Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa
File: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (raw, json)
Hash identifier: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=
Subject key identifier: C4:25:46:E4:48:34:ED:B4:15:41:B2:D7:1A:E0:99:56:69:1E:12:41
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 0194266AFE4201A481B201E4A75B2ABCD9B3
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa
Signing time: Thu 02 Jan 2025 09:48:53 +0000
ROA not before: Thu 02 Jan 2025 09:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213134
IP address blocks: 91.201.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:fe:42:01:a4:81:b2:01:e4:a7:5b:2a:bc:d9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Jan 2 09:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c42546e44834edb41541b2d71ae09956691e1241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:e3:ee:3f:90:c2:02:a9:7e:5a:ca:1d:ce:
32:1f:7f:0e:38:36:fe:48:65:16:e6:64:f2:90:4a:
1e:eb:b1:02:48:2e:4a:49:75:27:8b:2b:7b:05:d8:
99:a5:c0:e7:d0:c1:0c:ab:8c:31:6f:c1:c9:e3:29:
45:73:19:a1:af:c1:e7:35:04:6e:81:49:ba:8f:c4:
6d:44:4a:2c:f4:f7:cc:cb:90:9c:1a:45:77:b2:aa:
51:57:ba:ec:d5:63:9f:fd:66:8b:2e:f2:9d:f9:46:
80:7b:a0:d7:26:90:b1:2d:9a:44:72:b9:58:68:97:
34:24:b2:4b:01:bb:0e:ce:a6:b4:a9:08:d0:8d:b6:
13:6a:d9:ee:c8:c2:a1:6a:92:cd:3b:21:5d:58:8f:
c6:8d:b7:8f:7d:e1:5b:17:49:b5:24:ac:ce:36:4d:
3e:27:86:7d:26:23:37:f9:f1:4e:84:6a:d6:d4:6d:
b7:b7:79:ec:81:9f:98:db:c4:5a:33:da:01:1c:64:
5c:6a:07:85:e8:75:1c:9a:8d:32:69:e0:89:f7:81:
a1:53:13:62:0f:91:08:80:14:a7:ae:f5:ef:c5:fb:
f4:b2:5d:3b:84:43:6c:92:51:8c:02:7a:2a:4a:e6:
2f:f5:d5:32:a9:bc:d6:2e:2c:14:62:78:a2:05:d5:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:46:E4:48:34:ED:B4:15:41:B2:D7:1A:E0:99:56:69:1E:12:41
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ce:9d:9e:04:3b:59:aa:10:65:38:33:60:35:cd:af:ef:e5:
cf:98:4a:f4:6e:d0:9b:e0:cf:08:b7:33:70:b8:c1:b5:3b:07:
92:da:89:08:22:ac:d4:32:fc:b9:09:2c:39:0f:5b:c5:7a:d2:
01:9d:f8:32:20:c8:a8:f9:76:eb:2d:10:7a:e2:5f:cb:f6:67:
8f:18:e8:db:e4:b0:f0:db:69:4a:fc:21:44:ae:d1:7b:13:66:
7b:3e:6b:62:4b:c1:5e:3d:da:54:e3:cb:d0:ed:cb:1d:9f:0a:
ed:1e:05:c5:29:5c:51:5d:cc:22:ec:44:66:73:1a:87:ba:34:
4c:9d:de:cc:88:1b:62:64:68:f5:43:ef:87:d1:0a:04:02:30:
36:1e:02:a8:81:ab:b3:86:18:d7:37:08:d4:65:f9:9f:ff:0a:
88:f8:9f:4d:1a:69:da:e3:23:fe:d7:e4:cc:b0:ba:83:d9:57:
b2:76:ea:25:59:ee:33:54:e5:ed:34:7a:87:b5:7d:0a:40:49:
2e:a1:d3:91:c9:67:a6:80:ed:a6:c8:db:4b:b6:1f:7b:7a:a9:
d1:b8:d2:5f:2e:15:28:fd:8a:cf:cd:d2:5e:60:61:f1:b8:2d:
a1:cb:89:13:44:d0:7d:76:b8:f6:93:53:d8:1e:33:9c:cc:f3:
bc:29:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:58:57 2025 by rpki-client