Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa
File: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (raw, json)
Hash identifier: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=
Subject key identifier: 6E:2E:59:0D:50:31:0A:05:C7:3F:8A:6D:1D:50:50:4E:45:29:13:AB
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 019427474780F7814DB22A4D5A650FA72F1A
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa
Signing time: Thu 02 Jan 2025 13:49:30 +0000
ROA not before: Thu 02 Jan 2025 13:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47951
IP address blocks: 91.103.136.0/24 maxlen: 24
2a13:1d40::/30 maxlen: 30
2a13:1d44::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:47:80:f7:81:4d:b2:2a:4d:5a:65:0f:a7:2f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Jan 2 13:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2e590d50310a05c73f8a6d1d50504e452913ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:5e:d7:fc:6a:ea:e5:78:43:1f:91:cd:15:
54:f0:00:aa:44:ae:5f:44:3c:d4:7a:0e:55:a0:1a:
a4:32:b6:fa:6a:ea:43:e8:bc:2a:76:7a:e3:7f:ca:
b7:dc:1e:60:f6:e9:ba:8e:b4:e7:15:9d:4b:a4:63:
48:af:21:e8:07:9c:72:aa:47:db:3a:19:24:84:d0:
cf:ad:bd:23:be:9a:57:d6:ec:36:03:cf:e9:72:a9:
e4:4b:3e:cc:94:f5:23:7a:d0:08:f2:53:f8:44:2e:
2a:bb:e1:40:d9:66:1c:e7:a7:ba:b4:fb:06:67:57:
e6:57:d1:87:18:7e:0c:40:74:69:7d:5b:c7:92:b7:
8b:98:2e:5a:f7:df:ec:94:0f:4b:c5:5c:af:0e:35:
43:4f:12:44:48:f7:60:09:3f:20:ba:35:02:2c:0c:
4b:03:a0:e9:9f:db:97:fb:07:17:50:08:5f:80:6b:
ef:f1:e7:97:a3:fa:95:58:c6:46:51:ad:c7:9b:17:
d4:b8:69:6d:71:49:33:dc:2f:52:0d:d5:a4:cd:19:
0c:08:c4:7a:8c:e5:5f:5a:f8:22:b7:78:5e:7a:b0:
0a:8e:8c:9c:bc:2f:5d:8b:9d:4f:95:1d:46:f0:d3:
f9:e2:c3:14:af:9d:5e:05:b9:a4:e6:d5:8a:33:b0:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2E:59:0D:50:31:0A:05:C7:3F:8A:6D:1D:50:50:4E:45:29:13:AB
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.136.0/24
IPv6:
2a13:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
6d:54:9d:d5:d0:5f:28:35:0c:5e:84:9b:14:a8:f1:8d:04:cc:
eb:1a:49:f9:4c:87:f7:ce:25:2f:67:74:90:6f:f0:b7:b2:aa:
be:cf:b0:07:b9:69:7a:67:04:d7:13:22:19:dd:57:8b:f1:ff:
b1:ff:5a:61:b5:3d:59:93:d2:99:9f:f6:08:74:8a:1c:0b:10:
99:33:5b:c4:a6:90:0d:0a:08:33:85:b2:13:b6:22:bd:e2:ae:
99:d2:96:4a:fb:5b:e9:02:96:0f:c7:5a:1a:b7:70:e2:a9:69:
74:91:92:19:50:d3:b5:ff:cf:db:9b:ec:21:e1:7b:18:f2:9d:
f2:59:4f:a3:bf:4a:c4:35:11:8b:5a:de:24:a4:cc:ff:c1:8f:
19:47:a5:3f:29:72:58:ea:fd:de:bc:37:31:bf:23:29:e6:7c:
59:93:fd:c0:ff:74:b4:95:10:0b:fb:ea:b1:81:54:75:ad:b4:
d7:01:f6:f3:8a:d2:51:10:c8:78:f4:de:57:84:f4:77:c4:58:
84:00:21:f6:0f:b5:12:cd:48:3b:01:87:1a:b1:f5:4d:12:27:
62:63:b9:f2:d2:d6:fc:c7:50:ad:a4:07:54:c2:e5:c6:75:0f:
26:d5:7f:b9:8a:49:32:c7:d8:d4:3a:51:c9:9d:ed:a0:92:7c:
3e:2e:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:56 2025 by rpki-client