Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/IF9ss-sy9yvnm-nHGofeLVRarxk.roa
File: IF9ss-sy9yvnm-nHGofeLVRarxk.roa (raw, json)
Hash identifier: 2ET7jL1bePjM+quMou/IL9fIy3wVf50O3tX+ei7Qlno=
Subject key identifier: 20:5F:6C:B3:EB:32:F7:2B:E7:9B:E9:C7:1A:87:DE:2D:54:5A:AF:19
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019425211E24092FD0459CF9254F990D7DA1
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/IF9ss-sy9yvnm-nHGofeLVRarxk.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31019
IP address blocks: 91.228.151.0/24 maxlen: 24
2001:67c:22dc::/48 maxlen: 48
2a05:9280::/29 maxlen: 29
2a05:9280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1e:24:09:2f:d0:45:9c:f9:25:4f:99:0d:7d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=205f6cb3eb32f72be79be9c71a87de2d545aaf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:68:ba:74:f3:12:1f:b9:ac:e6:b2:6f:66:
26:26:16:9f:8e:26:07:5f:7b:4f:69:8d:f9:c0:4c:
0e:c7:37:68:63:68:cf:1e:cf:b6:d7:24:02:e8:5d:
68:db:55:5f:52:c8:34:92:e3:b6:77:5b:3e:b8:d3:
3b:e5:0a:14:ce:03:5c:0f:2b:43:42:c5:47:d3:b9:
38:d6:3f:3b:a8:c0:cc:9b:1a:4a:f6:d3:c0:76:dc:
7e:8e:58:b2:15:fd:3c:86:ef:28:92:02:52:b7:3d:
1f:aa:bf:0a:f2:38:89:6a:8b:98:9d:cc:c1:22:03:
35:50:ef:70:8e:ca:93:60:76:b6:62:aa:58:f1:65:
84:3f:aa:69:3f:ee:7c:4e:06:3f:45:85:1c:09:50:
36:09:69:fa:0a:37:5a:06:59:11:7b:3b:bd:c1:ac:
55:3f:90:a6:96:25:f4:68:78:b8:21:cc:73:db:3e:
d9:f6:11:18:61:26:2e:ed:3c:00:a3:c9:a9:70:a3:
36:65:46:ed:ca:4d:37:9b:30:23:fc:ea:74:fa:8a:
32:8a:d0:98:71:ad:33:b5:e1:15:bd:f4:59:f8:1b:
51:22:a5:cd:ea:02:c2:9e:e6:24:35:6d:58:fe:78:
2f:07:a5:43:66:63:ba:93:66:c8:81:fb:9c:8b:87:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5F:6C:B3:EB:32:F7:2B:E7:9B:E9:C7:1A:87:DE:2D:54:5A:AF:19
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/IF9ss-sy9yvnm-nHGofeLVRarxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.151.0/24
IPv6:
2001:67c:22dc::/48
2a05:9280::/29
Signature Algorithm: sha256WithRSAEncryption
43:91:af:ad:35:a5:07:b4:7e:0a:bc:d4:46:f1:b5:46:41:94:
e1:2d:5a:67:ea:4f:75:66:b2:7d:09:ef:6c:55:4a:38:90:25:
82:ca:da:55:26:9a:43:eb:04:05:f2:cf:99:c0:48:c0:a0:8c:
ed:97:06:74:2e:5b:34:cd:d9:65:c9:1b:15:36:e9:44:e0:50:
e9:d0:a8:07:93:d1:f8:f4:45:23:3e:dc:d3:06:ca:8f:e4:51:
a9:96:83:a6:f5:bd:73:ed:30:55:06:fc:93:00:e9:55:aa:f7:
51:b6:e1:f8:df:07:23:8d:e8:5b:cc:d7:b5:fe:03:3e:17:9c:
84:8f:e0:e7:b3:a6:27:3f:f1:40:67:47:06:1e:cf:e0:5e:a5:
9b:95:5b:40:19:5a:dd:8d:f8:70:29:3f:70:c9:6f:51:dc:f0:
5c:dc:3f:ce:6f:82:32:ea:f9:8b:8a:32:99:d3:f6:bc:1f:90:
ae:2f:6f:29:24:53:0e:4c:29:35:ed:ec:ab:32:30:68:e2:9e:
e3:b4:44:95:eb:27:11:59:6a:9e:53:3b:4f:7a:71:a8:73:35:
58:91:47:03:a8:37:f9:9e:b7:78:51:b9:67:66:98:a1:0e:6c:
c2:88:28:c3:19:e6:71:2f:75:ba:95:aa:b8:c3:60:bf:83:1a:
d9:1a:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:50:11 2025 by rpki-client