Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/V20vcYbyilDSQD-Jtx8d2qJDtnY.roa
File: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (raw, json)
Hash identifier: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=
Subject key identifier: 57:6D:2F:71:86:F2:8A:50:D2:40:3F:89:B7:1F:1D:DA:A2:43:B6:76
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019425219D61B7ABEC8B9B121F37AA8EB68A
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/V20vcYbyilDSQD-Jtx8d2qJDtnY.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57367
IP address blocks: 91.150.187.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9d:61:b7:ab:ec:8b:9b:12:1f:37:aa:8e:b6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=576d2f7186f28a50d2403f89b71f1ddaa243b676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f2:d2:c4:c0:b2:00:5e:0a:c0:21:32:af:fe:
13:fb:39:33:47:c6:cf:08:76:e0:d3:3c:68:90:86:
05:8b:d5:12:24:bb:64:1b:94:81:d7:e9:a9:ef:1c:
15:88:17:15:b4:b5:54:cd:92:9f:38:be:da:48:b3:
f9:bc:16:c7:89:30:fc:d3:af:62:41:cb:83:47:61:
1f:9a:4a:14:b2:46:61:66:8e:65:0b:e1:18:45:f3:
ac:80:c0:d7:f6:13:d5:3f:d6:70:9e:78:11:0f:e5:
65:dd:75:2b:75:12:77:2e:c1:6c:5f:d9:ee:7d:ec:
be:8c:a5:a0:83:0d:21:7d:f4:2e:71:4b:d1:64:6c:
48:1c:63:40:fd:d9:d0:ad:9e:81:4a:1b:11:fa:c2:
35:e9:ed:6c:63:33:50:48:82:9c:e3:f4:85:45:c7:
6a:fe:f9:d5:93:70:81:7f:c6:c0:ff:b5:48:22:04:
3c:cf:01:2d:da:1e:a4:2a:7d:3d:bd:62:9d:4d:a0:
78:bf:61:69:84:3d:9a:0c:71:4d:67:62:d3:31:c7:
aa:ee:dd:8a:ec:ed:a9:b8:0a:31:3e:fb:73:b8:a5:
eb:78:fb:95:46:c2:68:f6:ae:c6:c0:fc:b2:73:a7:
a8:3a:02:37:f0:77:46:6a:cb:51:7d:0e:20:ed:6d:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6D:2F:71:86:F2:8A:50:D2:40:3F:89:B7:1F:1D:DA:A2:43:B6:76
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/V20vcYbyilDSQD-Jtx8d2qJDtnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.150.187.0/24
Signature Algorithm: sha256WithRSAEncryption
19:53:c3:54:f2:84:b0:16:4f:66:61:30:03:ed:76:9a:7d:1c:
a1:4b:8c:e8:61:93:60:3c:1b:a7:04:5d:9e:69:b9:4a:c6:12:
ad:ca:e1:47:d0:30:b7:b6:ca:7f:8c:6f:d3:17:6f:76:42:28:
d4:8e:dc:82:c6:ff:55:7f:11:6e:3a:59:ff:4d:a4:db:02:68:
e8:d1:aa:7e:f2:8e:36:dd:05:ad:1f:87:35:b5:9f:d4:74:49:
77:42:81:b9:95:99:80:e9:d4:8b:63:27:b4:da:22:32:fd:9d:
2c:33:5d:e4:f2:31:0b:13:b3:99:c7:fa:df:2b:a5:38:d1:12:
56:29:35:98:9a:c8:4b:77:3d:c3:85:09:65:31:c4:3c:0e:35:
87:65:2c:79:82:81:61:c5:7a:a1:3b:a7:da:8a:8b:f9:2f:bc:
96:3a:d9:9b:51:74:5b:4a:c1:0f:c3:f9:df:77:39:3e:57:bc:
5b:e1:bb:c9:4c:eb:ff:48:92:72:b9:0b:a0:51:ab:e4:6e:58:
0f:ab:f7:92:e3:4b:94:ad:73:24:fd:ca:17:b3:e6:6a:28:7c:
31:1f:b6:ab:a0:cf:ce:30:6d:02:e7:7f:3f:fa:91:4c:d4:1b:
39:ad:34:75:5a:d4:e4:32:55:9a:39:f7:f9:6e:f4:46:db:5d:
0f:97:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:55 2025 by rpki-client