Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/zMpvAV73BjDw8Fl29P7VCpuHc2c.roa
File: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (raw, json)
Hash identifier: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=
Subject key identifier: CC:CA:6F:01:5E:F7:06:30:F0:F0:59:76:F4:FE:D5:0A:9B:87:73:67
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 019426D9DC380EDB85C6DD3A9CFBE2FF5015
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/zMpvAV73BjDw8Fl29P7VCpuHc2c.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 91.226.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dc:38:0e:db:85:c6:dd:3a:9c:fb:e2:ff:50:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccca6f015ef70630f0f05976f4fed50a9b877367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:77:77:eb:ad:8a:4f:3e:df:01:56:52:2f:
0c:76:54:8f:a9:73:be:a3:38:be:c3:96:0e:db:93:
2c:f5:8f:49:46:2a:97:fb:3e:5b:c6:23:96:ca:44:
8d:0a:64:01:0f:7f:24:8c:ff:19:f7:d3:f9:a8:4e:
17:ad:04:c3:69:36:22:68:74:51:c4:94:66:e6:17:
c6:5e:4f:69:99:6d:05:da:cf:5a:1d:7c:5a:84:a2:
03:cc:e7:6b:37:7c:62:2b:1c:01:4c:66:79:f3:18:
12:c3:4c:7d:3a:8b:5a:39:53:44:f4:a8:a2:14:8b:
60:ee:d0:76:c8:73:af:1b:af:be:43:2d:ab:f3:e0:
fe:c8:55:6f:6b:c0:1c:e8:3b:e3:82:36:47:df:4a:
c0:aa:d9:19:17:e1:ff:88:57:3f:8b:6b:e9:cb:fc:
89:29:e2:4d:cc:5f:9d:dc:c9:92:0c:94:a0:0c:1d:
a8:53:9f:cd:b0:19:c6:3c:eb:fb:56:63:4b:40:70:
3c:9b:ce:19:28:15:62:1f:b3:5d:8f:6f:7f:9a:73:
58:82:af:14:ee:d6:ad:02:5c:4a:75:03:fd:61:34:
bf:fb:51:d0:cd:7a:01:f8:4c:56:d1:11:ac:40:a5:
1f:c0:86:51:37:d0:04:a9:4f:19:49:16:29:e0:c8:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:6F:01:5E:F7:06:30:F0:F0:59:76:F4:FE:D5:0A:9B:87:73:67
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/zMpvAV73BjDw8Fl29P7VCpuHc2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:df:bb:64:5f:0f:65:54:25:cd:66:10:83:1a:ca:39:e4:2c:
ce:e3:cb:c2:99:26:84:6f:2a:06:5b:a7:28:e4:7f:30:7c:cc:
bc:b3:15:22:d4:19:7b:3b:4e:5f:ff:de:91:69:16:9c:7f:bc:
0f:3e:36:83:4c:32:d2:1b:ae:a3:57:bc:f9:f3:c5:ea:f8:0b:
8e:7c:c7:86:94:68:a1:0b:a5:ee:c9:60:2e:46:93:5a:35:dc:
4c:c6:b1:26:96:64:eb:61:f9:52:e3:53:79:1f:bc:41:97:ac:
7a:68:dd:a5:99:11:85:81:10:58:3f:24:ef:80:74:d4:ae:b7:
d1:76:72:28:52:1f:11:c0:41:46:9a:c3:ee:0f:cb:59:e2:0d:
3f:ff:20:ea:68:98:c3:a3:0b:25:dc:be:9e:a7:28:7d:e5:b3:
22:7a:db:2a:f3:3e:2d:6f:42:38:02:ef:72:a3:2c:11:0b:aa:
11:86:20:9d:04:b5:ac:8b:91:6a:60:68:02:7c:e3:e4:9b:06:
6f:4f:2f:6c:1b:f2:23:09:39:8f:c1:6f:88:20:25:b8:c7:ec:
3d:87:92:7c:45:a7:88:78:c2:9a:f2:4d:9c:1e:c4:ab:4a:6d:
94:2e:ef:da:39:00:5c:ec:bd:80:8d:07:6d:f5:7d:0a:e8:d7:
07:b4:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:28 2025 by rpki-client