Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa
File: zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa (raw, json)
Hash identifier: T9wprypvgjd5UjKaL97Qh7s/fP7I922vE5XInqdd1G4=
Subject key identifier: CC:27:F7:38:AE:80:6C:BF:86:2C:45:56:DA:6D:9F:8B:25:59:47:6A
Certificate issuer: /CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Certificate serial: 019425FDA796E53CD8AC64ECC8A4EDB04F5F
Authority key identifier: 30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43732
IP address blocks: 91.198.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a7:96:e5:3c:d8:ac:64:ec:c8:a4:ed:b0:4f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306b468cc31ef3a3d081ac8f02b271e3147559bf
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc27f738ae806cbf862c4556da6d9f8b2559476a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:6e:15:1c:4e:47:e5:8b:22:16:69:c4:e6:
17:e6:06:47:98:79:a3:92:92:3d:4b:3e:a4:14:89:
61:e6:64:6b:b6:6e:fb:0a:fc:6e:89:f0:bb:d8:7a:
ee:7c:69:f7:5f:15:38:35:34:3f:94:04:71:7f:b7:
50:47:0f:68:c0:01:72:78:7b:9e:a7:d6:55:5a:18:
29:e7:66:32:3a:3f:24:14:92:33:5d:d5:bc:1f:a4:
cf:f8:f1:8c:27:8f:52:2e:d7:5f:fb:a8:ed:02:93:
31:b3:ef:a1:f8:c4:7f:f4:8c:c8:4a:c5:98:f7:05:
4e:b5:0e:d8:e3:17:cd:01:c3:43:5d:d0:f2:1e:ba:
dc:b7:2b:81:db:a5:46:b3:67:a6:86:89:b8:7d:2a:
11:d5:f8:3f:36:ea:73:a5:dc:55:57:4e:1c:d3:3c:
c5:72:63:42:22:1e:4c:6b:e4:c9:85:25:aa:5f:40:
89:d8:fb:b8:fb:cc:ca:65:8b:ee:8f:0e:74:32:d2:
32:fe:d3:68:30:c3:e5:8a:0f:28:b5:d8:2c:35:08:
be:c9:2c:db:95:35:b5:f3:5b:2a:03:76:ff:05:1e:
57:12:a0:d4:24:c3:d0:a9:69:27:f9:e5:21:22:c0:
e9:9d:3b:6b:58:f4:45:cb:19:58:5f:ee:8e:af:6f:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:27:F7:38:AE:80:6C:BF:86:2C:45:56:DA:6D:9F:8B:25:59:47:6A
X509v3 Authority Key Identifier:
keyid:30:6B:46:8C:C3:1E:F3:A3:D0:81:AC:8F:02:B2:71:E3:14:75:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGtGjMMe86PQgayPArJx4xR1Wb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/zCf3OK6AbL-GLEVW2m2fiyVZR2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7e4ea8-8950-4183-abc0-3382794049c2/1/MGtGjMMe86PQgayPArJx4xR1Wb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.132.0/24
Signature Algorithm: sha256WithRSAEncryption
20:76:62:a1:fe:53:a8:6f:f0:bc:95:f0:5b:79:e0:2f:86:0b:
2f:6c:81:8d:ad:df:a9:96:43:de:e4:d2:41:fb:a8:24:bc:63:
9a:ed:60:c2:40:7c:b8:bc:04:7e:da:e0:98:31:4f:78:74:e3:
6d:07:04:31:33:36:8b:70:a4:74:94:c9:fd:98:8b:88:97:54:
50:92:5c:87:5d:e3:05:ce:df:de:c2:86:28:22:4c:ec:b2:80:
76:8e:a5:0a:01:c1:9b:81:85:0c:63:80:da:7e:a0:f4:30:9a:
13:00:31:b4:42:ad:43:bd:f5:89:f4:2f:9d:9a:fe:e3:cc:87:
2e:87:63:e0:cd:eb:19:e9:f4:10:29:20:16:6a:26:51:8b:3e:
98:f0:37:e2:96:67:73:1c:6e:71:f0:7f:98:62:f1:5e:de:3b:
89:50:3d:fb:eb:c9:fb:9c:01:66:6d:61:13:2f:63:30:68:5f:
8d:aa:a3:4d:f8:fc:8d:b1:13:ff:ce:c7:82:75:f8:49:21:61:
d7:13:6d:cd:4e:1e:27:ea:d5:34:e0:17:76:24:c6:09:c8:51:
55:1b:e1:fe:74:08:6b:1e:27:0b:86:ab:5a:4b:c2:fb:d4:06:
d1:da:67:8c:97:82:35:9f:ef:46:76:4f:80:1c:e7:8f:39:e9:
d5:41:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:34 2025 by rpki-client