Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/xCIH9wp6RKlehql4M5SLCZPHQEs.roa
File: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (raw, json)
Hash identifier: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=
Subject key identifier: C4:22:07:F7:0A:7A:44:A9:5E:86:A9:78:33:94:8B:09:93:C7:40:4B
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 0194244572D4C18ACA0E316370C29CF95BEC
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/xCIH9wp6RKlehql4M5SLCZPHQEs.roa
Signing time: Wed 01 Jan 2025 23:48:38 +0000
ROA not before: Wed 01 Jan 2025 23:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48906
IP address blocks: 91.212.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:72:d4:c1:8a:ca:0e:31:63:70:c2:9c:f9:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Jan 1 23:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c42207f70a7a44a95e86a97833948b0993c7404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:4a:e2:98:98:37:79:fd:14:f9:f1:6a:4a:
ea:72:23:48:07:d4:82:81:c7:49:d6:b0:50:5c:a2:
0f:7e:16:29:53:65:02:72:b0:6b:99:b3:61:e6:c2:
4e:68:69:2a:f7:bd:7e:85:cc:24:e2:d9:73:19:ee:
f1:d2:0f:fa:3a:28:4d:3d:99:b6:b1:77:b9:98:a2:
bc:35:77:26:9a:b0:18:34:c8:5d:47:12:9b:c1:69:
0c:6f:d0:8e:d3:ce:a3:2f:f8:e3:e2:ed:97:b0:4e:
03:02:b3:81:f2:44:6e:58:4d:c2:60:9d:e6:32:69:
99:82:43:ac:e5:5c:7a:9e:4e:aa:7a:de:8c:26:dc:
73:76:43:ea:79:9f:8f:46:fd:55:10:7b:e0:a0:2e:
a4:11:62:2f:2c:59:e7:72:69:c3:a9:28:b1:73:e1:
0d:e9:0b:38:36:15:3e:c7:c5:73:62:4a:c6:84:a8:
5f:76:0a:2d:6a:ab:6b:dd:4f:ab:c4:d0:dd:9e:88:
a8:ca:25:c2:14:24:bd:61:02:d3:f4:57:bb:4a:71:
ec:60:5c:6d:5d:1b:5f:fd:ce:30:91:93:d6:35:fd:
ba:d8:cc:d3:d8:42:92:45:05:51:52:8f:25:bd:3e:
30:22:f0:2f:ed:b2:f0:d4:cf:ca:69:4f:bf:4b:3b:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:07:F7:0A:7A:44:A9:5E:86:A9:78:33:94:8B:09:93:C7:40:4B
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/xCIH9wp6RKlehql4M5SLCZPHQEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.46.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:53:9b:51:29:79:65:26:95:f7:2a:0e:a9:a6:f7:7f:3d:86:
5e:f7:ad:ea:aa:06:fb:bc:5d:13:0b:88:b0:2f:8c:1e:cb:5e:
dc:f7:04:4b:75:93:36:8d:3f:61:86:ff:84:2b:e8:ee:c7:17:
6a:7f:9c:3a:bc:62:39:8d:b0:7c:6d:29:9b:de:8a:1e:24:33:
54:51:75:03:cc:f4:6e:08:03:e8:72:d0:93:a1:39:c2:66:27:
51:36:88:c6:8e:6a:ae:82:f9:db:e4:ec:3a:07:d5:cd:84:9a:
81:0b:83:91:5c:0d:42:53:f3:71:92:b3:92:2d:52:af:65:a7:
1e:98:04:7c:27:81:8d:75:97:90:68:ba:65:f6:04:2f:e6:32:
e3:92:db:bc:41:01:42:0f:df:5b:35:61:ab:7d:1d:f2:fb:5d:
00:d1:91:4f:c5:d6:05:05:39:d5:52:a2:ca:cf:9e:33:e7:7c:
57:c1:fa:55:08:b0:0d:41:d0:b6:0b:86:43:49:d8:44:31:3b:
94:b9:98:8e:70:06:c1:ae:db:c7:cb:f7:05:26:ae:20:17:e3:
19:17:bf:09:ef:c1:31:ce:25:4a:be:29:aa:18:c7:48:bb:c9:
5d:8d:05:26:d4:fb:5f:c1:40:57:44:5c:dd:22:bb:01:10:e6:
8a:ed:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:14 2025 by rpki-client