Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa
File: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (raw, json)
Hash identifier: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=
Subject key identifier: 0A:8E:8C:FE:7C:4E:C5:16:F8:7A:38:70:3C:C6:45:3C:EC:E5:63:55
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 0194221FCADF4254649A2C7A2734588BF760
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206915
IP address blocks: 91.217.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ca:df:42:54:64:9a:2c:7a:27:34:58:8b:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a8e8cfe7c4ec516f87a38703cc6453cece56355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:86:98:e9:81:26:e5:be:64:f3:db:2d:2e:
42:94:55:36:34:57:30:be:64:57:b4:f3:ce:50:f5:
67:62:f6:12:9d:53:81:50:5e:cc:02:23:62:0f:5d:
d7:ba:41:55:06:8c:3b:3c:fb:d5:35:66:77:e2:ed:
e6:be:42:37:bb:0b:9a:17:9d:35:da:4c:a0:88:41:
6b:37:09:65:28:f0:b7:91:06:cd:f5:e9:5b:e9:54:
a3:d1:60:02:5a:6e:39:00:08:a4:07:b1:a9:27:36:
44:2c:f8:6b:f8:13:9f:50:e3:50:28:6c:d1:8a:46:
bd:b9:ed:51:1f:9a:05:f3:c4:18:41:c8:0a:bd:1a:
f7:fa:ab:41:17:51:a2:45:2a:ff:59:97:88:7e:53:
c0:35:66:5b:6e:58:57:43:1e:26:64:26:06:53:5b:
11:cd:2b:b2:8a:df:5b:83:fc:fc:2c:2c:9d:23:29:
1e:80:4d:93:a2:ad:f6:9b:25:6b:15:ca:d7:4b:aa:
42:6e:5c:af:9f:99:55:68:e7:72:2e:15:c7:da:da:
e4:cf:f2:de:89:f2:1a:71:96:21:04:3a:f4:c5:b5:
76:02:cc:f1:04:72:37:bc:bb:0e:2f:af:04:f7:07:
c4:8f:f4:d5:a5:f1:56:0d:4d:a8:26:b3:b2:08:a4:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8E:8C:FE:7C:4E:C5:16:F8:7A:38:70:3C:C6:45:3C:EC:E5:63:55
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7c:11:2b:b8:5a:83:91:d8:e0:6e:8e:19:ba:36:92:6a:fd:
db:2f:d3:8f:b9:21:82:0f:dd:89:2a:96:ee:9e:d9:51:95:7d:
f7:8d:1c:c9:67:dc:23:b1:38:a1:b5:66:d2:b6:61:6a:e8:1c:
e5:fe:19:1b:b7:b3:99:74:16:d2:5c:66:e6:34:e3:3a:a5:40:
49:81:99:92:9e:2e:9f:31:1c:48:5c:60:7d:cf:fa:a8:ce:55:
5a:d1:07:cb:02:f0:9a:1a:55:b0:20:0d:bf:6f:98:6f:44:3c:
ec:ad:94:07:b0:f8:af:f2:96:7d:56:8b:b0:02:21:63:79:26:
29:d8:99:39:ad:96:96:64:4e:5f:85:aa:04:14:a8:c7:3b:1f:
44:08:1e:59:55:3f:b6:e7:92:c0:13:65:d0:eb:a5:19:a9:47:
3a:79:5a:72:54:ad:36:5a:fb:1d:cd:b6:55:05:a9:79:cf:7b:
86:3f:d4:fc:0f:75:e6:9f:94:26:99:6f:9f:1d:bf:75:02:3a:
a4:2e:d9:bf:b2:fd:1e:0f:44:b1:8e:ad:af:58:55:de:0f:aa:
48:2b:f7:5c:5e:f7:a6:3a:27:da:2e:96:a9:e4:0d:a3:0b:44:
93:91:a7:8b:01:96:3b:61:0a:27:b3:bc:5b:d2:8c:65:82:4b:
9b:74:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:16:38 2025 by rpki-client