Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/abjDTRVBx93z2E7sN_HQNKnGE2A.roa
File: abjDTRVBx93z2E7sN_HQNKnGE2A.roa (raw, json)
Hash identifier: yz4j9HyamSJCRl3OAqF2NjSGl0kugENBZv6tnB8JfMY=
Subject key identifier: 69:B8:C3:4D:15:41:C7:DD:F3:D8:4E:EC:37:F1:D0:34:A9:C6:13:60
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 019423D6B1660A681482F25AC5EAF7C7E012
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/abjDTRVBx93z2E7sN_HQNKnGE2A.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50893
IP address blocks: 91.216.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b1:66:0a:68:14:82:f2:5a:c5:ea:f7:c7:e0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b8c34d1541c7ddf3d84eec37f1d034a9c61360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:46:9a:24:52:46:91:4f:b9:67:6c:bb:85:
48:c1:8e:70:9d:fb:0e:34:6d:e4:e2:79:4d:ea:8d:
7a:9a:21:b1:8f:9f:56:e6:af:ca:a9:ab:a9:8a:9b:
57:b6:2a:63:87:95:cf:c5:7b:4f:ae:7e:cc:1c:cd:
7f:e7:b5:62:b0:4a:3d:95:fe:d4:a5:1e:7b:fb:22:
cc:ba:4a:73:fe:f3:10:ef:87:e3:a6:82:65:72:38:
51:eb:fc:4c:32:99:78:d5:bc:bd:4e:9c:2a:ae:97:
1e:b8:e0:42:8b:84:9b:89:62:4e:21:53:65:86:d4:
70:e2:af:13:55:c2:e5:d5:11:c5:f5:3b:cd:80:a9:
b2:2f:74:a9:18:fe:3f:5d:42:ba:b5:5f:df:7f:c4:
0d:c9:ad:ec:63:47:93:23:42:fd:fc:62:c5:4f:5a:
f1:73:62:73:1f:73:b7:23:e6:0a:b4:dc:57:73:c7:
54:a0:fc:4a:59:ed:18:d8:69:c5:5f:5a:52:dd:af:
7c:a9:0d:f7:0f:43:23:3d:67:81:dc:20:51:24:a3:
0b:2c:20:13:54:42:6b:65:dd:c1:ac:27:fa:2f:90:
63:94:b2:74:3b:72:7b:25:fc:90:f6:ed:61:66:08:
10:13:61:04:0f:30:04:53:66:f1:f3:be:d0:c8:68:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:C3:4D:15:41:C7:DD:F3:D8:4E:EC:37:F1:D0:34:A9:C6:13:60
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/abjDTRVBx93z2E7sN_HQNKnGE2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:38:5e:27:09:f8:d7:ed:0c:a0:89:3b:0a:ba:76:83:94:9b:
da:bc:9a:99:b3:87:69:6f:a1:a1:78:39:a7:78:46:fa:3d:d9:
24:df:bd:10:a6:94:40:e0:1d:5b:de:d8:28:9b:72:0d:6a:ef:
96:00:1b:d1:ab:44:d8:a4:49:d1:a0:a7:13:f0:dc:38:85:3f:
07:fe:27:69:38:af:2f:f1:91:a5:79:d5:70:b7:c0:fb:bd:cc:
5e:7f:9e:c7:0b:fe:f6:ff:6a:ac:75:2e:f4:44:66:fb:76:3f:
a9:07:8b:a7:b5:ea:00:00:ff:d4:30:30:91:cd:aa:f7:a2:d4:
06:9e:73:3b:a0:ce:c1:af:65:ba:ca:9b:9b:f6:82:ac:b0:51:
25:5c:f3:77:97:20:27:c0:b6:b9:ce:7b:8a:68:05:63:68:47:
28:1f:c7:91:21:46:62:1e:05:4a:8d:48:0a:66:28:d2:64:63:
f5:6d:a1:4e:67:a0:18:55:63:c0:5c:4f:9a:54:11:f4:39:49:
f4:8c:71:37:f3:61:68:f8:f1:74:1a:f3:96:b4:31:2b:69:1d:
1a:68:96:8c:dc:11:9e:6b:52:18:37:e2:97:1d:bc:bd:c5:1f:
eb:c2:49:d6:23:72:0a:73:41:e1:e4:45:5a:c6:b7:21:a6:f4:
70:08:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:40:19 2025 by rpki-client