Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa
File: mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa (raw, json)
Hash identifier: bq/vxuiDoDVFgx9I1292qiHAVq4peufKuf4SJNis0Io=
Subject key identifier: 98:A5:CC:D6:C0:97:6D:7E:16:33:F7:CA:97:1E:85:41:4E:15:2E:35
Certificate issuer: /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial: 0194258FA88218E168975F0A3F0585A7AB5F
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50906
IP address blocks: 91.216.20.0/24 maxlen: 24
2001:67c:1cc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a8:82:18:e1:68:97:5f:0a:3f:05:85:a7:ab:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98a5ccd6c0976d7e1633f7ca971e85414e152e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:a0:ce:66:5b:22:36:0f:e6:73:fc:c9:07:
39:64:de:56:2c:d6:21:6f:66:c9:d4:95:cd:a7:a6:
62:95:7a:db:65:2c:03:82:1a:b9:2d:23:e0:46:3b:
33:ab:5a:b0:2b:30:0b:ef:62:66:9c:c0:fa:4a:60:
ca:7c:72:5a:2f:88:c3:41:a2:2c:5a:6f:10:03:8c:
81:1c:2c:ef:40:0e:f6:a1:17:7a:6b:0b:03:4a:b5:
6b:59:09:eb:dd:7b:cc:72:f9:b0:be:49:25:11:5b:
fc:45:62:6f:66:61:c7:4f:cc:96:a7:e5:e1:80:47:
8a:f9:68:a4:ca:3c:31:83:a4:0f:c5:cb:5e:b4:bb:
f8:bb:a6:60:a2:9f:8d:96:0a:fd:4e:a4:a1:8a:76:
dd:1b:ee:fe:b6:60:75:87:68:43:74:3b:e8:b8:f9:
9d:ee:ff:bd:29:22:73:a4:91:bd:33:77:9f:c6:8a:
86:db:33:8b:2e:f3:0a:36:08:c4:50:02:8e:39:26:
34:61:36:4d:58:53:52:e7:95:23:b9:03:d0:88:53:
70:ff:2d:fc:87:c7:40:72:1d:8c:2e:6b:18:3d:3c:
51:d7:e4:cc:31:9f:b9:ff:31:2e:c0:b9:1c:8e:10:
f0:45:94:bb:a0:e5:d1:13:97:fd:46:df:47:78:f5:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:CC:D6:C0:97:6D:7E:16:33:F7:CA:97:1E:85:41:4E:15:2E:35
X509v3 Authority Key Identifier:
keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.20.0/24
IPv6:
2001:67c:1cc::/48
Signature Algorithm: sha256WithRSAEncryption
27:d6:de:72:d2:e4:a1:9d:c3:39:03:d0:48:e7:86:0d:98:f8:
c8:31:6a:3f:de:b7:31:35:64:05:64:ac:76:57:95:a5:52:4a:
97:b2:7a:3d:0e:83:67:dd:74:d7:34:e6:c0:c0:87:ed:fe:92:
88:8a:bc:5c:42:e6:ed:af:55:ae:02:09:7c:aa:1d:70:37:80:
d1:b2:5d:2a:c3:b4:b9:52:01:85:24:ed:f6:60:e8:c8:4e:84:
f9:c5:41:c3:f4:e8:76:32:1c:35:b8:64:2d:51:44:86:11:c6:
16:7b:c9:94:8b:2e:5d:ce:15:43:51:58:42:1f:27:fa:b4:f3:
49:57:cc:c9:e2:f1:7a:a8:f9:b9:02:00:87:1d:8b:c5:ef:8b:
43:50:14:62:ac:8e:a6:bf:a1:8c:1f:04:0a:2f:f7:cc:e7:b5:
f4:88:fb:87:4b:ea:7f:0f:3c:6d:9d:8a:4a:6d:39:4f:33:2f:
ac:bf:e2:09:42:c5:2e:d7:7a:ac:f9:92:f2:9e:b9:89:53:ef:
0e:4e:ca:84:c2:74:ca:c2:5b:6e:bf:40:1a:99:79:86:e0:61:
b8:ba:97:ca:33:27:ff:c5:65:ae:fe:3b:ff:82:9b:58:8e:13:
75:cc:57:c9:a8:6f:90:64:d6:9f:02:33:c1:dc:bf:45:96:f1:
7d:2b:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:50 2025 by rpki-client