Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa
File: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (raw, json)
Hash identifier: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=
Subject key identifier: 74:A6:D8:8A:3B:02:A3:A7:33:F9:CF:15:0F:20:50:6D:7E:8A:BC:84
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 0194228DFDB99CF157B85F8002066472316A
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49773
IP address blocks: 91.218.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fd:b9:9c:f1:57:b8:5f:80:02:06:64:72:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74a6d88a3b02a3a733f9cf150f20506d7e8abc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:80:83:96:89:52:53:21:ba:81:05:c5:84:
70:a9:46:23:09:27:cb:d4:51:21:71:34:f1:ab:7f:
40:15:6c:b3:4a:4e:7a:96:2e:af:ac:e2:60:74:70:
a8:95:53:34:67:d5:2a:24:a9:53:31:fb:99:eb:c3:
90:0a:5c:b2:26:84:5f:92:96:41:96:82:39:8e:0b:
ed:1a:f5:e0:c4:d2:38:01:de:c1:cb:aa:3f:34:c8:
cc:b2:67:7b:87:33:15:da:3d:fa:53:ee:d6:a0:35:
65:4b:89:87:fe:2d:f0:6a:01:05:ff:c4:cc:94:43:
ca:5c:27:d0:42:08:4b:b1:ad:16:40:ed:5f:87:15:
9c:27:f0:67:e2:cb:fe:39:f4:e9:5f:66:99:3e:f6:
6a:bd:2f:7b:82:f7:38:59:19:e2:08:93:b9:c2:e6:
0c:03:bd:b1:65:a4:fd:b5:cc:c3:ab:fe:cd:bf:c5:
17:61:d4:b5:38:dd:93:03:24:66:5d:7e:44:83:ce:
e9:3e:89:64:ae:b5:f6:f7:ed:50:07:67:74:8e:46:
5f:9e:2d:a2:79:df:20:03:1c:a7:3b:d9:75:8d:1f:
d5:40:49:21:6d:ba:4d:b3:df:ee:6b:a7:30:52:b7:
e8:10:34:42:b6:a8:7f:fd:ef:fa:62:43:8b:b5:73:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:D8:8A:3B:02:A3:A7:33:F9:CF:15:0F:20:50:6D:7E:8A:BC:84
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.80.0/22
Signature Algorithm: sha256WithRSAEncryption
50:5f:34:09:95:47:49:1b:0a:fc:ff:41:cc:fb:61:f4:8f:01:
78:07:66:2e:e1:4e:22:0a:83:c9:16:67:d1:16:49:49:0a:1c:
c9:8e:f9:03:5e:2b:49:20:3c:fa:9d:41:76:42:3f:14:45:b6:
6a:73:b9:60:4b:62:11:28:7c:4e:84:1b:84:f9:b3:b7:9e:8e:
0e:9a:30:d0:8f:95:96:57:0c:24:5f:98:02:5b:c2:72:c5:ff:
98:50:27:8f:bb:8c:08:cc:9d:af:f2:90:ef:05:1a:cc:5d:0e:
83:d2:8a:0b:27:17:30:70:fa:65:64:6d:01:a5:0f:b9:c1:7b:
a2:b4:e6:3e:ee:e0:ad:5b:8e:55:81:56:0d:30:ec:3c:b0:7d:
95:3c:5f:62:8c:85:8b:39:a7:65:65:b2:5e:b5:0d:af:25:7c:
8c:2f:b2:38:51:a3:6c:cd:11:d7:fa:51:23:1f:eb:73:a6:68:
61:c7:55:cc:b8:3d:26:0d:9e:3b:86:30:01:5c:c4:e8:c5:3c:
56:8b:50:76:26:c5:43:8f:7a:0c:4f:de:2d:23:a6:18:32:e0:
e7:f6:9e:65:5b:97:de:71:fa:f0:e1:74:24:a4:b0:90:cd:2a:
81:76:03:87:0e:81:00:38:da:8a:33:a2:47:f4:79:a9:2d:c4:
19:5a:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:58:06 2025 by rpki-client