Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/I2QulkDn2KJ47c0S4-OMmVLx31g.roa
File: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (raw, json)
Hash identifier: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=
Subject key identifier: 23:64:2E:96:40:E7:D8:A2:78:ED:CD:12:E3:E3:8C:99:52:F1:DF:58
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 019421B24F5CEEFAE80313C64F3231F8936B
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/I2QulkDn2KJ47c0S4-OMmVLx31g.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42927
IP address blocks: 185.91.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:5c:ee:fa:e8:03:13:c6:4f:32:31:f8:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23642e9640e7d8a278edcd12e3e38c9952f1df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1f:8d:30:d5:55:17:dd:4f:13:44:94:2f:62:
80:cd:94:8e:ee:3a:c0:6b:db:81:61:fe:67:9e:32:
5c:36:80:e4:12:94:5b:88:a6:b3:e3:b3:74:19:0f:
9b:65:0a:40:28:d6:e8:29:cf:d0:7e:2a:ea:45:5a:
c6:12:14:b0:f2:dc:9e:ce:fc:1b:77:84:5a:a2:50:
cd:34:76:c5:2d:41:28:71:c7:53:1a:c7:7f:a5:12:
59:f3:95:f6:ed:4a:5e:10:a9:b7:92:aa:13:d7:80:
ef:0e:61:ef:00:93:8a:90:f8:e6:70:c2:99:89:01:
27:fc:2e:a6:fe:64:ee:f6:4a:d1:61:1a:10:b0:43:
5f:eb:35:c9:3d:16:b1:63:bc:c9:eb:03:0f:77:da:
db:b9:4f:7d:3c:4e:b0:ca:c1:8a:c8:a7:cc:c8:9a:
a8:1b:46:87:aa:a7:9b:c4:c4:f4:5e:a2:a9:cd:bf:
60:23:b1:f2:ff:44:5f:b3:32:4d:44:bb:78:8a:65:
75:be:14:42:7c:9a:88:71:19:d1:1d:56:d3:36:9f:
e6:1a:9c:40:f2:41:80:bb:33:6f:b7:b9:17:0a:eb:
b0:1b:24:1e:88:47:71:f8:a2:4e:62:9d:af:e7:32:
b6:4f:1e:44:ed:7b:0e:15:2c:8a:72:2a:0c:80:00:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:64:2E:96:40:E7:D8:A2:78:ED:CD:12:E3:E3:8C:99:52:F1:DF:58
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/I2QulkDn2KJ47c0S4-OMmVLx31g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.215.0/24
Signature Algorithm: sha256WithRSAEncryption
90:aa:70:08:ca:50:c4:01:dc:6e:44:35:4f:d0:cb:95:99:2a:
e6:6f:5b:07:66:65:1c:38:a5:12:1e:66:17:0c:a8:31:6d:7c:
67:15:5c:03:97:17:dd:ea:89:89:cf:56:94:94:f5:eb:5f:5e:
6b:45:fc:24:c3:24:9f:e9:ed:9c:2f:62:15:5a:67:15:2a:df:
63:fe:c3:ee:81:f9:9f:6c:18:c6:1b:8e:31:24:1e:9b:02:3e:
01:60:0f:41:13:f3:46:09:a4:b2:b4:e7:46:72:e8:ff:76:d8:
a7:6c:a8:e0:59:99:6a:46:21:b2:eb:93:d6:79:3f:86:ef:64:
31:5e:08:e9:db:d6:96:5c:b6:54:84:64:78:d8:fd:ad:80:be:
8a:0f:9b:0e:94:1c:d3:0f:22:7d:04:0a:59:23:d2:78:c5:1c:
77:16:e9:ce:ab:4c:16:48:bf:76:0f:34:25:d7:83:51:1f:32:
5b:8c:69:13:30:a6:db:7e:58:5b:dd:0f:ef:39:cb:61:cf:d8:
3c:16:3b:c0:db:fa:06:7d:17:7d:46:77:cf:bc:07:59:bb:c9:
8a:03:22:1a:0b:2a:e5:97:6f:11:9a:98:c3:e7:39:e9:f1:62:
d6:be:28:99:26:f6:a2:85:f5:c4:34:86:6f:c8:bf:bc:3b:16:
9d:54:ba:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:33 2025 by rpki-client