Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa
File: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (raw, json)
Hash identifier: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=
Subject key identifier: E0:C4:01:87:35:BA:A7:95:0E:CA:A3:FE:85:B0:C0:14:FE:9D:AC:A4
Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee
Certificate serial: 0194258F4F2901E22FD0A085ECBBB5177486
Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197357
IP address blocks: 91.220.63.0/24 maxlen: 24
2001:67c:a70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4f:29:01:e2:2f:d0:a0:85:ec:bb:b5:17:74:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c4018735baa7950ecaa3fe85b0c014fe9daca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:77:fc:54:0f:bd:1d:f5:8c:6a:0b:09:4a:
be:1f:2e:23:3f:40:a0:5e:d9:df:b9:de:55:25:22:
ca:84:7d:a8:64:f2:8d:30:36:3d:f1:92:e2:08:29:
03:f4:13:ad:04:4c:3d:35:19:18:d3:1e:d1:4e:42:
a9:5b:16:c9:03:dc:6f:2c:67:3c:d0:98:ae:32:60:
85:4a:65:6d:fa:7f:90:a8:78:90:7c:d4:96:bc:24:
16:ad:a2:0b:9d:63:15:5e:30:bb:93:8c:d0:2a:91:
cb:04:c3:a9:02:17:16:c5:11:f2:57:38:f4:62:b8:
51:f4:fa:ba:1c:72:18:c8:2a:d3:00:7b:8e:d0:2a:
f7:13:88:53:9a:6e:aa:36:87:5e:08:8d:d5:a3:64:
5e:b0:bb:65:54:08:13:6e:ff:c1:ce:0e:9b:d7:f3:
0f:62:fa:65:6d:a8:34:96:97:b2:5a:1f:80:1d:d5:
d7:9e:94:21:fd:db:37:7b:4a:70:77:b1:e2:1a:b6:
b9:db:1c:62:91:a2:a9:bf:d4:14:f7:ef:dc:43:2b:
19:f0:e4:20:35:44:f7:08:54:92:3a:2d:34:0b:47:
5a:b9:66:ec:7f:05:24:ca:eb:ef:d7:d6:11:f7:c7:
cf:1e:88:90:f4:f4:4f:27:37:7b:a5:2d:12:ca:87:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:01:87:35:BA:A7:95:0E:CA:A3:FE:85:B0:C0:14:FE:9D:AC:A4
X509v3 Authority Key Identifier:
keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.63.0/24
IPv6:
2001:67c:a70::/48
Signature Algorithm: sha256WithRSAEncryption
10:00:25:28:26:95:e8:81:01:d2:d7:08:e2:fa:1c:ab:f4:4b:
99:e6:97:8b:b1:f3:58:6c:f4:84:01:a8:a8:2e:b3:18:83:3c:
c9:15:55:e4:f2:93:25:f4:4b:f3:b5:3f:42:ab:29:40:06:f2:
33:63:8b:4d:a2:e9:d7:1a:82:24:ed:90:51:05:38:5f:1e:2c:
32:eb:c9:bc:13:ef:48:d8:fd:94:9a:58:ba:4d:6b:d2:da:ff:
2e:be:f5:ae:a3:df:33:d9:50:03:dd:b4:c7:f9:0c:08:0e:2a:
36:52:f5:da:c4:90:90:ae:0f:81:0b:e0:37:32:21:a5:78:72:
c3:4f:88:af:5f:74:2a:6e:ad:6b:eb:b6:d3:0f:bb:bb:9a:46:
fe:73:fc:4b:ae:07:d2:f2:9c:7e:d8:b1:79:81:e1:fb:95:5d:
4e:92:c8:c6:24:e2:b7:80:df:aa:d3:09:fd:47:5b:18:00:c9:
ee:c3:0f:0b:b8:29:06:c1:63:3b:ad:df:a4:33:53:0e:fe:ae:
9c:7e:42:1f:cb:f3:21:57:0c:c7:e9:2f:a9:4f:eb:3d:66:51:
a3:e1:a8:07:ce:99:f3:8b:e4:c6:61:31:28:81:7b:42:06:ac:
38:83:df:03:be:c2:e0:6c:2a:ee:3b:28:97:e7:69:5b:d6:c9:
84:b7:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:55 2025 by rpki-client