Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/9IBHLWVOZ0QllouyRgZXZZaYaZg.roa
File: 9IBHLWVOZ0QllouyRgZXZZaYaZg.roa (raw, json)
Hash identifier: EjNvIqlv1V/ciVJtAGWjow9nk1g6XEmRzV7siqw9gdU=
Subject key identifier: F4:80:47:2D:65:4E:67:44:25:96:8B:B2:46:06:57:65:96:98:69:98
Certificate issuer: /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial: 019425212A5A9456FA85FBF644FD8316FFB6
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/9IBHLWVOZ0QllouyRgZXZZaYaZg.roa
Signing time: Thu 02 Jan 2025 03:48:37 +0000
ROA not before: Thu 02 Jan 2025 03:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43854
IP address blocks: 91.220.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:2a:5a:94:56:fa:85:fb:f6:44:fd:83:16:ff:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Validity
Not Before: Jan 2 03:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f480472d654e674425968bb24606576596986998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:a9:8c:fe:17:ea:14:cf:ac:93:46:5b:d8:
13:ee:71:b6:91:e8:c4:bd:ae:9f:7b:60:27:53:7b:
84:a0:d1:9d:2c:e7:b2:eb:3e:19:22:a5:ec:a3:d1:
05:ab:b3:4f:1b:a2:76:75:20:c1:e2:2b:aa:8a:4d:
d8:85:c6:0f:bd:1a:42:57:d3:81:f9:8c:70:aa:b0:
37:59:0e:fe:0d:9a:19:51:07:9b:82:84:36:88:6c:
99:68:ba:39:70:b0:c2:e0:90:37:b7:d6:94:9e:01:
6e:07:83:ea:1f:d7:36:e1:0e:d1:69:17:2e:22:f6:
64:b0:cb:30:88:fa:8b:20:78:f4:ec:0d:ec:c0:f0:
4c:ac:d8:76:9c:46:58:b3:6f:f3:a7:68:79:2b:03:
1e:5a:1e:8b:20:94:34:c6:be:51:1b:ec:12:fe:15:
17:93:ac:f7:a7:39:0f:e1:69:c2:4b:bf:f9:16:fb:
21:7c:90:a8:d9:71:65:ae:ae:15:96:ed:f7:0e:7f:
01:ce:6f:8f:a3:28:a2:44:93:66:4e:c2:a2:d7:10:
c6:9a:f7:22:12:66:ea:3e:78:12:01:6d:40:34:e8:
6a:f2:2b:92:9a:63:a7:b6:98:0b:92:0e:e0:b9:ac:
7f:a0:f2:c6:6f:42:d0:e5:e7:c2:1a:1a:40:1c:cd:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:47:2D:65:4E:67:44:25:96:8B:B2:46:06:57:65:96:98:69:98
X509v3 Authority Key Identifier:
keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/9IBHLWVOZ0QllouyRgZXZZaYaZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c6:65:cb:78:ca:11:2c:36:f5:47:7f:9b:36:4b:60:12:21:
f6:68:52:67:f8:d3:61:02:1e:bd:46:db:24:be:df:4f:22:51:
8c:c4:3a:27:b6:06:ca:b9:2b:4c:5f:ab:34:73:03:22:de:61:
5a:a7:d7:72:5e:02:b1:60:e1:6e:95:72:55:e5:86:48:5e:6e:
70:64:6f:f8:dd:7d:5d:d4:df:90:8e:32:d8:fd:29:92:85:22:
29:49:aa:e9:88:f5:b6:39:85:c6:48:75:29:c7:22:22:03:96:
fb:2b:78:e7:cb:6a:e9:2e:50:68:c4:8a:05:c0:5b:f9:9f:30:
49:d9:8e:9e:b9:50:41:86:b4:ac:9b:cb:52:c9:63:ab:a5:c7:
69:55:3c:e9:73:22:d2:b6:5f:fc:0f:a1:36:16:07:d3:fa:a5:
f3:8c:c8:5f:86:a5:48:98:67:f9:22:71:90:ab:36:c3:d4:dd:
71:00:8b:78:ca:32:b4:25:0c:c9:7b:a9:52:d4:36:7a:2f:8a:
86:de:de:f9:6f:42:00:b6:16:98:c9:88:e9:74:21:a5:81:bc:
b3:12:3b:e4:91:27:f8:b0:da:f3:65:37:fd:1f:aa:0b:63:fb:
b9:e9:27:47:be:47:af:fb:fb:b5:22:cd:8e:3e:6c:14:27:0b:
ea:3c:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:31:41 2025 by rpki-client