Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/V9Tcb7av_dVNBRfc9o8N4UA1rso.roa
File: V9Tcb7av_dVNBRfc9o8N4UA1rso.roa (raw, json)
Hash identifier: grBhVeV/JDROWekOKeK0iGvKNav3Jg9ZyJda99GGyG4=
Subject key identifier: 57:D4:DC:6F:B6:AF:FD:D5:4D:05:17:DC:F6:8F:0D:E1:40:35:AE:CA
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019498557BA1F1BF94570B4E425ACFD9903D
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/V9Tcb7av_dVNBRfc9o8N4UA1rso.roa
Signing time: Fri 24 Jan 2025 12:42:06 +0000
ROA not before: Fri 24 Jan 2025 12:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48648
IP address blocks: 91.198.233.0/24 maxlen: 24
91.211.120.0/24 maxlen: 24
91.211.122.0/24 maxlen: 24
91.232.157.0/24 maxlen: 24
193.107.80.0/24 maxlen: 24
194.28.103.0/24 maxlen: 24
195.12.56.0/22 maxlen: 22
2a0a:2c0::/48 maxlen: 48
2a0a:2c0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:55:7b:a1:f1:bf:94:57:0b:4e:42:5a:cf:d9:90:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 24 12:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57d4dc6fb6affdd54d0517dcf68f0de14035aeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:95:9e:4a:3e:9a:e7:87:5d:87:a1:59:f2:8a:
e9:ba:ca:ff:bc:1f:84:dd:8b:f6:ef:99:72:77:c5:
f8:d7:dd:31:fa:6f:d7:cf:61:36:11:ec:f5:2e:d5:
d1:29:16:9b:61:89:34:aa:b1:1a:48:1f:86:c4:5d:
84:40:f8:0f:94:38:31:dc:6e:b6:3c:4d:ad:76:8b:
53:01:fe:a3:25:26:1a:04:38:39:63:0f:c4:b8:5a:
df:f0:3b:7e:cc:bd:1a:1a:8e:ba:df:f1:0f:35:d3:
97:9b:45:83:5d:01:1b:7f:a5:97:0d:e7:c6:ba:dd:
75:1e:ae:eb:7e:be:67:3d:a5:6f:92:e6:a7:90:e8:
5e:f5:e2:a2:34:18:8a:8f:85:fb:39:80:f2:7f:44:
ce:0c:ac:f3:43:6c:f9:18:d0:02:56:79:5d:92:eb:
86:4a:72:da:e8:f7:83:11:4f:71:b9:f1:41:8b:f4:
af:77:e4:ce:8a:45:b6:3e:1f:30:60:18:a8:96:11:
7c:e0:0e:fe:be:df:ce:91:f9:f8:5a:ec:02:2e:6f:
f1:b7:74:71:5f:85:7d:2e:d6:50:ad:ba:c0:41:44:
06:8c:b4:0e:ed:75:3e:2a:dc:97:4e:5e:be:b2:6a:
3c:a0:4b:e6:4a:4a:09:c8:0c:74:ff:c7:e5:db:6c:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:DC:6F:B6:AF:FD:D5:4D:05:17:DC:F6:8F:0D:E1:40:35:AE:CA
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/V9Tcb7av_dVNBRfc9o8N4UA1rso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.233.0/24
91.211.120.0/24
91.211.122.0/24
91.232.157.0/24
193.107.80.0/24
194.28.103.0/24
195.12.56.0/22
IPv6:
2a0a:2c0::/48
2a0a:2c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a1:aa:5d:df:b6:9d:b8:64:ca:e3:2c:39:2e:fa:ca:16:15:
f4:53:25:9a:ed:f5:f0:58:16:08:4d:61:10:bb:f8:5d:ad:79:
7d:8e:d2:7a:a3:45:f9:1b:d3:36:bc:83:b1:d8:87:71:e7:15:
dc:68:f1:a0:df:2a:e6:8a:e2:f9:a7:ff:46:ea:9b:2d:06:af:
72:a2:db:17:f7:c5:63:b8:6a:3c:3a:3b:15:47:68:e6:71:2c:
b7:79:92:9a:5b:4e:47:b1:23:17:2d:bb:90:12:cd:b1:b9:11:
e2:ee:7f:a1:7f:ed:90:79:6e:ce:2e:75:64:8a:d8:48:e1:b8:
d2:4e:bc:29:68:a0:0a:67:22:d0:de:5e:2c:e3:1d:59:d0:6a:
ec:51:85:6e:e9:3e:3f:31:9a:a3:0d:e4:3a:c5:f2:bd:f0:6e:
5e:96:1d:1b:6b:5c:fe:70:3c:9d:72:11:5f:17:8f:5b:46:9f:
96:56:ab:29:9f:7a:17:e0:85:8b:6e:57:40:5d:10:93:5a:02:
65:63:ac:22:0f:90:9e:5d:67:c8:60:7f:03:93:e3:57:b1:50:
93:8f:9b:71:f2:05:24:5d:c0:fd:58:66:b2:9b:0e:df:fe:98:
21:37:2a:4a:83:6b:ab:fc:bd:cc:d9:a0:a4:fc:c5:3a:30:c9:
b7:df:8a:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:20 2025 by rpki-client