Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/d_srjB0rV-pBdYCmFI9IWlpmnVU.roa
File: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (raw, json)
Hash identifier: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=
Subject key identifier: 77:FB:2B:8C:1D:2B:57:EA:41:75:80:A6:14:8F:48:5A:5A:66:9D:55
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 019423D7346B13EA804F9828567973616340
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/d_srjB0rV-pBdYCmFI9IWlpmnVU.roa
Signing time: Wed 01 Jan 2025 21:48:13 +0000
ROA not before: Wed 01 Jan 2025 21:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35393
IP address blocks: 91.209.245.0/24 maxlen: 24
193.200.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:34:6b:13:ea:80:4f:98:28:56:79:73:61:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77fb2b8c1d2b57ea417580a6148f485a5a669d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:0c:83:a5:8c:85:6a:d0:de:f5:c6:6f:b4:
98:06:b8:45:13:8e:0e:bd:92:d8:c6:5a:f4:32:fe:
62:e0:4e:f3:b4:c2:3c:ec:9b:12:c4:5c:07:a8:8c:
c9:85:07:55:cd:d6:87:eb:29:60:a0:ce:a5:d7:27:
87:8f:de:ca:d1:12:5f:5d:46:d3:a4:91:5f:ba:a8:
1a:3a:c9:ec:41:f9:9f:7f:1b:24:92:2d:81:04:e5:
87:1d:e5:fb:8c:94:bd:45:a5:39:34:a8:ec:04:15:
ce:63:37:64:1b:10:6c:6d:76:4d:e2:cc:16:6c:39:
aa:cd:1c:40:02:a5:b5:e0:b9:35:55:b7:d8:dc:dd:
ce:aa:3d:72:77:08:0f:66:26:e1:20:22:c5:fb:c5:
b7:4c:ae:e9:0a:6a:03:0c:28:d6:3d:0e:f9:18:cb:
2c:ac:2d:f9:cc:1f:b9:ff:15:11:59:a5:ea:d0:fa:
77:64:dc:62:78:16:ed:f4:e9:c6:30:a3:4b:38:66:
ba:58:41:f8:e5:73:5c:36:7a:1d:c2:c2:61:a6:be:
62:34:0a:15:4e:0c:0c:44:61:de:57:0f:40:3b:86:
e5:ab:88:b7:82:f4:9f:d8:52:86:ea:f2:92:84:34:
4d:02:b3:ab:46:7b:10:63:58:f5:81:93:82:7d:67:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FB:2B:8C:1D:2B:57:EA:41:75:80:A6:14:8F:48:5A:5A:66:9D:55
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/d_srjB0rV-pBdYCmFI9IWlpmnVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.245.0/24
193.200.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:58:e4:4d:25:02:c3:1b:7d:a5:12:3e:a1:e7:c7:7e:f2:5e:
09:a7:d1:f6:a8:8a:7d:2f:b6:b3:2c:a1:07:78:c8:ef:c9:8a:
86:e8:18:53:d3:fb:7d:b3:85:5e:ea:21:d3:a3:d8:a8:3d:44:
94:eb:9e:f6:e5:c7:47:db:65:0b:f8:10:ae:1a:70:85:0f:c7:
94:e7:cd:47:10:95:ab:47:4e:bc:34:32:c8:2f:00:64:8d:ff:
8f:48:ca:62:d3:05:d3:2f:4f:41:df:9e:ec:d1:dc:a0:14:72:
fd:fb:5f:28:68:f2:31:53:37:53:33:94:c9:11:5b:7f:e7:09:
da:cc:4a:33:a1:5d:f1:d0:2f:31:51:1b:cc:70:bd:5a:ea:7b:
34:2e:38:0f:56:22:86:10:c2:42:e2:d4:35:1b:2b:eb:9c:b8:
c9:82:dc:89:12:05:b9:d4:e8:40:e2:42:2f:fd:d4:06:f7:66:
ef:95:07:13:53:0c:e8:f1:b1:be:22:5d:a3:77:53:50:97:d5:
bd:3b:ec:3c:89:fa:ac:fc:9f:9a:91:a8:51:4a:6e:51:ca:7b:
7d:e0:22:23:ac:9f:24:a9:19:da:a1:fb:24:44:de:6e:f9:c8:
36:af:e2:07:21:3e:84:89:6b:21:a1:21:e9:8f:db:4d:b1:24:
2b:f7:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:59:02 2025 by rpki-client