Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/T1Y1gDousbxvwwsbtZaj-joDVoU.roa
File: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (raw, json)
Hash identifier: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=
Subject key identifier: 4F:56:35:80:3A:2E:B1:BC:6F:C3:0B:1B:B5:96:A3:FA:3A:03:56:85
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 01941FFA3E4C06BB0EC2D88AD06F83FF34A1
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/T1Y1gDousbxvwwsbtZaj-joDVoU.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47613
IP address blocks: 91.206.88.0/23 maxlen: 23
2a07:82c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3e:4c:06:bb:0e:c2:d8:8a:d0:6f:83:ff:34:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5635803a2eb1bc6fc30b1bb596a3fa3a035685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:19:9b:f0:41:05:4e:e0:63:af:eb:31:93:
86:e8:b5:87:c8:07:56:27:6c:bb:7e:c8:e1:a8:fa:
09:2a:ba:fd:db:95:38:16:af:f1:8c:94:a7:83:62:
97:e8:97:0b:43:18:18:b9:8b:00:a2:ac:be:b9:c3:
fd:44:66:a9:e2:d0:90:01:59:d9:99:f7:4d:36:94:
76:5b:8a:8e:f6:0c:11:31:1e:98:39:ac:64:2f:19:
86:4a:96:c3:e6:22:98:5d:aa:c4:c1:95:34:c5:97:
88:1c:f5:9a:ac:59:96:b5:1c:ae:41:15:c1:b2:c5:
bd:e4:ff:de:1b:60:a6:59:b2:df:f3:d2:0b:8f:5f:
c4:f6:41:a2:c6:e5:e6:f7:5b:84:a9:20:f8:14:a1:
05:35:e7:82:f0:e5:f2:79:6a:92:12:5b:08:43:e5:
85:b9:78:d2:7f:5d:29:83:ab:d4:8c:75:ab:de:99:
b6:86:cf:7d:68:8f:8b:3d:34:2a:ea:15:bd:4e:8b:
67:f8:8b:2c:55:d6:8e:ff:bd:3b:28:78:e5:4f:a0:
2d:2b:a4:04:79:dc:6a:c2:41:15:a2:b1:ef:ba:e1:
30:7b:19:ca:86:da:9c:f0:8f:d2:2c:fd:9a:79:5d:
bb:2a:77:9f:0c:b7:c2:4f:d4:61:89:33:39:6b:57:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:35:80:3A:2E:B1:BC:6F:C3:0B:1B:B5:96:A3:FA:3A:03:56:85
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/T1Y1gDousbxvwwsbtZaj-joDVoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.88.0/23
IPv6:
2a07:82c0::/48
Signature Algorithm: sha256WithRSAEncryption
62:04:d1:57:d3:ee:4d:6d:2c:59:56:ea:36:61:ea:19:12:d3:
b8:ca:ec:75:1e:3d:e3:1b:fd:b9:c8:0c:b9:5b:b9:9e:20:f3:
4b:35:d3:f3:8d:16:ad:ce:84:f2:ca:ef:67:eb:31:34:75:37:
ec:e0:61:91:9d:db:47:a3:20:91:62:7d:37:91:c2:4f:bb:9d:
19:c4:46:bc:a0:b5:7b:8a:a3:22:a9:da:ce:fb:4a:b4:4f:5c:
2f:d3:0c:1e:ad:8c:9c:87:28:ff:09:cc:76:30:6c:14:99:d8:
e7:b3:5d:e2:62:7f:34:0b:de:5f:e9:43:c1:19:56:ce:82:99:
65:d4:f3:ed:5b:7f:ec:0f:d6:31:ed:96:6b:d0:90:13:d4:5a:
c7:da:d0:f4:7b:c3:8e:06:61:87:bc:24:cc:f6:e9:69:f4:84:
ee:86:a7:66:1d:c0:a7:08:94:37:bc:0c:3e:a3:8f:1c:63:ba:
5b:38:9c:ee:d3:f1:c3:f2:4d:f0:8c:e5:2d:23:d0:28:73:20:
50:34:86:2a:98:90:4f:f3:20:53:b5:cb:fc:94:69:e0:8f:f8:
0d:d8:07:04:c1:d7:e5:6f:35:19:a8:4f:27:12:66:2e:37:b3:
d6:a7:dd:fb:0d:85:b5:fd:08:d1:38:70:7a:31:8f:d8:42:77:
c1:c7:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:43:56 2025 by rpki-client