Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/5PJXNIBNkIDizHXqABCfI2weMXY.roa
File: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (raw, json)
Hash identifier: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=
Subject key identifier: E4:F2:57:34:80:4D:90:80:E2:CC:75:EA:00:10:9F:23:6C:1E:31:76
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0194266B328F96D75B978343A5F92C326A1E
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/5PJXNIBNkIDizHXqABCfI2weMXY.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 91.198.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:32:8f:96:d7:5b:97:83:43:a5:f9:2c:32:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4f25734804d9080e2cc75ea00109f236c1e3176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:75:be:90:1a:7a:cb:aa:be:72:d3:20:37:
d0:a9:c1:2a:f9:2c:c6:b0:4e:b4:d6:7f:89:5e:6b:
4a:62:d1:15:62:71:e6:fa:06:d1:0b:d2:da:09:61:
2c:5a:74:2f:00:ca:11:10:bd:0b:5b:98:79:22:68:
cb:ef:cf:66:55:94:ca:5b:00:a1:07:37:21:1f:59:
de:6d:04:54:05:92:a8:6d:fc:89:64:dc:fe:73:61:
c4:f6:b1:29:bc:aa:e9:5d:cd:24:2c:7d:dd:02:ab:
28:8c:64:96:8c:c8:e7:13:08:be:d0:17:19:92:2d:
12:71:7a:8b:a4:d8:7e:01:87:c8:df:e3:3e:b9:dd:
00:f9:a3:0a:25:68:f6:35:36:b4:3f:51:a8:ef:e8:
d8:cf:18:0b:fa:66:d3:be:fe:28:b5:6f:0e:af:66:
57:f7:4b:78:d1:7e:b1:b7:fd:03:5b:f6:21:e2:8e:
8a:11:8e:2d:26:68:cd:ab:1e:64:79:9e:e0:d0:da:
a5:f0:1c:8c:58:dc:0b:a5:83:80:6b:c5:4e:1c:ef:
09:24:8a:31:77:bb:38:7f:4e:28:3b:a8:b6:76:c6:
76:c2:91:9e:c6:d5:be:d5:9d:34:ce:74:44:34:29:
94:04:a2:c4:ee:2a:9a:29:fa:3f:5f:90:c0:95:18:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F2:57:34:80:4D:90:80:E2:CC:75:EA:00:10:9F:23:6C:1E:31:76
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/5PJXNIBNkIDizHXqABCfI2weMXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.124.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c3:e5:61:a5:de:34:b7:17:d4:37:d5:6c:d4:80:f2:6e:4d:
b1:9e:20:25:31:dc:eb:25:cb:79:71:86:f5:63:9a:ef:2d:c4:
23:2f:76:9b:4e:42:75:15:e6:d9:25:4c:ca:ea:df:85:78:21:
1c:27:be:ae:6d:a3:e8:58:23:4b:b1:b4:84:22:13:b6:e9:d6:
6a:df:9e:21:f1:d5:a1:6b:5a:c7:ee:20:9c:a1:fd:10:ba:ba:
cf:e7:25:24:f9:84:84:5b:07:c3:7b:fe:92:45:c1:d5:84:cc:
ab:b5:c6:29:77:c0:eb:a4:68:d2:d8:31:2c:10:80:11:e4:df:
92:14:ca:1b:0d:6b:8f:c1:fd:62:56:6b:d5:a1:6b:dc:46:43:
59:a8:ac:9b:d2:74:40:04:91:21:07:3c:dd:81:83:59:58:59:
64:a8:f5:a5:6b:a1:73:92:d3:e1:06:bc:dd:ae:93:27:55:cc:
41:56:cf:2c:ea:61:98:2c:98:99:bb:71:4c:d5:5a:cb:82:f7:
bc:83:66:82:be:2e:67:82:4d:f4:58:41:85:2d:d0:0e:51:e2:
38:a0:48:d8:6b:7e:87:1a:45:21:07:64:57:d1:3f:24:6b:65:
a1:9e:13:72:76:31:32:01:37:d8:f8:19:e1:78:7b:cf:6f:20:
f7:87:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:39 2025 by rpki-client