Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/n5CLi01m2wEwkEwNJimVxySnb68.roa
File: n5CLi01m2wEwkEwNJimVxySnb68.roa (raw, json)
Hash identifier: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=
Subject key identifier: 9F:90:8B:8B:4D:66:DB:01:30:90:4C:0D:26:29:95:C7:24:A7:6F:AF
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 01942143DC5BD188F814EF647844D8CC6510
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/n5CLi01m2wEwkEwNJimVxySnb68.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42798
IP address blocks: 91.193.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:dc:5b:d1:88:f8:14:ef:64:78:44:d8:cc:65:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f908b8b4d66db0130904c0d262995c724a76faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:96:66:b5:97:bb:a0:17:6a:93:64:f1:23:
bf:92:9b:03:74:ef:11:d6:7c:d6:9d:8d:1f:0a:f8:
f6:a7:8c:33:ed:74:84:c6:ad:8d:15:d3:10:b5:93:
74:e7:7c:51:d7:2e:57:15:4a:74:14:2d:e7:d1:9c:
04:34:fb:2c:af:75:ae:e3:0f:68:22:5a:19:69:f2:
08:24:9f:14:c7:ca:93:68:d4:75:85:79:bc:18:03:
a9:f6:6c:4b:d0:73:ae:ef:ed:b7:14:94:3e:75:e5:
43:16:cb:86:e6:37:92:7b:4f:e9:82:24:a6:c7:35:
f2:c9:3e:ea:c5:43:2a:3f:b2:c9:b9:77:1f:9a:bf:
5b:7c:39:6a:04:66:9c:74:65:73:77:6f:a5:bb:47:
e9:e9:66:69:00:e9:b0:30:b4:20:13:ea:af:61:6c:
2e:c6:dc:27:e2:08:d1:85:e2:12:9e:00:f8:a9:b6:
b8:18:dc:da:1c:b4:63:a6:59:99:6d:3d:c9:c9:63:
37:3e:73:e8:58:b2:2d:c0:00:21:69:88:d9:ea:7b:
d4:0b:a5:5f:4c:cc:71:07:e0:02:e3:bb:7b:0e:51:
18:a0:c0:6f:53:93:ea:39:30:07:88:b8:56:20:c2:
db:a3:b5:58:73:a4:85:d7:1e:66:0e:bd:02:06:90:
2d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:8B:8B:4D:66:DB:01:30:90:4C:0D:26:29:95:C7:24:A7:6F:AF
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/n5CLi01m2wEwkEwNJimVxySnb68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:a9:10:d0:13:5a:3b:bf:6e:19:08:d7:7d:2b:de:5a:2d:0a:
ae:b4:5e:62:8b:6e:b9:83:3e:e0:c7:8a:f5:72:02:05:03:c1:
8a:37:71:82:15:bb:16:0f:e3:3b:07:b3:53:1a:27:4d:40:21:
a2:45:31:91:1d:52:8f:54:54:ec:51:bd:25:c8:8b:40:41:2c:
03:ad:2f:1c:6e:4e:e2:74:7b:40:a9:93:f8:1e:ca:35:fb:99:
c4:cd:20:44:4e:e3:7f:a7:ea:39:6e:fa:33:f2:52:b8:6b:9d:
72:84:cc:61:ae:f0:b7:94:81:90:1b:da:18:ed:36:e2:a0:ce:
84:45:ea:a5:c4:fa:33:06:cc:c4:8a:07:3f:75:41:ee:27:ca:
ca:38:a9:d9:8d:fe:6b:2c:c5:da:c0:77:c8:c2:8b:0c:0f:53:
a5:13:be:92:f7:e5:e9:32:df:ad:4a:09:54:3e:a9:d9:b5:37:
47:18:cb:a1:7f:1f:20:e5:1e:be:d1:dc:b2:c5:b6:28:8a:19:
a1:57:22:cf:28:28:e2:1c:8b:1e:89:97:1b:ef:c8:a9:b0:6e:
7b:93:74:8c:ab:4c:cc:5b:1d:44:ab:b0:c7:11:6c:1e:09:a6:
cf:4b:5c:28:09:f2:65:b9:bd:ff:c5:0f:fa:b4:9e:a2:0c:cb:
19:8e:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:52 2025 by rpki-client