Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/MCauzdzhAV-eC2FQCIe1KmEfC3E.roa
File: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (raw, json)
Hash identifier: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=
Subject key identifier: 30:26:AE:CD:DC:E1:01:5F:9E:0B:61:50:08:87:B5:2A:61:1F:0B:71
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019421B25BA16E86F70D52389BE51E71F6CB
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/MCauzdzhAV-eC2FQCIe1KmEfC3E.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48119
IP address blocks: 91.207.126.0/23 maxlen: 23
91.207.126.0/24 maxlen: 24
91.207.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5b:a1:6e:86:f7:0d:52:38:9b:e5:1e:71:f6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3026aecddce1015f9e0b61500887b52a611f0b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:58:ca:9f:32:4c:93:b3:17:86:7d:a3:dd:
8d:70:3e:38:9c:f4:43:fc:53:e3:85:83:6b:4a:3e:
7a:5c:07:8f:da:db:df:bf:e9:c4:85:2f:1d:4a:c0:
c8:af:60:67:48:8f:8a:0d:08:42:c8:d5:73:20:9b:
ac:2a:ce:41:7e:60:9f:9b:d3:98:6d:a7:99:bd:f8:
d4:e3:03:d7:3a:35:d6:7e:18:2d:78:c0:ad:9d:45:
a9:17:b5:31:41:e5:37:a9:9a:fe:37:9c:dc:5d:d3:
b4:69:12:67:52:27:e8:a8:7a:1a:f8:41:23:c0:b4:
26:99:73:4e:78:b1:b0:84:13:3f:37:15:0f:5f:2f:
13:8d:74:0f:c7:4a:ac:70:15:d9:7b:9e:f1:5e:a9:
80:9f:2a:bb:8b:3a:b0:3f:93:b2:11:ed:1a:e3:b3:
56:76:ac:93:9c:a7:59:23:d1:a1:e0:54:34:4a:40:
c4:d0:b5:b2:ae:f8:c4:05:57:d8:f3:77:79:d8:43:
bf:40:49:cc:74:ae:5d:89:c3:f4:8c:61:cb:35:c1:
6e:1a:89:2c:15:41:19:db:cf:36:2e:08:0a:8b:bf:
8c:8f:1e:43:1d:0f:85:d1:29:f2:d5:7f:99:bf:1e:
c1:96:29:75:8f:19:0c:61:ef:b7:6e:a4:ec:6c:a4:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:AE:CD:DC:E1:01:5F:9E:0B:61:50:08:87:B5:2A:61:1F:0B:71
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/MCauzdzhAV-eC2FQCIe1KmEfC3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.126.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:dc:0d:d3:f5:c3:c7:45:9d:4a:b4:0a:71:24:6f:25:64:62:
7e:88:1f:6d:ef:32:fd:38:62:cc:b9:41:6d:22:77:81:ba:04:
b1:61:5a:61:18:94:87:80:0b:cf:6e:9e:f4:b4:98:48:58:00:
15:cd:2b:56:4a:b5:f2:b1:d7:56:57:e5:97:37:31:b8:e2:2b:
92:7c:4d:d2:b3:27:18:89:4e:30:ae:a3:97:98:0d:a6:ba:ac:
0a:7f:72:30:9d:31:b7:06:d1:10:d0:4a:05:a2:16:6b:fc:6d:
61:c4:b8:70:df:a7:54:e6:9f:06:1a:d5:25:d0:e8:04:9b:45:
77:46:39:9f:32:92:bc:08:fa:71:ab:b8:5a:c1:40:35:08:da:
f0:c0:6c:05:02:5b:be:41:a0:aa:cf:43:04:0f:89:f8:dc:d2:
89:6a:b4:f6:9b:77:f6:e6:9d:7e:8e:60:e1:cc:63:3f:b4:6d:
46:50:15:1f:8c:aa:63:f4:d3:b1:07:48:18:e7:01:49:d3:d5:
fe:3e:75:a0:57:91:e5:0d:6f:da:1c:38:83:ab:6a:9e:db:9b:
51:68:10:ee:6f:46:67:d2:fd:22:66:bc:4a:8a:d0:15:b4:24:
16:c6:89:10:98:d6:7a:c0:74:b2:58:f0:a0:22:6d:3c:0c:e3:
21:e4:4d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:19 2025 by rpki-client