:08:c7:f3:36:66:90:a2:6d:be:4c:ae:
66:17:19:31:33:65:6c:fc:86:39:84:2d:0c:39:d3:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A5:71:F4:91:5D:B0:0C:9D:08:1B:7C:A3:91:C8:D3:59:0C:BC:46
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/16Vx9JFdsAydCBt8o5HI01kMvEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.114.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a1:89:87:02:43:59:9e:62:f7:ea:03:09:bc:15:d2:fe:95:
1e:dd:ea:a3:69:44:f0:89:a1:f9:33:5b:c7:32:61:9a:60:3f:
55:58:aa:e8:2c:23:1d:e9:33:2b:fb:4d:b2:36:d0:1a:8e:c2:
05:58:82:0f:f1:bd:f5:4d:0a:8b:3e:a6:3b:b8:b4:9e:60:96:
32:ad:4a:67:53:40:89:0b:03:52:73:55:6c:ed:b4:8a:dc:c4:
aa:3e:0e:0b:a0:6c:87:69:0c:ce:60:3f:75:54:84:ea:66:da:
a4:21:ff:1b:f3:45:19:d2:96:a4:83:63:6f:52:9b:0f:05:ff:
11:fe:8a:f7:5f:12:78:8c:89:9e:d4:00:3f:51:83:ca:ff:b7:
83:e6:3b:ad:af:42:62:ec:b0:ed:16:fd:60:a6:6a:be:3e:42:
f1:5a:ca:33:7a:c3:03:38:05:ad:22:d3:fa:65:ec:f2:ec:b4:
56:c9:59:a8:2e:81:28:7f:1b:0e:fb:02:8a:27:2d:b9:e7:58:
ef:06:34:d2:16:c2:53:7c:55:02:5e:96:07:cb:a3:90:2b:6f:
a9:29:6b:03:df:15:d4:3d:51:2e:e5:3f:8e:50:5d:69:75:e7:
5d:f1:7c:de:b2:f8:38:95:d5:fb:68:94:ff:cb:9e:cc:9f:0f:
de:50:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:10 2025 by rpki-client