Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/697jToKu2XxRDQWnpoghgdx0sOU.roa
File: 697jToKu2XxRDQWnpoghgdx0sOU.roa (raw, json)
Hash identifier: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=
Subject key identifier: EB:DE:E3:4E:82:AE:D9:7C:51:0D:05:A7:A6:88:21:81:DC:74:B0:E5
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 01941F8C651C5FA59A3E35799AAA607BF191
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/697jToKu2XxRDQWnpoghgdx0sOU.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42518
IP address blocks: 91.192.188.0/22 maxlen: 22
91.192.188.0/23 maxlen: 23
91.192.190.0/23 maxlen: 23
91.215.120.0/22 maxlen: 22
91.215.120.0/23 maxlen: 23
91.215.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:65:1c:5f:a5:9a:3e:35:79:9a:aa:60:7b:f1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebdee34e82aed97c510d05a7a6882181dc74b0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:f4:9b:ad:37:68:1d:70:a8:7b:05:52:42:
08:ec:e7:0a:75:35:a3:61:71:fc:41:44:e8:e3:1b:
ce:e8:4b:8e:30:2a:08:df:22:c6:27:8f:23:ec:37:
ce:ca:dc:52:7c:8f:bb:6d:e8:5d:2b:57:ad:ae:d4:
8e:a5:49:c5:de:77:1d:7a:44:8c:32:4d:f0:d1:01:
4c:c2:29:e5:60:85:58:bc:0f:1c:ab:83:2d:a8:ba:
c0:8f:00:8c:57:0a:7d:0e:1c:9c:c0:e4:1f:ef:72:
a3:59:35:6c:83:a6:83:2e:87:80:b2:2c:35:c0:c9:
f4:f7:f3:63:cc:0a:7e:b1:ae:a7:d2:bf:93:ad:4b:
48:24:eb:92:83:13:8f:6a:47:dc:ad:9a:b9:52:dc:
0f:50:78:50:99:1c:9a:b5:9a:39:18:96:c6:44:28:
8e:04:42:99:7d:3e:36:b0:e3:c0:1e:74:51:06:6a:
63:ac:87:e1:0b:28:ae:8d:67:06:43:21:da:61:9b:
25:be:32:fc:ee:44:57:07:c0:9c:a5:df:62:61:d2:
f5:62:ab:54:a1:f5:9d:33:13:e3:55:7a:cb:cb:6a:
ae:37:ae:ec:2a:10:36:f8:45:a1:a3:56:b5:39:2a:
8d:b9:0b:b1:ea:d6:8c:ce:ec:af:e1:4b:98:52:e2:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DE:E3:4E:82:AE:D9:7C:51:0D:05:A7:A6:88:21:81:DC:74:B0:E5
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/697jToKu2XxRDQWnpoghgdx0sOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.188.0/22
91.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:1f:eb:74:fa:76:0c:a6:4b:83:14:ce:91:3e:81:c6:e9:89:
a3:04:22:7f:51:43:9e:72:62:f4:80:ed:e4:d7:c6:49:92:87:
89:0f:89:9d:96:a5:87:d9:ce:5a:f9:1b:64:4d:88:40:33:d3:
b7:6c:ea:bb:c9:b1:70:5c:6f:76:de:93:00:5b:08:65:9f:f2:
40:aa:21:c1:eb:92:26:39:30:16:04:04:14:f7:af:fd:dd:a8:
3e:91:8c:19:c9:62:e3:16:a0:d5:c8:cf:64:1d:a1:7c:28:0a:
a9:60:ba:50:02:92:78:78:32:4e:2a:7c:07:1b:4b:51:08:a4:
01:85:29:cd:ce:28:b2:5c:f2:fa:e9:f9:81:e6:0e:32:9d:b6:
9f:71:00:73:7d:ce:5a:4e:fe:74:24:a4:7d:3f:f4:cc:f3:e9:
77:53:f0:c5:04:e5:33:34:d6:f1:90:8e:54:4b:aa:47:93:69:
15:53:52:16:22:79:92:84:90:2f:d9:9c:87:3a:b4:f8:56:1a:
b2:60:e7:0a:93:0f:5e:41:80:a4:70:1f:69:b0:fe:23:af:b4:
c5:04:3b:8c:d8:64:3a:2f:91:90:ea:46:c2:be:66:0a:1c:11:
ce:e4:44:6a:e0:e2:71:bf:7b:93:67:50:81:5e:ae:f8:44:8b:
ab:22:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:27 2025 by rpki-client