Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/coXrhUL-UR2XiaXIQUyJNYk5wfw.roa
File: coXrhUL-UR2XiaXIQUyJNYk5wfw.roa (raw, json)
Hash identifier: fVVY4ZVUYIXnBSvc/7AhdMXyEXPtFjAoKMuhQm3m+gQ=
Subject key identifier: 72:85:EB:85:42:FE:51:1D:97:89:A5:C8:41:4C:89:35:89:39:C1:FC
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 0194206872AA784DC0F56B0206D2C499AD66
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/coXrhUL-UR2XiaXIQUyJNYk5wfw.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6696
IP address blocks: 91.220.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:aa:78:4d:c0:f5:6b:02:06:d2:c4:99:ad:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7285eb8542fe511d9789a5c8414c89358939c1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:50:0a:fd:a4:43:e1:36:f3:c7:71:1c:9c:
77:01:c4:da:7c:e6:d1:40:ed:be:0b:71:82:34:6f:
78:9c:f4:05:fc:65:27:d3:3a:47:22:11:f8:ac:54:
ed:62:23:16:d0:94:c4:b4:0e:8f:2c:97:ef:3b:3a:
16:6a:ac:73:df:16:e5:70:3d:bd:5d:5d:a4:82:2d:
e3:bd:d4:cc:02:b8:d7:41:a6:12:b0:72:1f:b1:59:
d4:3a:ae:c2:75:77:91:10:0f:6b:38:52:2f:a3:40:
51:fe:ee:4d:ee:a0:d2:df:8e:30:6c:c6:10:e1:31:
f2:f0:b4:29:b8:d9:12:69:c0:c0:57:ce:f8:b9:3e:
75:7d:6d:85:8f:d9:6c:0e:97:4a:62:a9:0d:aa:4f:
1d:f2:37:89:db:14:d6:3e:89:6d:fc:fa:4a:b8:2f:
a7:55:81:7a:93:8a:97:56:6e:59:48:f9:da:09:14:
cc:86:39:60:c4:ca:11:8e:92:e0:3f:7a:f7:e8:a7:
62:70:88:4c:0d:dc:1d:f6:1a:e3:d4:7b:e7:c3:c1:
dd:db:08:40:e3:fb:bc:26:b4:07:af:37:58:bc:ac:
c1:7d:69:cf:1e:15:f9:9f:9d:49:bf:a6:84:85:49:
f5:68:f9:a6:a3:78:96:8d:f0:59:d5:cf:1d:a1:b2:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:85:EB:85:42:FE:51:1D:97:89:A5:C8:41:4C:89:35:89:39:C1:FC
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/coXrhUL-UR2XiaXIQUyJNYk5wfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.102.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:fa:d5:90:f1:9d:bd:b3:dd:f7:c9:5b:75:eb:55:58:4e:24:
a7:29:bc:ef:df:9e:fb:c3:18:34:8c:20:f2:e6:8d:d7:35:02:
e1:ae:66:9b:54:ff:41:bd:b6:44:c0:be:c6:6b:7e:24:82:a9:
58:34:b9:7b:d5:ef:5d:a1:15:d2:c2:75:fc:9e:52:4c:5b:12:
58:62:2c:3f:4f:39:b3:76:2b:ce:30:0c:c8:ba:09:2c:39:65:
fe:6a:8c:f2:28:fe:44:74:61:7c:de:2d:e0:76:8a:35:c8:ce:
89:6d:82:2c:34:d0:d7:1e:45:ec:24:25:51:72:de:53:5a:40:
9a:a2:c7:66:a4:05:aa:40:27:48:62:8f:99:f2:66:c3:d8:f1:
1c:7b:45:fc:34:cf:04:4a:f4:4e:4e:64:ad:13:59:27:47:ea:
56:16:d0:31:6e:6d:14:11:94:3a:4d:8f:86:f5:28:86:66:66:
b9:f2:94:78:0a:ae:41:1f:fa:52:32:54:37:43:1f:71:3e:c3:
15:3e:f2:a9:db:dc:60:39:07:25:c1:4a:09:38:4f:f0:b8:b0:
77:0f:44:d7:21:89:c2:14:51:fd:86:e8:91:c2:74:e6:0c:59:
15:a5:97:a2:0b:20:ca:d2:b2:a0:08:f3:eb:e3:b6:fd:31:89:
aa:15:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:01 2025 by rpki-client