Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa
File: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (raw, json)
Hash identifier: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=
Subject key identifier: 02:0E:2F:74:F1:8A:A9:26:16:1A:6F:5D:2D:68:CB:09:81:57:21:3B
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019420D5EFF0FF7DD87730132D8E4CA4CB20
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13032
IP address blocks: 91.202.128.0/22 maxlen: 22
193.41.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ef:f0:ff:7d:d8:77:30:13:2d:8e:4c:a4:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=020e2f74f18aa926161a6f5d2d68cb098157213b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:7c:97:9a:25:53:e3:7e:3e:49:9e:10:3a:
b9:01:51:bc:fb:8c:5a:3e:f3:0a:4c:00:45:48:0c:
0e:a9:1c:51:cc:01:bd:0d:27:72:b7:e9:7a:f2:a5:
8d:c1:08:0f:ca:e5:6d:8b:a7:aa:1e:8d:e5:03:bb:
84:ab:36:25:8c:c0:24:73:c9:97:4a:64:ff:e8:1d:
cf:cb:a3:d1:ba:40:b5:69:b2:ed:76:2c:b5:9c:c8:
62:29:3d:bb:a2:bd:43:be:cb:74:b0:08:69:6b:7d:
47:cb:05:1f:e9:a8:0a:77:49:9b:ad:96:e2:ae:5a:
eb:7f:b2:73:5a:fe:6a:2f:6d:40:be:0e:8e:32:ec:
ee:c1:04:a8:ee:6f:e5:b5:aa:14:5c:1d:80:5e:71:
22:f9:85:7a:a8:1c:24:73:2d:4f:be:26:cd:c2:82:
ed:aa:a5:aa:05:76:6a:56:ea:22:a5:d2:e4:bb:0e:
c0:db:75:60:eb:54:57:f9:39:4b:11:e0:b0:57:62:
05:a0:36:71:50:ff:04:ef:80:fe:b9:47:76:26:e5:
18:ec:c9:e9:11:6a:e9:30:ca:77:e6:f4:d1:e8:d2:
30:5c:11:d3:e9:fe:83:67:61:07:4e:3d:b1:c0:02:
81:49:76:a0:2d:98:0d:00:67:34:d6:d7:25:a4:67:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:2F:74:F1:8A:A9:26:16:1A:6F:5D:2D:68:CB:09:81:57:21:3B
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.128.0/22
193.41.88.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ca:c6:67:5b:38:b0:28:f8:d8:82:a1:fa:bf:22:79:77:42:
5e:ea:4c:82:2c:08:72:54:eb:df:70:8c:65:55:04:47:39:eb:
8b:80:bd:d9:13:ee:df:31:76:4d:97:3c:93:a5:15:12:8b:31:
22:43:e4:24:79:7d:f2:9f:9d:36:71:ba:74:35:13:2c:60:9c:
b0:90:ba:4a:7a:4f:37:a8:89:5f:03:6c:f6:8c:8a:b1:ea:ad:
cb:bb:67:3b:3f:6b:f4:5e:a1:c3:a0:14:36:0c:45:09:47:06:
e8:7a:d8:35:db:a2:76:53:0f:c0:10:f8:42:b7:9d:d8:8a:08:
3f:a9:83:8d:d5:81:d4:15:cf:56:bd:db:4e:11:e3:6c:1a:af:
61:11:c1:2c:89:7b:32:18:87:1a:09:32:9a:4a:0a:7e:ac:06:
d0:4e:80:2a:a3:b2:7c:fb:df:08:16:ac:cc:0b:4d:cf:74:2f:
96:92:8c:f6:c1:22:7b:79:19:1a:b3:e7:e4:e6:49:dc:de:c3:
5e:c7:a6:6e:70:63:42:40:95:cc:ce:79:50:f0:6c:12:1f:75:
0a:0d:bd:09:17:b6:26:04:91:e8:28:8b:56:3a:92:be:bf:30:
35:14:b1:f9:eb:20:4f:81:c3:39:0f:20:da:60:bf:87:95:d1:
e1:1b:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:06 2025 by rpki-client