Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa
File: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (raw, json)
Hash identifier: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=
Subject key identifier: 6F:DF:97:7B:9E:FE:3F:78:2B:FF:02:86:F4:57:64:F7:1F:BC:FE:32
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 0194228E3E40BC16A090F200D91E59C4C87B
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51644
IP address blocks: 91.199.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3e:40:bc:16:a0:90:f2:00:d9:1e:59:c4:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fdf977b9efe3f782bff0286f45764f71fbcfe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:b4:4f:77:44:e1:40:cc:53:6c:95:38:b4:
b0:5c:f3:43:1b:58:d7:b3:75:b3:d0:4a:7c:fb:a3:
be:21:10:73:34:4a:dc:c6:93:fa:01:70:c6:33:bc:
bc:3c:32:c3:ea:9b:a9:0d:58:f0:25:09:a2:bb:e6:
8f:f4:15:03:2a:7f:e8:59:54:c6:73:47:ad:4e:54:
49:ce:f6:f5:dd:85:c0:8f:83:8b:35:9d:5c:4d:21:
d2:e2:17:a3:12:2b:0a:68:67:06:ec:34:93:b8:b5:
f3:35:25:fd:1a:e4:51:f0:6d:d0:ed:95:aa:ff:25:
f1:1b:c9:aa:7b:f1:78:f5:e8:bd:15:57:26:7e:e0:
92:75:08:95:5b:83:a1:91:a4:05:62:5b:a2:09:6d:
75:91:1a:d5:62:ec:8e:5a:94:1f:59:b5:3b:bc:f5:
2b:86:12:bd:57:6e:aa:e4:83:61:41:76:96:30:83:
34:07:d8:76:50:8a:6f:ff:f7:5a:fd:41:32:ec:5b:
c6:b5:77:d3:bf:55:9a:95:39:bc:61:35:82:40:75:
56:5b:8f:7b:10:ed:fc:d3:1a:f9:f7:06:51:12:d7:
c6:ec:b5:80:fa:0d:ad:70:3b:19:81:40:83:19:0a:
21:fd:84:52:a8:c5:14:90:b4:80:ea:76:53:d4:21:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DF:97:7B:9E:FE:3F:78:2B:FF:02:86:F4:57:64:F7:1F:BC:FE:32
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.61.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:e7:9a:a7:e4:30:6b:6f:91:69:3a:f2:2c:ec:83:4e:a1:ed:
b9:e4:a9:42:84:49:36:1d:04:54:56:1c:0a:0c:73:1a:6d:a4:
2b:b1:70:2d:42:db:bd:8c:88:3f:5d:95:c6:a8:7d:3e:b7:a4:
f6:e9:e6:8f:a6:ab:65:a2:90:62:01:d4:1f:29:bf:44:b8:2c:
33:16:c5:45:ef:34:1d:b0:41:5d:20:89:85:9d:54:67:e6:8b:
23:dd:3e:30:af:03:fb:ac:d8:09:78:3a:21:1d:1d:b7:88:d6:
72:c7:9b:e0:d0:62:b9:eb:cd:fe:2b:bf:60:7d:12:41:f2:1b:
00:8c:ae:b7:a9:4c:ae:9f:9a:48:12:64:cc:4d:ca:ae:37:9f:
7c:64:5d:0a:aa:ad:84:55:42:95:65:0e:82:17:da:89:36:ca:
18:59:aa:fe:58:10:66:12:30:e3:5a:85:26:09:73:b0:6d:f7:
49:11:85:b0:87:35:33:c5:ef:04:6a:73:63:b7:f9:de:83:4b:
33:c1:e3:10:8e:db:3c:ed:a5:d8:65:ed:7a:90:e8:da:f4:ae:
fe:ac:21:73:2c:b0:cd:82:56:31:84:d9:c3:63:65:72:24:40:
59:83:1f:e0:b6:87:57:c6:c9:4a:4c:a7:39:e4:ec:d7:24:58:
1e:58:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:10 2025 by rpki-client