Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/9QkZQFFq52UED9EyY0jKnFH-pX8.roa
File: 9QkZQFFq52UED9EyY0jKnFH-pX8.roa (raw, json)
Hash identifier: qLNZsCVw5BE1cHr6HyybImHSaQWc8kutbUnGNRzqfeU=
Subject key identifier: F5:09:19:40:51:6A:E7:65:04:0F:D1:32:63:48:CA:9C:51:FE:A5:7F
Certificate issuer: /CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Certificate serial: 01942143CAD90DEF80379F5537ED78D906DC
Authority key identifier: C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/9QkZQFFq52UED9EyY0jKnFH-pX8.roa
Signing time: Wed 01 Jan 2025 09:47:58 +0000
ROA not before: Wed 01 Jan 2025 09:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41505
IP address blocks: 91.208.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ca:d9:0d:ef:80:37:9f:55:37:ed:78:d9:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77111ec5549115cb347654d8fe5b2709d27f7df
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5091940516ae765040fd1326348ca9c51fea57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:84:d9:16:99:06:bd:11:53:cf:ae:c8:bf:
b7:d1:aa:25:9d:30:67:0f:d8:1b:67:50:d4:d4:0f:
b4:bb:7b:c2:1f:6e:6e:93:2d:1b:bd:71:b4:7f:93:
04:92:f4:1e:a0:1a:23:bd:0e:5e:ce:f9:fb:53:fe:
de:00:03:86:d8:39:b4:76:7c:5a:fa:3b:f6:14:f1:
c1:ce:8d:c9:d8:90:2a:be:88:7d:b6:d8:6b:8a:9a:
da:37:0d:39:10:cc:43:34:86:d4:c7:5a:13:cc:a8:
a2:5f:44:62:8b:e9:6b:bb:42:61:48:cd:2e:2a:df:
11:07:47:a0:6a:10:05:73:05:71:60:ea:c0:4f:0b:
ba:44:24:c2:dc:00:6f:19:fa:0d:93:31:16:66:23:
78:5e:c5:94:c1:9d:70:2f:b4:bc:20:29:7f:eb:a7:
64:c3:d0:54:ed:0f:5e:59:8d:4e:50:54:e2:3f:15:
4f:59:13:8e:4d:ff:e8:af:e4:0c:90:7c:66:94:5c:
f8:bc:f4:f9:2f:a2:16:11:fa:99:9f:bc:61:60:08:
2d:55:fd:56:f8:f4:d1:27:a8:38:cd:42:ef:69:d8:
e5:60:ae:36:10:dc:c2:c3:55:35:03:02:60:5b:8c:
f6:26:ec:82:10:d5:db:d1:3f:29:08:db:1d:c0:f4:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:19:40:51:6A:E7:65:04:0F:D1:32:63:48:CA:9C:51:FE:A5:7F
X509v3 Authority Key Identifier:
keyid:C7:71:11:EC:55:49:11:5C:B3:47:65:4D:8F:E5:B2:70:9D:27:F7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3ER7FVJEVyzR2VNj-WycJ0n998.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/9QkZQFFq52UED9EyY0jKnFH-pX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e2d1ad-cfe0-4494-aa75-e0c2b94792ca/1/x3ER7FVJEVyzR2VNj-WycJ0n998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.101.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b8:cd:33:dc:69:b9:71:a9:27:89:6e:86:2c:11:72:d5:c9:
cd:fb:ef:af:c2:20:2f:92:79:01:7d:11:90:31:35:54:d9:0c:
a2:3b:9e:71:9b:72:20:0e:94:14:f5:20:c6:59:a3:1b:81:0f:
1d:77:d9:b3:48:7c:20:c5:7e:e0:b3:bb:4f:de:d9:10:e2:9c:
37:e0:fd:0a:9c:66:c5:50:19:16:ef:3e:cd:65:f2:59:f1:1f:
d5:ba:f5:1f:24:02:f1:7d:a0:eb:e4:60:57:55:1e:9f:cb:19:
d8:cf:46:91:c6:d4:e7:d4:8c:03:a6:b8:82:2c:1b:8e:d6:99:
38:ff:d0:3f:c5:05:8a:e1:a7:ae:79:5c:fd:84:54:e2:06:b9:
d8:97:c2:ac:09:ba:bb:f9:be:ba:56:41:26:8f:c0:50:f2:9f:
a9:db:81:5d:ac:42:4e:78:6f:48:8b:b7:86:3c:01:19:6c:b1:
02:12:2d:1a:09:e3:7e:78:91:84:7e:6d:28:f6:03:55:10:2e:
b8:5a:3a:c9:b7:b7:d0:54:03:fa:2f:d8:3d:4f:c4:83:9f:98:
00:45:23:f2:6c:20:f4:ad:c3:5c:2f:c2:cd:23:a2:18:82:d4:
f2:ca:0f:16:d7:09:80:78:c7:02:1a:2a:17:b8:b6:4b:d4:8d:
02:ff:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:41 2025 by rpki-client