Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/A2oqQd54ayoxJnfGY2DGuTLyEzs.roa
File: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (raw, json)
Hash identifier: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=
Subject key identifier: 03:6A:2A:41:DE:78:6B:2A:31:26:77:C6:63:60:C6:B9:32:F2:13:3B
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 019427B59A3F890950B0AFB2A849CC9DB2E6
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/A2oqQd54ayoxJnfGY2DGuTLyEzs.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197326
IP address blocks: 91.220.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9a:3f:89:09:50:b0:af:b2:a8:49:cc:9d:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036a2a41de786b2a312677c66360c6b932f2133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:5f:5b:a6:2b:94:da:25:7c:11:b0:32:6b:
5e:5b:93:cc:6b:44:ed:35:5f:97:70:f0:60:ec:1b:
a3:94:d7:a8:72:cc:d1:a3:a4:b9:77:05:6d:3a:10:
c6:1b:9e:96:c0:11:86:69:a7:73:89:0c:87:6d:16:
70:c6:b7:84:b0:1c:d6:60:18:4a:9a:5e:07:ca:ed:
91:8b:43:b4:95:49:88:1f:44:c1:46:eb:1d:17:22:
78:de:46:0a:f3:2d:d3:3b:4a:bb:15:ce:1d:29:05:
b7:8f:a8:2f:14:ca:3d:48:7e:12:d1:e9:67:8d:a9:
0a:ef:5c:8a:23:d8:91:d5:e9:2c:ca:49:2f:1b:35:
ea:a0:d4:63:5b:9c:1a:5b:90:26:9c:48:36:99:b3:
bf:51:4d:9f:6b:98:14:99:07:fd:80:44:9d:b4:6c:
ba:80:36:38:fa:df:7f:6c:b7:ac:6c:af:e0:fd:a7:
fe:a7:43:ce:11:8e:d2:f4:27:5b:86:2b:70:44:2b:
51:36:18:cf:1b:9b:fc:df:c4:3f:f2:37:af:c7:f6:
fa:0d:a7:e8:65:59:f7:72:ff:82:a7:be:75:7d:fb:
1a:f3:10:10:ec:56:54:b3:b9:2c:99:eb:68:af:07:
04:dc:85:0f:e1:3b:22:f7:06:10:c1:41:32:0e:0e:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:2A:41:DE:78:6B:2A:31:26:77:C6:63:60:C6:B9:32:F2:13:3B
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/A2oqQd54ayoxJnfGY2DGuTLyEzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.55.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9e:d4:c6:cf:45:ef:fb:63:93:93:99:9b:a4:4e:ba:8d:7a:
69:49:d4:6e:90:01:5e:58:bf:0a:ba:13:29:5e:ad:d5:fc:ed:
a6:ac:97:be:f3:a1:37:a4:e4:8b:92:fe:0a:64:3d:63:1c:46:
3c:56:e3:09:fe:02:cf:58:05:ec:25:20:cb:cb:0d:ee:b7:06:
7b:e7:7a:82:35:ab:19:9f:c8:62:da:16:76:df:32:3c:57:1e:
70:89:76:a4:78:6c:ac:39:39:6d:8a:bd:1f:13:b4:8c:69:d4:
38:a3:25:be:0c:8d:c3:32:a7:dc:9b:80:be:3a:6e:b7:40:e7:
0c:ad:78:0a:7e:13:e5:1a:3c:be:81:37:e9:2b:2f:55:e0:e3:
d9:b7:28:4a:6b:d1:04:99:f6:fa:49:a6:6f:2f:2a:b5:7e:67:
3f:52:c2:1f:74:d2:45:86:bf:a4:89:7f:02:a0:d1:c9:77:8e:
5c:89:c1:ea:d1:49:60:50:9f:47:a3:63:f9:51:6f:a3:36:de:
e0:d6:ee:92:d2:77:ce:54:fc:25:fc:22:60:60:c8:14:75:36:
2a:9b:a0:f3:45:6a:ab:fb:28:a5:06:af:d0:ef:4c:68:27:d8:
c6:01:67:3b:2e:38:67:96:9f:d8:96:f1:cd:bf:41:26:ee:9f:
31:91:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:12 2025 by rpki-client