Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa
File: S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa (raw, json)
Hash identifier: 2BiJYWVWD7Ka4R5rnZ5XfPiTTBaJVD05DB1Gn6ZZCus=
Subject key identifier: 4B:A4:31:8C:0A:04:C9:7E:A2:3A:A1:B5:7C:C9:E7:2B:92:B1:7F:90
Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial: 0194258F2FBB779E02FF6B3C4415F58317A5
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215883
IP address blocks: 91.240.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2f:bb:77:9e:02:ff:6b:3c:44:15:f5:83:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ba4318c0a04c97ea23aa1b57cc9e72b92b17f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:79:d7:e7:bc:af:11:5f:37:3f:22:07:9b:62:
d2:a1:19:fe:ee:97:7a:6a:cf:c5:c4:d3:5f:b1:df:
d4:34:3f:f9:cb:2e:19:86:b7:b3:c1:79:de:5d:40:
5a:cc:01:46:fe:d6:c3:e8:04:c2:88:fb:ec:ec:73:
01:91:95:a5:0d:8d:3e:63:e3:f2:67:0a:1c:46:47:
58:75:ec:14:ab:5a:ba:30:14:45:0e:89:b0:c0:2b:
b9:59:7a:ff:2d:22:7a:73:45:95:b4:e1:62:9e:cf:
1b:f4:9f:f2:3d:3b:ce:9b:fd:8d:d4:d1:de:bd:56:
1e:4a:e8:cb:4c:03:2b:72:89:67:b0:b4:ca:d4:eb:
4b:c2:93:5a:6e:08:d4:75:bc:d7:d8:71:a5:d7:5c:
8b:4e:6b:3f:9a:69:c4:e3:92:bc:52:9b:a7:32:c8:
3e:7f:df:61:be:4c:f7:61:d4:7a:8e:7b:08:e0:7d:
60:92:fe:0e:84:db:ee:00:13:98:8b:67:5b:40:82:
75:c8:c5:ce:b5:d6:ea:92:b6:3c:59:02:b2:b0:98:
3a:c6:fe:1a:e1:32:6e:12:aa:44:84:90:aa:ed:48:
13:11:19:5b:cf:e9:3f:2c:2d:c5:8b:e2:e2:37:73:
6f:d8:81:71:e3:da:c4:c4:8b:11:b6:29:5d:1e:e6:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:31:8C:0A:04:C9:7E:A2:3A:A1:B5:7C:C9:E7:2B:92:B1:7F:90
X509v3 Authority Key Identifier:
keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/S6QxjAoEyX6iOqG1fMnnK5Kxf5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.165.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:27:f6:d2:1f:dd:b1:c8:64:a4:75:d2:83:7b:47:86:4e:53:
ef:6f:b4:f9:c3:02:a7:52:7a:f5:d9:ce:bd:78:3e:60:a7:ce:
23:6b:b7:11:18:da:87:0d:72:0c:35:4b:11:65:5f:a1:0c:38:
29:3d:fe:7a:d4:bd:e6:63:69:35:a8:d0:d2:55:4f:2c:62:10:
65:7c:d5:d3:ae:9b:eb:52:cc:30:dd:df:5b:ef:13:a1:93:de:
e5:2a:73:8f:b5:c3:57:fe:59:c7:d3:d6:c1:a4:b0:af:10:a6:
50:c1:a5:75:91:51:0d:06:06:98:ff:57:4d:15:f3:8b:20:a9:
d9:9d:0e:14:c3:4e:56:4b:40:98:87:3e:1a:32:f0:13:24:ff:
a2:b3:89:c4:0b:3f:64:e8:77:36:2b:3f:71:33:e4:d1:3b:15:
f0:c1:6f:b8:35:4d:28:5c:e5:2f:b7:aa:47:a0:4f:07:59:fc:
fb:ee:90:93:79:49:f9:d2:57:00:42:63:d9:20:01:b9:3c:ba:
e5:30:25:35:11:9e:47:ca:e6:30:28:20:8a:03:88:7d:c6:1f:
a5:5d:d7:60:2a:1e:d9:2e:50:1b:7e:2c:d4:02:9a:f2:be:e0:
4f:06:6d:dd:1c:87:53:9d:0a:0e:53:08:33:ba:5f:52:a5:46:
c1:49:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:27 2025 by rpki-client