Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/XRYyvh6J7DkVdKbz1yypWyD6-m0.roa
File: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (raw, json)
Hash identifier: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=
Subject key identifier: 5D:16:32:BE:1E:89:EC:39:15:74:A6:F3:D7:2C:A9:5B:20:FA:FA:6D
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 01942444E949BF2D2DD7EC6F924D90821533
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/XRYyvh6J7DkVdKbz1yypWyD6-m0.roa
Signing time: Wed 01 Jan 2025 23:48:03 +0000
ROA not before: Wed 01 Jan 2025 23:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29479
IP address blocks: 91.237.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e9:49:bf:2d:2d:d7:ec:6f:92:4d:90:82:15:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Jan 1 23:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d1632be1e89ec391574a6f3d72ca95b20fafa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:17:83:34:d0:19:4c:47:ed:d0:e0:11:cc:
65:ef:68:7f:c1:b4:5c:2c:d5:a2:1a:13:c7:0b:49:
dc:c0:a1:2a:a6:aa:22:f2:75:37:79:c3:0b:b7:8f:
48:42:fb:bc:64:d8:c6:27:8d:ae:8e:40:9d:25:a3:
cc:aa:73:38:47:54:3d:75:a4:ba:f6:9c:0b:84:51:
14:9c:80:bf:84:1b:94:ff:97:61:cd:ff:ab:00:8d:
52:8f:80:2a:8e:59:27:4c:90:df:31:e6:f6:1a:99:
0f:80:d6:11:0d:cf:16:e2:26:5c:b8:4a:b3:c2:aa:
65:89:d0:f2:92:52:14:70:17:5b:1f:d3:4f:63:7a:
4c:92:4e:bc:e7:da:84:59:1b:be:e8:ed:f7:34:9c:
95:93:d5:77:96:b2:56:ca:7d:21:5a:bd:b4:e7:db:
a2:84:22:f7:b4:06:c1:6c:20:da:3d:e2:e9:48:a2:
aa:62:7e:42:3d:bc:9c:76:d9:b8:c9:5b:a6:dd:0f:
37:85:cf:d4:ae:98:9f:29:49:0b:2b:aa:03:93:95:
a4:8d:cb:f4:20:55:d9:12:50:54:c5:d7:90:9e:e3:
7b:84:8d:50:7f:41:8d:77:2f:e0:80:76:46:2a:6a:
9c:39:c0:a7:56:70:e8:8d:3b:56:3d:6e:38:6d:5f:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:32:BE:1E:89:EC:39:15:74:A6:F3:D7:2C:A9:5B:20:FA:FA:6D
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/XRYyvh6J7DkVdKbz1yypWyD6-m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.78.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e7:1b:de:81:cb:10:d7:fc:4a:c3:6c:4e:60:2b:94:fa:fa:
b3:09:bf:1f:3a:5a:88:ad:be:5a:e6:de:54:e2:51:41:3b:11:
06:0f:8e:4c:29:15:c6:33:39:b5:b4:4f:c8:ea:26:14:95:a3:
55:23:a6:04:1a:fb:01:60:84:70:0f:9c:4e:80:a2:7f:16:87:
9e:c2:95:62:bc:de:46:02:fb:83:e0:78:ba:75:1c:9c:8a:c8:
c3:d6:d0:9a:34:3b:9f:47:b0:e2:08:4e:30:e6:a3:39:25:47:
4c:b4:dc:a5:a1:a1:d1:ce:a7:7b:4e:e0:60:6c:8b:91:9f:ee:
34:17:7b:4b:e6:87:4d:e8:40:25:80:3a:f8:0e:72:97:8a:52:
72:ee:44:17:ae:45:97:02:90:e3:4e:b4:0d:16:7e:48:09:23:
13:ec:85:c1:20:1b:f5:47:a1:45:f6:a0:4f:da:de:c4:14:e3:
42:18:0e:f5:d0:94:69:76:d5:d7:b0:a7:db:c9:eb:e5:e0:c3:
7f:9d:5c:63:81:b7:56:98:2b:64:87:d2:66:fe:5f:3d:9d:2f:
f2:20:9a:7f:6e:b4:69:7b:70:2f:c8:b3:f2:1b:9f:54:28:bd:
ea:3c:c1:82:18:c6:d6:3d:61:e1:54:6c:15:7f:92:1c:f7:30:
3a:11:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:59 2025 by rpki-client