Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa
File: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (raw, json)
Hash identifier: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=
Subject key identifier: AF:BF:F0:57:77:73:8E:95:4F:84:A4:57:B7:D2:CE:2F:AB:85:36:83
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 019427487FE7BEB21EC52C479D4DDB03861A
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31242
IP address blocks: 91.192.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7f:e7:be:b2:1e:c5:2c:47:9d:4d:db:03:86:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afbff05777738e954f84a457b7d2ce2fab853683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:86:db:f1:87:7b:e2:82:58:69:db:04:90:
df:ad:f3:c3:dc:a8:85:c0:a0:76:ef:f5:ed:28:35:
1b:f0:84:33:b4:33:10:f0:87:e5:2a:1c:78:bd:3b:
f9:f7:44:db:e7:99:50:c2:4b:f1:87:68:83:1c:f6:
0e:c1:26:5d:af:5c:bd:2c:26:33:43:bc:24:96:1e:
1a:b8:d8:0b:cc:b4:f2:3d:be:1d:e1:ba:ef:54:bb:
66:05:6c:e4:ee:17:80:c4:97:aa:23:72:f6:6b:48:
00:bf:24:b8:75:5f:7e:4e:e3:0b:1b:0a:96:06:89:
0c:1d:9c:29:58:4f:34:f7:0e:c2:2f:4a:66:e3:26:
25:42:e2:00:53:ae:07:a3:db:f0:ef:57:64:6f:57:
bd:64:27:a0:33:c0:8e:f9:1d:d1:23:d6:a0:29:90:
58:f7:3c:90:1d:f4:01:6e:1b:d9:3a:d6:52:1e:f3:
cb:e9:31:69:7a:4e:81:c6:43:79:e3:56:cd:cd:ab:
9d:cd:cf:0d:61:91:65:46:46:7f:e0:86:d7:1f:46:
ea:52:be:2f:97:a4:b9:4f:1f:f2:db:e3:bd:5b:32:
b2:be:c3:ae:3e:a1:67:5b:4d:05:a5:5d:c5:95:e4:
52:11:41:c3:f6:09:34:19:6e:8b:14:e3:5d:d1:17:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BF:F0:57:77:73:8E:95:4F:84:A4:57:B7:D2:CE:2F:AB:85:36:83
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
99:b9:36:21:3b:8a:1b:b0:4c:b6:16:90:f7:36:8a:0d:c2:91:
1e:a4:ac:75:f7:f0:04:57:36:16:86:31:a3:61:b9:db:6d:4b:
2d:50:02:c9:4b:b0:47:71:f8:f3:93:32:29:39:85:e8:a4:fc:
ed:95:40:ac:2f:d1:ee:b2:84:e6:71:3e:cb:be:e7:36:b8:4d:
ba:a2:c5:c7:87:68:ec:1a:2e:22:1e:89:2b:e1:7d:6d:f5:31:
58:a0:5e:0c:49:dd:e1:4d:41:36:5d:be:d3:e2:6b:2a:27:c4:
89:d8:b7:6a:52:f3:f2:c4:28:e7:8e:f8:57:c5:e1:ff:a7:77:
b0:02:ca:00:92:e5:2c:cb:7a:f8:9b:c0:3e:77:77:70:7d:f1:
89:80:3f:0d:db:d5:20:52:a0:3c:87:37:7a:7c:f5:cf:b9:d3:
85:46:c5:f1:b5:1e:8a:b3:14:7a:bf:f8:9a:72:d3:7a:dd:42:
0f:e7:1b:b4:fb:bf:05:9d:d2:76:32:97:1c:f0:40:04:bd:a5:
ce:fb:6b:e7:dc:06:08:25:0a:96:e5:3b:40:3d:ae:a0:4e:dc:
41:d4:02:83:ad:1c:9c:ec:78:4d:9d:07:6f:67:f8:f5:9e:ec:
15:94:b4:e4:5d:5a:08:b2:cb:df:1e:91:74:20:e2:f9:8b:4b:
1a:36:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:17 2025 by rpki-client