Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/4BKXiOWzlfYikLi_sZlf2-K1W3Y.roa
File: 4BKXiOWzlfYikLi_sZlf2-K1W3Y.roa (raw, json)
Hash identifier: aDvx4M+Sx23ZKmtoISsi+UpckIqq0gCCdZtw7df9WaU=
Subject key identifier: E0:12:97:88:E5:B3:95:F6:22:90:B8:BF:B1:99:5F:DB:E2:B5:5B:76
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01942143F5C29254F7B2479B7CB04050CF15
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/4BKXiOWzlfYikLi_sZlf2-K1W3Y.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.213.126.0/24 maxlen: 24
2a12:7280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f5:c2:92:54:f7:b2:47:9b:7c:b0:40:50:cf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0129788e5b395f62290b8bfb1995fdbe2b55b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:7d:a5:e8:73:a0:79:b7:80:dd:5a:21:53:
9d:04:cf:ac:a0:b5:42:11:64:49:92:e2:3c:87:45:
3c:c6:6e:c9:e5:ae:d7:63:49:ac:f4:94:12:35:11:
fe:b6:e8:e6:f8:b1:39:a3:f3:09:26:46:d4:ec:35:
a7:14:4a:1b:ce:74:dc:fc:f1:61:d9:99:1e:69:24:
46:03:4c:e7:8b:55:0b:1d:62:ac:99:a9:b4:f0:cf:
29:ae:24:68:cf:98:c5:6e:a1:18:e9:b1:bb:ca:35:
4d:ea:d4:49:44:90:b6:32:d1:99:df:20:f3:b2:42:
ea:ca:c0:65:d0:85:15:b7:71:31:a0:b6:bf:4a:91:
0a:41:75:1b:26:b3:37:c8:4d:43:ba:eb:27:2f:99:
f9:9e:59:e5:be:3f:1d:06:45:85:1c:63:9a:27:da:
72:e3:43:8c:6d:81:fd:5e:bf:d9:d8:23:ab:91:5f:
a3:e5:b9:ad:0f:33:83:f2:e1:d5:4f:0a:70:10:f8:
6c:49:05:df:1d:7c:14:7c:43:eb:c9:ba:03:e5:0f:
13:9f:f2:c2:e5:f2:d4:1e:30:6a:5f:d4:05:f4:8b:
5c:91:44:f8:b6:c1:78:0e:10:16:5a:d6:92:4f:97:
ba:0a:35:35:13:af:01:13:66:02:3d:87:60:6c:bb:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:97:88:E5:B3:95:F6:22:90:B8:BF:B1:99:5F:DB:E2:B5:5B:76
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/4BKXiOWzlfYikLi_sZlf2-K1W3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.126.0/24
IPv6:
2a12:7280::/29
Signature Algorithm: sha256WithRSAEncryption
6d:a0:a4:90:b6:ba:c1:90:c6:40:2b:14:e8:56:d3:17:4f:88:
8a:51:42:5c:e3:59:b5:ce:ad:b3:16:6d:ce:d2:a8:06:32:ef:
ff:c1:97:5d:5f:ec:20:56:43:42:15:79:db:04:8e:27:4b:72:
4d:da:4f:46:49:04:93:40:a7:08:6c:c4:6d:29:08:28:ed:0d:
9c:79:46:0b:40:cc:d3:90:ba:96:c3:b0:cc:45:c5:8b:09:4f:
fe:f6:e2:71:a4:55:fa:e5:f1:e1:60:b8:f4:fd:3c:9b:b0:24:
63:9b:88:f8:0e:30:d1:fe:72:93:1b:4f:d2:20:5e:86:9c:cd:
38:80:51:8d:ba:19:0d:8f:be:fb:0f:93:02:a0:49:3a:dc:ec:
85:59:ac:91:21:90:31:cb:c1:89:1f:85:83:f5:2a:93:72:d2:
8f:a3:96:a6:ea:95:38:ce:db:3d:eb:0b:1a:55:eb:31:21:20:
e9:9f:92:20:8b:7d:ad:a9:a1:69:52:82:9a:37:a2:08:02:a5:
92:c7:70:59:09:8b:58:d9:30:3b:01:14:5c:3b:33:b9:10:39:
56:bd:98:01:4c:91:cc:a1:1b:61:d4:9e:43:ad:1a:5a:68:fa:
6f:85:d4:4d:a1:68:3d:ce:00:af:a4:c1:46:6d:e0:fb:ac:66:
34:82:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:03 2025 by rpki-client