Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/0k42oFwK9zeHh7UudZGNANSBYXM.roa
File: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (raw, json)
Hash identifier: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=
Subject key identifier: D2:4E:36:A0:5C:0A:F7:37:87:87:B5:2E:75:91:8D:00:D4:81:61:73
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 0194221FDA8BB80EA5C3811FFA6C36D29A97
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/0k42oFwK9zeHh7UudZGNANSBYXM.roa
Signing time: Wed 01 Jan 2025 13:48:20 +0000
ROA not before: Wed 01 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49499
IP address blocks: 91.213.27.0/24 maxlen: 24
193.169.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:da:8b:b8:0e:a5:c3:81:1f:fa:6c:36:d2:9a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: Jan 1 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d24e36a05c0af7378787b52e75918d00d4816173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:eb:f5:b3:c4:f6:19:64:3f:49:2f:00:1b:
05:c7:7c:60:a0:eb:50:b2:b1:c1:55:fd:69:1b:db:
cb:24:e4:14:91:a3:cd:73:40:1a:60:04:5c:fd:ab:
21:15:e0:4b:4c:a4:c5:e2:8b:c0:7a:89:b0:52:41:
39:6c:21:b0:4c:e8:37:24:c1:60:fc:d3:35:1d:a9:
a5:3b:b1:3e:86:30:02:8c:a6:01:be:a3:df:d5:82:
1c:cc:42:6f:f4:a1:0f:89:08:09:73:32:5a:f1:8b:
13:41:38:4c:19:9a:e3:73:fe:55:17:20:ac:f8:11:
df:25:fd:32:12:c0:bb:3d:a3:98:6e:c1:86:2d:e0:
72:8b:52:1f:e4:61:5a:cf:79:64:62:77:f9:f6:6e:
9e:15:83:dd:14:3f:48:64:3b:59:5b:9d:70:39:90:
e9:32:0b:d6:7e:de:93:23:b1:4d:8c:55:f4:a2:c3:
59:ce:a9:1a:de:7e:e6:89:c4:0f:77:b2:15:fc:a0:
19:eb:3f:93:a2:1b:91:29:83:55:07:c2:84:94:f4:
0c:6b:2b:40:b5:f4:94:f5:fe:db:f4:8d:68:1b:1f:
ad:16:ee:12:82:b6:51:01:54:0a:92:78:63:58:2b:
dc:f8:e2:60:52:75:1e:44:69:3d:81:24:10:1e:e8:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4E:36:A0:5C:0A:F7:37:87:87:B5:2E:75:91:8D:00:D4:81:61:73
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/0k42oFwK9zeHh7UudZGNANSBYXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.27.0/24
193.169.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:82:13:ac:f8:5d:3d:42:d3:f9:22:9e:6f:38:9d:fc:19:52:
77:ed:50:7a:76:a3:41:93:d2:2d:ed:a0:0a:f1:65:f4:f0:0a:
2a:65:7d:62:48:67:c2:6b:91:30:d7:a9:0e:e4:72:6c:61:9f:
70:4c:91:ca:74:9f:74:4c:79:7b:9f:3d:8e:f1:09:50:d2:25:
fe:d8:56:bb:2a:35:14:58:42:6d:75:25:aa:6c:7d:ca:05:04:
73:d7:50:2c:d9:13:25:9a:b5:88:5c:82:ae:66:d7:a7:92:71:
a4:f4:7a:38:20:c7:ed:82:52:b2:88:b1:d5:11:97:51:67:b9:
9f:50:f5:85:ba:06:1e:5e:49:6a:b5:6b:e5:5d:cd:fa:5c:f3:
45:b7:8f:1c:a1:e8:16:49:e6:8a:5d:82:91:2b:61:87:48:af:
4b:76:f2:0a:67:ab:77:3d:8d:4f:be:b1:65:78:36:fa:f8:00:
18:54:66:14:96:52:39:5d:5c:de:89:9a:2a:c3:36:b5:e7:5a:
1d:f7:ec:a9:7e:09:95:00:76:b0:20:0d:19:6c:43:91:6e:c1:
52:97:6e:04:06:11:1a:20:b5:83:58:69:f2:06:5f:6b:8b:81:
a1:0b:37:4b:52:d4:26:78:da:6c:c9:01:8b:46:ef:39:40:cf:
2f:e5:67:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:37 2025 by rpki-client