Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/K2jJIhwtmQT1UdH5RcnFIJCydiM.roa
File: K2jJIhwtmQT1UdH5RcnFIJCydiM.roa (raw, json)
Hash identifier: 0E4f8Qcis4DaV7XLk+fios4T2cuQqx6rf8piBgJ+DN8=
Subject key identifier: 2B:68:C9:22:1C:2D:99:04:F5:51:D1:F9:45:C9:C5:20:90:B2:76:23
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 019425FDC2A7F9E513C6E8557A9DC465FD20
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/K2jJIhwtmQT1UdH5RcnFIJCydiM.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9155
IP address blocks: 91.221.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c2:a7:f9:e5:13:c6:e8:55:7a:9d:c4:65:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b68c9221c2d9904f551d1f945c9c52090b27623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:f3:9e:f3:40:20:77:5b:4b:3d:a4:3c:d9:
a7:e4:d6:92:04:4b:ac:6a:47:a5:8c:db:84:27:ea:
15:cb:e8:b6:2f:89:bb:02:ab:64:5a:aa:12:02:92:
e9:f2:a9:28:c3:ad:ff:40:e6:41:23:5b:cb:7c:20:
03:58:1d:89:fa:4a:5a:4a:fa:39:85:74:b2:2b:44:
4b:31:d3:3b:7f:76:b8:3b:6f:97:1e:f9:83:5b:e9:
fe:db:38:2c:88:98:1b:ff:74:6d:80:3f:ea:61:b0:
a3:04:52:a3:94:bb:83:7d:d9:da:97:2f:27:4c:14:
fb:37:43:4a:9c:da:88:d2:b0:b6:b7:e6:97:0f:4e:
c9:2d:9d:0e:d4:88:c0:1d:2a:94:d6:65:b1:7e:69:
5d:35:89:20:13:f0:30:f2:6d:e6:5b:92:2b:f0:46:
49:0f:8e:6d:c4:d9:61:67:b1:f2:ef:e3:40:75:0b:
84:f3:64:45:3c:7e:67:a4:cc:30:88:c4:7e:9a:b8:
49:0b:5a:4f:f4:44:24:b3:8d:fd:51:c0:c6:c5:38:
b7:72:a1:f5:5c:5b:03:24:de:c3:49:00:dd:ed:2d:
7d:b3:55:17:68:b1:33:9b:67:a5:95:c7:21:e4:30:
b1:34:06:2c:f0:3b:d8:f8:94:97:d7:6b:6c:72:b8:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:68:C9:22:1C:2D:99:04:F5:51:D1:F9:45:C9:C5:20:90:B2:76:23
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/K2jJIhwtmQT1UdH5RcnFIJCydiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.128.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e9:f5:74:71:20:26:1e:07:6f:42:36:c5:8d:08:2f:a8:5f:
1a:1c:54:06:87:b3:e7:90:6a:7d:73:71:b0:55:bd:e4:7f:ea:
d5:c2:b9:99:af:e1:0b:65:bf:41:54:e5:dc:e7:fb:57:f9:5d:
84:c2:9e:67:74:29:5e:29:7f:9e:85:70:ae:cc:d8:90:5e:41:
90:fa:8f:f9:0c:2d:d9:f2:07:21:9c:34:bf:b5:38:1c:d6:1c:
31:e8:56:1c:04:01:0c:97:5a:fd:60:83:1d:ae:e8:41:63:fa:
0b:82:a1:cf:02:e4:6c:ec:07:f7:7f:7b:96:a4:8c:28:2b:a6:
d0:8b:51:d0:73:47:ee:29:86:9d:b0:96:5b:32:d4:7a:1c:b9:
30:e0:b9:ac:dc:a1:cc:53:e5:92:12:1e:21:84:de:03:66:47:
88:a9:6d:45:21:8a:44:75:ab:0d:a6:07:a2:06:cb:e4:36:d3:
73:76:dc:dd:62:c9:4d:4b:b6:b5:41:47:c7:c0:a1:9d:e5:34:
b9:74:57:3e:0b:76:33:c2:0f:21:85:d6:b5:81:c9:de:59:03:
6f:b7:ac:89:9f:7d:33:54:a1:24:6f:96:e0:f2:b2:45:99:22:
71:3c:14:63:54:db:11:ed:6a:62:02:dc:c0:bd:d0:69:0e:d2:
3f:4a:8b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:08 2025 by rpki-client