Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/Im2JQRLROW71vKm8r2oO6Xo1LEY.roa
File: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (raw, json)
Hash identifier: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=
Subject key identifier: 22:6D:89:41:12:D1:39:6E:F5:BC:A9:BC:AF:6A:0E:E9:7A:35:2C:46
Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial: 019425FC4CA1643F37C27BFC450CAA9A16CB
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/Im2JQRLROW71vKm8r2oO6Xo1LEY.roa
Signing time: Thu 02 Jan 2025 07:47:59 +0000
ROA not before: Thu 02 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25352
IP address blocks: 91.212.48.0/24 maxlen: 24
195.190.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4c:a1:64:3f:37:c2:7b:fc:45:0c:aa:9a:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Validity
Not Before: Jan 2 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=226d894112d1396ef5bca9bcaf6a0ee97a352c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:94:96:98:03:13:10:bf:ac:bb:ef:14:e7:
6b:69:d9:ec:1c:f0:c4:5c:d9:d3:7c:67:9c:5c:42:
4f:fc:44:cf:c3:6a:3e:11:ee:02:40:cd:b2:8b:41:
3e:2e:18:cb:4d:7d:85:64:0a:e3:e6:ec:72:89:cf:
3f:91:1b:f2:b9:a3:be:a9:5b:ed:e3:fc:19:71:f9:
24:37:f8:38:11:5c:70:0f:3a:f1:da:4b:bd:d7:fc:
e0:07:84:a0:eb:82:b7:df:6d:d2:b0:ee:e2:cb:18:
ae:73:fa:ba:ea:01:51:a8:d4:e1:3b:be:5d:7b:c5:
0c:d4:a1:9b:20:64:ab:c8:57:41:a9:79:2c:e1:ca:
06:73:4b:75:22:0e:32:e0:b9:31:8b:c0:ff:61:76:
b8:f2:ef:a6:71:77:05:7d:e0:7d:80:2c:95:64:b5:
f6:a1:38:b6:27:e0:08:49:64:b8:bb:8d:c7:55:4e:
68:73:ca:c3:22:24:54:bc:f1:31:3c:99:10:23:4c:
1b:5a:d4:6e:30:73:59:7d:fe:e4:32:65:e2:52:d8:
b9:fe:94:d1:90:54:3d:5e:55:3a:92:26:e1:f9:47:
6d:5c:48:e5:19:c5:6b:29:9c:7b:77:1a:cf:e4:47:
0a:20:a7:6f:97:92:0b:0f:b8:18:53:f5:51:0d:9c:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:89:41:12:D1:39:6E:F5:BC:A9:BC:AF:6A:0E:E9:7A:35:2C:46
X509v3 Authority Key Identifier:
keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/Im2JQRLROW71vKm8r2oO6Xo1LEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.48.0/24
195.190.128.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c4:88:e2:da:46:7c:0d:97:36:19:35:eb:5e:a4:bb:82:8f:
28:8d:bd:79:cd:1c:6b:03:24:0c:0e:25:47:5a:c5:45:d2:aa:
a8:30:4e:b7:ba:e8:e9:89:9a:51:6c:94:1f:37:04:92:2e:be:
ad:be:72:92:a8:df:01:5c:88:8a:03:0a:26:e8:ba:6d:49:ab:
1f:cd:72:de:72:1b:85:d4:d8:0e:51:e1:92:40:85:d6:88:ec:
9e:46:7e:42:e3:ba:56:05:02:bb:5d:11:c6:0f:7a:1e:68:80:
32:4a:4b:02:d0:63:63:59:11:85:87:de:99:a0:9a:f4:7a:30:
41:97:66:cc:41:fe:a3:02:b8:85:ab:60:ed:7a:fb:96:5a:72:
af:2d:be:aa:a0:14:87:12:bc:43:ed:6c:cf:91:b7:69:15:11:
bd:1b:3a:1d:f5:17:be:c7:45:f3:17:2e:0d:6e:4e:4e:9f:ad:
22:a4:c6:2c:35:46:f8:91:e5:15:92:85:f1:ee:b1:ef:c0:c2:
a2:85:dc:2d:3c:ca:0e:b4:5a:33:b5:1f:80:63:56:de:fc:9b:
cc:95:06:3d:e5:25:3f:04:70:39:0d:fd:c2:c1:f0:7f:37:d2:
9a:3e:fd:50:7d:4a:b8:c4:2c:71:48:e5:53:31:cf:f0:60:73:
7c:d2:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:54:00 2025 by rpki-client