Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/2Qdf3KbNG5NqoZJX8HW2axOKIks.roa
File: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (raw, json)
Hash identifier: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=
Subject key identifier: D9:07:5F:DC:A6:CD:1B:93:6A:A1:92:57:F0:75:B6:6B:13:8A:22:4B
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 019427B6142B5F877E46EC2892D562658468
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/2Qdf3KbNG5NqoZJX8HW2axOKIks.roa
Signing time: Thu 02 Jan 2025 15:50:31 +0000
ROA not before: Thu 02 Jan 2025 15:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39497
IP address blocks: 91.198.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:14:2b:5f:87:7e:46:ec:28:92:d5:62:65:84:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9075fdca6cd1b936aa19257f075b66b138a224b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:fe:22:98:63:18:00:bc:da:97:8e:38:fb:
b1:0f:c7:8c:20:cf:82:e9:3d:ce:43:d5:48:a5:f5:
fe:14:03:c3:c2:62:b1:b0:b6:a8:36:a9:81:18:23:
8d:37:55:56:8a:12:88:64:4a:65:6e:17:a3:11:bb:
09:ee:9b:18:05:df:c6:67:e0:fd:1a:c6:93:3d:13:
f7:30:62:59:e0:69:54:57:af:7e:00:91:8d:e6:f1:
51:76:ef:60:df:54:11:63:57:50:ab:aa:75:56:3d:
09:0a:c7:94:82:02:ac:71:e8:2e:36:e3:18:8e:1b:
18:21:d5:6a:a6:d0:41:7c:52:52:7e:bc:53:b4:22:
f3:1e:8f:71:38:cd:5c:f2:6c:f3:b4:0c:25:1f:5b:
1b:06:2a:7e:21:ec:d1:35:78:81:0c:01:f1:c0:e9:
00:38:89:9c:41:0e:84:7c:bd:58:d5:db:96:7b:ff:
19:08:eb:0f:03:ba:e9:af:89:7c:8b:ac:43:08:a0:
01:17:00:fc:b6:d5:b6:eb:18:8b:68:32:9b:e4:96:
5d:d0:ca:0e:5a:ac:4c:6d:81:6e:f0:9f:d7:14:d1:
2b:8d:60:ba:2e:a4:38:a3:9a:0b:18:7b:b1:c5:f0:
c5:f6:f8:e7:3a:9f:6b:e3:7c:71:66:0d:31:d7:fc:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:07:5F:DC:A6:CD:1B:93:6A:A1:92:57:F0:75:B6:6B:13:8A:22:4B
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/2Qdf3KbNG5NqoZJX8HW2axOKIks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.52.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e4:b6:9d:f6:ff:b7:a5:0b:95:e4:8b:d4:99:14:54:05:aa:
da:76:c9:c1:40:c2:c7:07:ab:0c:97:ff:8a:59:81:1c:f0:a4:
38:ef:0d:1f:81:55:82:72:31:67:7d:d8:4f:2e:42:70:ad:9e:
af:f3:4a:68:e5:51:3d:a4:01:74:15:41:e7:ef:03:f8:ff:6e:
8e:88:e2:30:f1:1f:5e:24:af:9f:c8:a9:0d:51:db:d0:01:22:
1e:08:d4:43:55:66:14:43:e7:dc:3d:53:f4:bd:74:77:b3:fa:
0a:11:f1:68:2b:d4:f8:95:e2:67:36:3c:a4:51:e9:6b:0b:c0:
ed:2a:cc:bb:c4:a4:3d:bb:8e:6f:d3:ef:11:f2:27:b7:cd:99:
51:5f:93:6d:12:73:7a:49:58:94:c4:d8:fc:7c:0f:10:77:0c:
82:df:e6:1f:dc:2a:4a:aa:a6:b2:bf:ae:12:3b:57:3b:23:0f:
0c:f7:74:d0:c9:38:90:98:82:b1:08:9f:9b:5a:5e:58:30:e0:
1f:92:d4:49:69:66:52:d4:0d:8d:35:0f:da:30:a5:95:1f:0b:
14:d5:d0:fb:26:ce:2d:1a:66:5d:3b:98:48:01:48:85:f2:17:
cf:a3:50:fe:91:77:5c:6f:a9:d4:f1:d0:19:a7:25:ee:d6:5b:
11:14:af:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:39:20 2025 by rpki-client