Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/XJmfBMQd9fUqPkyXE24uEaqPglQ.roa
File: XJmfBMQd9fUqPkyXE24uEaqPglQ.roa (raw, json)
Hash identifier: T9he77Kk0/CT36YLrvu4tkNMCxdL620Z9sEtBhVQQXw=
Subject key identifier: 5C:99:9F:04:C4:1D:F5:F5:2A:3E:4C:97:13:6E:2E:11:AA:8F:82:54
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 019424B2D5E3687D38C96B6E74AA64E482CB
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/XJmfBMQd9fUqPkyXE24uEaqPglQ.roa
Signing time: Thu 02 Jan 2025 01:48:07 +0000
ROA not before: Thu 02 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212285
IP address blocks: 91.243.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:d5:e3:68:7d:38:c9:6b:6e:74:aa:64:e4:82:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Jan 2 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c999f04c41df5f52a3e4c97136e2e11aa8f8254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:85:a0:74:54:71:0b:b4:c3:42:a4:67:f2:
be:cf:c4:2e:34:3a:87:82:3a:78:58:ba:31:3f:3e:
88:05:12:13:0a:58:3f:da:7b:01:78:c3:eb:5b:3a:
64:0e:91:39:ae:f2:b9:16:52:ae:6f:f2:d7:4b:ed:
b4:d0:70:02:89:97:8e:1a:ff:ff:f1:bd:45:5f:52:
df:f7:ce:ad:59:e9:3b:c5:c4:48:60:d1:15:bf:cf:
1b:e4:fe:61:f2:60:0e:7c:e2:2c:70:bb:f1:e0:60:
94:b2:9f:96:ba:a9:4a:38:2e:1c:5c:b3:6e:59:4e:
fc:ef:5e:8a:3c:94:ae:f2:d6:8d:d6:77:06:bc:26:
09:d1:ae:e1:58:ec:57:83:4f:0d:c0:80:4a:e4:3a:
d1:51:eb:34:9c:03:ac:84:34:18:ca:84:70:84:61:
bd:ff:28:34:a0:b4:cc:4d:52:39:3f:e2:46:21:95:
bc:f7:c9:21:ae:f4:c0:64:37:05:47:18:6f:7b:c4:
bd:62:5a:d2:0f:5e:e5:42:53:c2:56:84:94:4d:41:
07:ba:16:ac:4b:91:88:ac:a0:e8:9d:52:46:7d:2e:
5b:ee:d6:48:f0:e7:ad:5b:a8:77:47:c4:01:f4:f2:
dc:83:bb:61:33:76:8d:89:2b:73:35:34:37:5d:0c:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:99:9F:04:C4:1D:F5:F5:2A:3E:4C:97:13:6E:2E:11:AA:8F:82:54
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/XJmfBMQd9fUqPkyXE24uEaqPglQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f7:71:ce:f0:35:21:ea:10:2b:db:15:23:33:69:8d:74:0b:
23:f5:65:a9:29:6d:ab:0d:32:56:32:3c:a8:c1:49:56:1f:3e:
ef:3f:46:4f:3b:0d:d0:57:43:43:a2:49:ed:d9:2e:00:0a:4f:
6b:3f:aa:a2:66:55:90:2b:58:68:4d:98:ac:49:04:0c:08:b1:
c9:0c:56:e9:b6:8a:6d:c6:b6:4d:fe:df:7d:d7:f6:f4:6e:87:
3a:b9:d5:a0:77:f9:d7:46:55:bf:4f:40:ac:a8:2d:c4:92:c7:
3c:7c:de:80:87:47:4e:f7:d9:bf:65:f4:25:9c:b1:25:f2:4e:
06:fe:55:fd:0e:1d:14:5c:97:0e:83:33:ea:f8:67:d9:71:a1:
02:d6:76:11:f6:29:ee:8c:1a:2d:32:95:36:f3:fc:39:3a:da:
32:7b:9a:6a:91:e9:62:32:39:7f:46:ea:63:22:86:ec:41:c0:
1c:38:1a:27:39:c5:3f:e8:47:4f:d0:cc:a1:68:7c:0a:ab:56:
ab:6c:1c:50:a8:0c:90:08:b6:36:bf:89:92:c8:38:63:e4:79:
5f:7b:d8:7a:93:a3:1a:17:bd:ff:42:41:9e:a7:0a:3a:99:d4:
58:70:7a:98:7d:70:ee:42:ff:bc:87:e7:32:c3:c0:4e:1c:6c:
73:44:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:11 2025 by rpki-client