Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/X0-Djm0vHdUiJwsWds74O566gnw.roa
File: X0-Djm0vHdUiJwsWds74O566gnw.roa (raw, json)
Hash identifier: wptFaY0ZwFbGnw/VuRN3robTidxbKoo/tyvxKrOBB/E=
Subject key identifier: 5F:4F:83:8E:6D:2F:1D:D5:22:27:0B:16:76:CE:F8:3B:9E:BA:82:7C
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 0194206805432915EB85022C0093F8021FC4
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/X0-Djm0vHdUiJwsWds74O566gnw.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48601
IP address blocks: 91.197.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:05:43:29:15:eb:85:02:2c:00:93:f8:02:1f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f4f838e6d2f1dd522270b1676cef83b9eba827c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:76:51:10:27:51:57:5f:f7:21:7f:9e:9a:
cd:7b:f1:55:f7:e5:e9:39:65:6a:ba:43:27:a3:6b:
e6:ba:53:46:81:d4:ef:b7:e9:21:a2:fa:b4:cb:e0:
78:dd:42:c5:bc:0e:1b:9e:21:ae:21:65:49:d1:6a:
43:ff:b4:b7:f7:f4:6e:62:2d:8e:3b:38:b2:61:a4:
ea:35:e3:e7:33:43:00:07:7b:18:f7:20:f9:94:6a:
43:71:b0:3a:2f:a2:d5:e0:b6:0e:a0:63:a3:3f:85:
5f:16:b3:90:52:c7:d3:fb:f6:3d:2a:d1:99:fe:e1:
db:6b:1f:a6:c7:aa:bd:bd:a1:60:a0:ca:2c:cc:31:
a0:16:50:25:18:83:79:da:56:4f:ad:1a:c2:41:52:
4e:a1:9e:fd:05:e1:da:15:cc:c1:08:f8:c6:3a:51:
f3:0d:73:18:db:3d:44:60:c7:43:76:3e:a4:08:d5:
79:ac:02:8b:04:fd:6a:d2:c4:73:05:51:86:21:6b:
60:96:ba:1f:6d:5e:3e:be:ad:8c:bb:1b:69:84:7e:
4f:4b:6a:d2:b9:57:2f:2f:b9:18:05:0e:f0:b0:a2:
72:d9:68:80:a9:c2:4b:af:68:f5:a0:cf:bf:dc:ed:
50:5f:68:60:24:73:d3:ee:db:7c:e9:00:41:a5:31:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:83:8E:6D:2F:1D:D5:22:27:0B:16:76:CE:F8:3B:9E:BA:82:7C
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/X0-Djm0vHdUiJwsWds74O566gnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:63:c7:3d:f8:24:8f:8d:3e:fc:56:0f:d0:b4:31:bc:aa:b9:
89:63:e1:07:4e:e6:c1:71:54:4a:a5:76:f2:fa:3d:47:e8:ac:
f7:a6:c2:6d:25:b9:c1:da:5a:59:2f:b3:2d:f4:af:fb:bb:84:
77:a5:3a:fd:e0:be:6f:9e:2e:3d:75:c8:e0:64:c7:d5:63:43:
70:d6:20:ff:b2:39:89:df:fb:94:17:91:02:fd:1f:0f:7d:f1:
9f:a5:71:c3:81:40:83:06:59:24:c9:ee:3c:29:65:f6:ad:1b:
a1:ab:e7:17:40:71:c8:61:c8:62:e4:3e:de:db:f1:b2:d9:37:
e1:2f:42:ff:af:81:fb:99:f9:bd:16:14:1d:f3:35:33:e6:29:
38:70:78:ef:b2:9b:e2:2a:39:5f:94:7f:f4:31:57:96:1d:fd:
2c:19:88:18:4d:f4:eb:c5:6d:c5:bd:6d:dc:53:95:f2:fb:d0:
bd:d4:c6:92:76:35:1c:a9:a2:c0:f2:b2:4b:d5:98:d2:6b:36:
60:eb:4a:f5:2d:73:ac:92:ea:c2:09:1b:bd:24:6a:44:1b:07:
76:2a:dc:5f:31:24:82:90:26:a4:ad:42:4d:f1:6b:52:01:c5:
97:c5:e7:3d:d1:e5:81:94:dd:d4:ae:3d:c6:53:d3:68:0e:1d:
6a:a2:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:42 2025 by rpki-client