Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/5Gr2PKrQucQP8LHQL3W9WQyLZws.roa
File: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (raw, json)
Hash identifier: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=
Subject key identifier: E4:6A:F6:3C:AA:D0:B9:C4:0F:F0:B1:D0:2F:75:BD:59:0C:8B:67:0B
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 0194258FB482990706FCCD4121057DE65616
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/5Gr2PKrQucQP8LHQL3W9WQyLZws.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198466
IP address blocks: 91.235.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b4:82:99:07:06:fc:cd:41:21:05:7d:e6:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e46af63caad0b9c40ff0b1d02f75bd590c8b670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:cf:d8:54:29:ea:47:ed:8f:6a:13:96:32:
92:2f:dc:f9:44:39:94:28:c4:b7:38:40:5c:1b:ee:
bb:f6:3c:54:ca:e6:18:c1:bd:52:e2:47:aa:40:28:
56:53:48:ff:e5:f1:67:97:b7:16:52:42:1f:7d:81:
3a:64:37:76:d3:60:2f:c2:7a:0f:eb:b0:65:1c:0e:
dd:00:01:20:2b:96:37:c4:fa:7b:1e:7f:ab:bb:d1:
29:29:e8:28:cb:8a:3d:22:55:70:e1:dc:a7:10:c8:
55:76:e0:31:cd:88:f3:3c:59:03:0a:cc:74:6e:98:
57:83:6e:6e:b5:13:9c:c9:2d:e0:fe:ee:27:f3:cd:
70:cf:69:f0:40:13:e2:c8:1e:28:5f:ae:4f:0f:bb:
44:bd:e2:ba:f1:af:90:55:fc:aa:94:be:55:6d:34:
57:f9:c9:cc:ca:a8:bd:f5:a7:b2:d4:ce:87:45:c0:
f2:5b:76:8f:99:6b:15:fe:05:dd:fe:3b:4f:7c:7d:
41:04:ef:ca:af:29:70:02:a5:f4:dd:61:74:3f:24:
b6:63:e3:23:ba:0c:e5:44:fd:49:01:86:c8:3f:2b:
68:74:a6:d0:7f:84:d8:15:10:36:6e:a8:31:c8:a3:
66:02:83:a0:bc:fe:e5:d2:d2:a6:77:4f:c9:98:15:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6A:F6:3C:AA:D0:B9:C4:0F:F0:B1:D0:2F:75:BD:59:0C:8B:67:0B
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/5Gr2PKrQucQP8LHQL3W9WQyLZws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.44.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b6:8b:d1:6d:6b:26:94:9e:d5:15:2a:48:fc:42:bf:89:21:
bb:59:b5:45:8c:37:e0:3e:06:51:9a:b2:96:36:df:ef:f7:b3:
9b:c6:0a:d6:93:87:9f:b3:f9:bb:90:ac:93:86:c9:24:c7:d1:
18:de:fb:38:32:a9:55:40:e0:f0:56:47:5d:d5:6d:71:2b:02:
44:2d:41:ce:0d:cc:c3:10:7b:c8:1a:f1:64:85:08:02:d7:27:
86:4c:34:a8:48:10:26:d7:eb:ef:70:da:af:91:86:f0:73:84:
81:15:96:08:ea:18:e4:d3:14:37:bd:f8:86:4a:d1:bb:ef:61:
a0:62:bb:fa:a3:56:22:29:59:26:aa:bc:64:6d:f5:5f:dd:e3:
b4:86:e0:5b:26:62:ba:62:85:8b:7f:3c:e8:b7:8b:a4:58:35:
9e:a2:e4:0c:af:68:3b:c4:f6:0c:8e:64:b2:04:e4:c7:2d:95:
3c:b5:19:ec:1b:82:ce:52:66:04:ed:92:65:21:8e:c9:a5:25:
bc:5f:6f:22:2a:bd:02:e0:f9:5d:38:9e:50:b6:fb:0e:e3:c3:
0d:a5:3c:4e:f1:dd:dc:0d:48:80:9f:e7:5d:ef:37:49:09:fd:
4b:8a:63:4a:de:d0:24:11:e0:9a:57:93:27:d9:b2:8d:1f:bc:
09:04:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:20 2025 by rpki-client