Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/15gQ3l_CTz5DpsQh5tCstrbwJks.roa
File: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (raw, json)
Hash identifier: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=
Subject key identifier: D7:98:10:DE:5F:C2:4F:3E:43:A6:C4:21:E6:D0:AC:B6:B6:F0:26:4B
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 0194258FC7A37324345274EA5F797D0FE347
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/15gQ3l_CTz5DpsQh5tCstrbwJks.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51296
IP address blocks: 91.216.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c7:a3:73:24:34:52:74:ea:5f:79:7d:0f:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79810de5fc24f3e43a6c421e6d0acb6b6f0264b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:be:6b:77:6d:4c:8c:84:c1:04:a5:79:78:
e2:6e:20:8f:f5:00:55:e7:05:eb:ab:5c:af:ba:1c:
ce:4a:c2:c9:01:fd:34:57:f1:07:20:12:ff:a1:88:
7a:a0:1f:05:b7:fc:3c:41:f5:c0:f7:c0:f6:35:29:
da:fe:d4:c9:40:93:f1:0e:9a:18:45:d4:94:53:9d:
6f:4d:73:48:6d:49:48:e6:01:5b:f0:10:27:cd:07:
5c:70:72:9f:57:f9:70:c7:21:2c:a8:8b:99:09:d1:
76:8c:d7:c5:a5:70:25:1e:e4:f8:71:3d:fb:e7:7b:
38:44:98:99:c2:a5:22:c3:00:df:b8:8b:ff:0b:7f:
55:2e:99:95:3b:53:65:4c:35:28:0f:ee:c0:10:76:
5c:3c:39:fa:e0:d2:3b:55:5d:00:c8:37:2f:bb:cb:
10:87:8d:c6:7d:65:2c:c9:40:27:10:f0:ae:fd:0d:
81:98:55:78:13:f8:bc:f4:c1:26:76:0c:72:c0:1e:
52:1c:22:97:7d:9e:9d:3a:a5:e5:1f:8f:ce:a7:c2:
4a:51:bb:dd:d2:27:e8:5e:4b:90:f6:2a:b8:aa:e4:
10:78:46:2b:c0:03:0d:13:0f:9e:33:d8:83:21:54:
1c:68:a3:87:d6:61:f3:ab:7f:9f:7e:93:ae:ad:9b:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:10:DE:5F:C2:4F:3E:43:A6:C4:21:E6:D0:AC:B6:B6:F0:26:4B
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/15gQ3l_CTz5DpsQh5tCstrbwJks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.255.0/24
Signature Algorithm: sha256WithRSAEncryption
39:b6:78:1b:61:05:16:18:33:3a:28:9f:78:d4:e3:15:1b:b3:
2d:0f:4d:27:a8:e9:4a:b8:2b:d7:fd:bd:a3:cd:a3:b6:4c:38:
53:d6:0a:1b:21:03:3a:65:91:32:53:1b:03:63:9b:29:76:be:
75:e8:86:3d:c5:a7:5f:fb:6b:f9:09:fa:45:c0:05:fb:d4:b9:
f2:a8:02:2d:2b:0d:0f:74:21:c0:31:f2:4d:27:8f:b4:30:cd:
8f:f8:9c:2b:0e:6f:4b:61:dd:a7:ce:d0:77:84:1c:b3:7e:76:
38:52:84:1e:70:c5:65:e0:3b:8e:19:57:cd:53:9d:51:6e:54:
c1:80:21:df:fa:b5:de:61:53:f7:00:3d:8b:a6:03:61:90:0e:
16:66:f7:f7:59:8e:8d:9a:ec:fc:9d:d8:58:ad:61:75:aa:55:
92:b9:e7:31:58:25:99:81:88:8b:b9:32:7d:08:92:4b:77:ee:
3c:1b:11:8b:65:63:e1:21:8f:c4:f1:92:d2:7a:c1:5f:f3:99:
84:a9:37:b7:96:8d:bc:ab:75:c7:90:92:47:bc:0b:da:cb:d5:
9d:48:f7:41:d5:ae:d5:5a:df:0d:3b:49:aa:9a:0f:f3:d9:a3:
ea:c3:e6:3d:47:ba:c9:4a:15:59:37:8c:0c:5e:d2:98:c1:10:
81:5b:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:43:50 2025 by rpki-client