Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/ptCjyawSJ9frfP9fH_ikMswCnsI.roa
File: ptCjyawSJ9frfP9fH_ikMswCnsI.roa (raw, json)
Hash identifier: qlAjQ7L6msxhMlwj1dEaHE32m8HH4N1buR0Bga+2/Qo=
Subject key identifier: A6:D0:A3:C9:AC:12:27:D7:EB:7C:FF:5F:1F:F8:A4:32:CC:02:9E:C2
Certificate issuer: /CN=daafe90f9d081334cc928edee9bc731540708dfd
Certificate serial: 01942520882C48ACA7AA20554F390A1C375B
Authority key identifier: DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/ptCjyawSJ9frfP9fH_ikMswCnsI.roa
Signing time: Thu 02 Jan 2025 03:47:56 +0000
ROA not before: Thu 02 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50951
IP address blocks: 91.216.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:88:2c:48:ac:a7:aa:20:55:4f:39:0a:1c:37:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daafe90f9d081334cc928edee9bc731540708dfd
Validity
Not Before: Jan 2 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6d0a3c9ac1227d7eb7cff5f1ff8a432cc029ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:e5:19:f6:43:4d:85:89:f9:c8:35:25:e1:
8c:75:70:ac:d1:43:2a:68:c1:c9:b8:e2:39:9f:ba:
1c:aa:29:a9:c6:6e:6d:3e:76:a8:67:d0:2c:6a:d3:
1b:68:76:42:d2:d5:6f:98:71:22:b3:b6:80:70:04:
4a:f9:1b:fc:16:46:30:c3:c5:98:22:5d:d8:87:c4:
aa:f2:46:d6:97:7d:57:48:8b:09:94:cc:df:b8:44:
2b:a2:ca:0d:d2:db:a5:59:fa:82:a4:e2:64:5f:e4:
45:39:74:38:9b:1c:57:da:1e:89:b1:7f:be:55:d5:
21:29:b8:59:f4:9e:77:ac:5d:d3:af:14:d7:d2:ac:
f8:ec:0e:8a:87:28:85:c0:c7:c1:b1:f0:ed:32:0b:
08:0c:9c:93:18:cc:17:1a:75:62:0e:1a:6e:e7:99:
47:5b:e5:22:2c:cd:1e:47:84:bf:db:ec:65:0d:2c:
b3:b7:70:32:8b:c8:4a:50:33:a0:70:47:85:d7:16:
13:21:56:22:4b:85:ba:d1:e6:c5:02:4d:72:f1:cc:
17:89:39:55:8b:91:1c:8b:85:f6:8d:e4:b0:a7:bd:
66:50:f4:c8:07:a3:53:f0:fa:1a:8e:0c:0c:1e:f7:
83:26:d3:15:c6:c8:15:09:b1:6d:0c:ca:d8:2f:8a:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:A3:C9:AC:12:27:D7:EB:7C:FF:5F:1F:F8:A4:32:CC:02:9E:C2
X509v3 Authority Key Identifier:
keyid:DA:AF:E9:0F:9D:08:13:34:CC:92:8E:DE:E9:BC:73:15:40:70:8D:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q_pD50IEzTMko7e6bxzFUBwjf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/ptCjyawSJ9frfP9fH_ikMswCnsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8bb3c1-199d-449b-ac46-bbd92ccafa88/1/2q_pD50IEzTMko7e6bxzFUBwjf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.50.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0a:1b:e7:05:46:47:4f:d1:ae:f7:14:8a:95:81:c1:07:15:
a8:e0:ad:b9:eb:99:db:e2:40:d3:2d:f2:14:41:73:9a:60:32:
f9:7c:ea:b7:a9:f8:56:0a:b3:30:da:a5:90:e0:1e:6d:0d:98:
c5:21:a0:8d:8e:3d:36:6f:0b:85:b9:bd:22:9d:a1:79:0d:9c:
77:ba:16:a6:22:a0:c4:8e:b2:7e:f5:09:60:df:31:2f:5d:af:
9a:fb:fe:33:3a:d2:2b:a8:de:7e:e2:a5:fd:2c:af:12:52:35:
42:e7:75:c0:0a:86:9b:8e:f4:8d:e8:36:b9:ea:84:79:fd:39:
e5:a0:38:dc:9a:9b:31:02:87:2b:34:42:c8:03:7a:6f:ff:c2:
ba:4c:ea:3b:f5:35:48:7d:21:00:cd:9f:f5:e6:a4:4b:c4:5b:
0d:bd:1c:20:3b:69:27:5e:a7:c8:6e:f8:ee:dc:2d:f5:9c:8f:
ae:e0:84:b3:c0:72:0b:7e:79:3d:ac:c8:c9:7f:ea:71:c7:09:
74:0b:96:39:c9:ea:f4:04:22:fa:81:13:81:42:69:50:a1:64:
e0:e0:c9:d8:5e:53:12:9b:cf:40:68:83:02:ef:ee:8c:87:aa:
5c:ac:de:36:c2:db:00:5a:e9:cb:df:1e:b9:2d:4e:74:8c:5d:
1f:ce:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:07 2025 by rpki-client