Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/RldGQHHu7aXrFKqbN0RijL0U3Ag.roa
File: RldGQHHu7aXrFKqbN0RijL0U3Ag.roa (raw, json)
Hash identifier: Tty4oyJGbKQQWOc62S+LPXMFMh9E2XefuBgmDqIjJpw=
Subject key identifier: 46:57:46:40:71:EE:ED:A5:EB:14:AA:9B:37:44:62:8C:BD:14:DC:08
Certificate issuer: /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial: 01942444ABC0983C542389D1CCFFBA81B670
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/RldGQHHu7aXrFKqbN0RijL0U3Ag.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210994
IP address blocks: 91.233.120.0/24 maxlen: 24
2a11:6740::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ab:c0:98:3c:54:23:89:d1:cc:ff:ba:81:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4657464071eeeda5eb14aa9b3744628cbd14dc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:05:00:e0:8f:9c:c2:61:ed:22:cc:66:b0:
94:75:af:51:13:a4:bb:af:ad:b3:04:92:3e:9e:d4:
53:72:e7:06:cc:1c:ab:02:5b:0d:31:e6:18:39:fb:
49:b6:dd:eb:75:68:49:99:da:88:c9:b3:a6:3e:25:
f7:c1:c6:dc:40:ea:84:e7:77:08:61:5d:41:f6:ec:
3c:8d:cf:25:37:22:50:61:46:1f:f5:96:8d:76:c7:
75:61:a6:0e:75:bd:a2:81:ae:69:06:df:7c:9e:64:
3f:08:d4:d3:ca:53:80:c0:60:3f:67:1b:15:f2:f7:
a1:7e:ca:b0:e4:0f:b9:89:85:a5:2f:88:4f:1f:3a:
a6:40:d1:97:45:1a:00:3f:10:ac:f2:ca:d5:d2:c0:
cf:2a:c4:3a:87:2b:c3:a6:cf:34:00:c1:01:b5:2d:
72:f6:26:b6:f2:26:a7:af:29:7a:0d:11:49:81:dd:
f3:11:79:1f:f8:7a:79:7a:5f:e4:94:57:3a:bb:68:
45:66:56:eb:79:12:d8:41:f1:62:0d:02:bf:a3:7f:
9a:15:34:04:f8:db:03:ff:9f:85:8b:ee:4e:db:1a:
52:80:eb:f4:32:59:2b:7b:a4:76:32:b8:e1:11:7b:
2b:ff:dd:ee:0c:a5:17:5c:41:e4:a8:97:01:21:35:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:46:40:71:EE:ED:A5:EB:14:AA:9B:37:44:62:8C:BD:14:DC:08
X509v3 Authority Key Identifier:
keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/RldGQHHu7aXrFKqbN0RijL0U3Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.120.0/24
IPv6:
2a11:6740::/29
Signature Algorithm: sha256WithRSAEncryption
6c:40:5b:f3:78:9c:e1:bc:4c:0b:35:5e:6b:e4:1f:a0:d8:d1:
ff:cc:97:bb:62:d9:69:c0:7e:05:26:fa:6b:8b:9f:c3:2b:54:
08:b3:70:d1:bd:44:21:16:88:64:25:d4:15:33:91:35:d6:db:
f4:63:3b:6b:b4:fb:47:1f:0f:8b:f9:df:76:57:a8:83:53:c7:
a2:1c:a2:d8:3e:7e:b2:26:19:97:73:67:36:55:21:57:4f:f1:
49:31:9e:fb:f2:f4:ac:6d:2d:97:95:f5:38:bc:7d:ec:f3:ac:
9c:77:ee:c8:e5:bc:40:50:ae:bb:b0:1d:75:5e:58:58:4b:f0:
d7:17:4c:53:ff:73:8b:f1:87:d5:86:bc:72:73:0c:4c:4e:77:
bb:28:40:67:6f:e9:51:f5:31:ea:0f:7b:d9:ce:64:bf:db:58:
1b:f7:82:71:d4:6e:a9:2f:24:34:3f:b9:7a:bc:95:75:87:93:
39:34:b5:2b:ed:24:ba:ba:ed:2f:83:14:92:e8:4c:e7:73:ef:
7e:4d:aa:d9:5b:0f:c9:98:45:cf:3d:f0:ff:72:fa:e9:dd:f0:
14:5b:70:31:39:9b:4b:c6:41:67:ed:f4:fb:45:bb:1d:99:10:
9d:68:92:82:73:ec:5b:60:bc:4d:4b:55:b2:6a:56:86:26:13:
92:7d:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:55 2025 by rpki-client