Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/I5ms-9-HDQyJVXC11lx_-uEpynE.roa
File: I5ms-9-HDQyJVXC11lx_-uEpynE.roa (raw, json)
Hash identifier: +pNOsJjPZEu3zURh4NPSrLLV4Ki6TCXOgrQW5jhS4rs=
Subject key identifier: 23:99:AC:FB:DF:87:0D:0C:89:55:70:B5:D6:5C:7F:FA:E1:29:CA:71
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 0194221FBB4A47B0D623F9AF8B1B7E908E12
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/I5ms-9-HDQyJVXC11lx_-uEpynE.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202185
IP address blocks: 91.216.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bb:4a:47:b0:d6:23:f9:af:8b:1b:7e:90:8e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2399acfbdf870d0c895570b5d65c7ffae129ca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:72:af:14:b0:ab:7f:3a:80:9f:a8:e7:11:
4b:a7:44:68:cb:87:0f:d9:30:75:c9:cb:10:06:f5:
e6:a8:17:77:05:70:42:9a:c2:85:f9:be:97:2b:2d:
9b:b9:70:de:b8:55:f7:17:3e:be:36:19:57:de:6d:
6a:74:74:ff:88:55:73:e7:c6:b9:45:a4:1c:20:4f:
b5:19:2d:e1:61:14:c4:89:16:34:40:a5:56:ef:52:
9c:f3:13:41:2d:86:01:f9:e1:fa:98:16:88:e8:4a:
cf:92:15:21:e1:98:fd:93:86:2f:25:f7:89:17:18:
ae:59:d2:06:06:ec:71:45:3a:4c:5f:80:18:11:7f:
dd:4a:b4:cd:2c:cf:b3:f7:1a:cd:1e:3e:a5:f3:66:
00:25:6e:75:70:ee:7d:d9:59:ae:41:f2:57:92:d8:
8a:57:f9:af:3c:52:4f:b1:79:71:1f:0c:c3:e2:2b:
9f:36:91:b9:c1:38:75:c0:27:37:0a:57:dc:a1:a2:
de:53:d6:0b:5f:55:a3:26:fa:23:c5:8b:0f:22:23:
ab:ef:9f:1a:69:22:e8:b8:be:db:61:fc:35:d6:55:
65:de:1e:24:3b:0e:a6:91:3c:d9:99:50:91:ca:3c:
7c:c8:4b:10:b3:cc:48:25:a0:5d:bc:90:bd:25:13:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:AC:FB:DF:87:0D:0C:89:55:70:B5:D6:5C:7F:FA:E1:29:CA:71
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/I5ms-9-HDQyJVXC11lx_-uEpynE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.115.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d8:79:5f:70:f8:92:c6:82:0b:46:7b:01:c1:2e:df:2e:5f:
43:3a:9a:5a:d4:71:de:63:e8:4d:98:66:a2:79:29:b7:0f:4c:
4b:37:60:6d:76:19:e9:4f:a1:db:27:2c:b5:8f:0d:41:41:46:
14:88:81:63:8e:30:02:d8:6c:35:c3:0e:c1:9d:82:fe:6e:5d:
fc:f8:da:1b:63:c0:b6:84:e0:e3:8f:db:7c:42:a4:21:20:73:
79:cc:aa:09:6d:75:87:aa:32:f4:81:d6:ac:bb:33:08:5a:ac:
dc:38:6d:85:c5:be:90:07:d1:44:5c:38:1d:1a:c3:db:05:37:
e9:93:73:0d:ba:d0:10:8b:a8:46:26:c3:d6:08:fe:e0:a5:ca:
e5:74:c0:30:a8:d1:2d:8e:d3:ea:76:6a:ff:01:05:13:e9:f7:
2d:8d:35:64:c7:04:92:3f:b7:6a:26:26:8d:83:81:68:09:58:
cd:f8:e6:0e:20:cc:34:7a:27:c4:35:d5:fe:1b:15:c1:f7:59:
a6:8a:73:f6:6d:2f:ce:df:ca:cc:0e:7f:24:88:45:8c:98:2c:
86:9b:c2:06:d9:bc:5b:38:e8:4d:6f:83:9d:0a:32:14:d6:86:
29:aa:67:41:f7:15:cc:c5:b0:a1:81:95:4e:75:cd:7f:29:74:
94:ca:20:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:55 2025 by rpki-client