Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/U3bTZa6VR2lgQV_xss-nw_qWA0o.roa
File: U3bTZa6VR2lgQV_xss-nw_qWA0o.roa (raw, json)
Hash identifier: FagQxwFZxM/p097AXxbzD9JDCXqd3EarlmqmrLlSZP8=
Subject key identifier: 53:76:D3:65:AE:95:47:69:60:41:5F:F1:B2:CF:A7:C3:FA:96:03:4A
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0194252205AB9E5674CFB471DD7772AE53D1
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/U3bTZa6VR2lgQV_xss-nw_qWA0o.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14114
IP address blocks: 91.195.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:05:ab:9e:56:74:cf:b4:71:dd:77:72:ae:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5376d365ae95476960415ff1b2cfa7c3fa96034a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:83:16:cb:10:0c:49:d7:11:c2:b4:ca:4f:
29:e7:de:83:aa:29:0d:37:19:9c:c9:53:7d:68:c3:
ea:04:58:b9:32:d7:a4:ec:5e:09:e1:74:c9:c0:be:
c1:12:93:24:9d:80:76:a1:51:7a:c3:3e:af:1d:ba:
c0:65:fe:f7:7d:5e:ff:75:b7:01:e9:5d:32:5e:45:
a8:6d:b4:3f:9a:aa:31:27:91:c7:92:71:ef:5d:83:
c7:18:fc:22:97:02:f1:41:8d:d5:d9:f8:6a:de:e5:
a5:83:fc:63:75:f1:41:c2:52:6f:a7:88:8e:cc:ed:
61:0b:3b:50:53:81:5b:00:fa:cb:f1:4c:ec:01:6d:
0e:ea:4d:fa:6d:08:f7:1d:f4:80:41:99:3f:3b:c5:
5a:eb:a6:8c:65:94:68:28:01:d8:07:c4:93:1d:6e:
a2:f8:7d:73:26:60:a7:98:bd:ec:ac:d1:df:c5:e6:
80:91:54:b0:31:3f:3b:c1:88:2a:ff:22:ba:47:21:
2a:77:c6:33:d6:9e:e7:75:9c:7b:e1:db:42:45:57:
a3:85:5b:25:73:54:c3:dc:d3:7e:5a:39:6b:ff:cb:
7c:04:06:a7:b1:60:03:52:54:6f:0f:15:50:a2:a3:
51:09:78:41:0f:41:04:7b:9f:4c:aa:a4:28:76:d6:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:76:D3:65:AE:95:47:69:60:41:5F:F1:B2:CF:A7:C3:FA:96:03:4A
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/U3bTZa6VR2lgQV_xss-nw_qWA0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.242.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:39:e0:2d:ef:78:2b:a3:ca:94:61:97:0b:79:fd:be:74:2c:
a6:79:dd:a4:72:e5:61:fe:2c:a0:ab:12:44:6c:1f:cb:72:f9:
e7:8a:1e:8b:77:88:51:8f:81:43:c1:06:96:e7:59:1b:f7:0a:
7a:8e:b4:74:29:ae:74:40:b7:20:37:ed:c5:dd:17:09:81:c6:
7b:22:2b:09:c3:e6:c1:3f:60:c4:4f:b6:e5:80:d2:3c:ea:7f:
f6:61:ad:c2:f8:f6:76:35:a1:00:3c:d4:9e:d4:45:44:ec:99:
a8:32:e3:d4:5b:dd:46:49:40:36:fc:b5:10:9b:b7:fc:93:cc:
00:d1:68:a1:82:35:5a:16:5c:cd:3c:ff:39:02:c5:1f:97:f3:
82:93:af:6c:cc:81:73:8a:3e:bd:ce:53:3b:d2:83:83:c6:b4:
7d:9d:41:b6:fc:e3:1a:d7:75:15:ad:a6:a4:5e:37:2e:3f:5b:
5f:39:c0:ea:14:19:da:f0:18:8e:7e:89:99:80:b0:a8:e6:f3:
f5:4f:5c:eb:a4:c1:f6:c3:f8:e1:ec:6d:f0:20:f8:33:fe:b7:
a5:c8:31:ee:0a:ce:d0:80:d0:85:e8:8a:a6:37:c7:f9:f2:b7:
99:ec:95:14:4a:b0:32:22:fe:19:88:9b:bc:7f:2d:be:08:4d:
8d:39:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:10 2025 by rpki-client