Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/RBq_sIlJapW_qBhhOYs3cfjmb6g.roa
File: RBq_sIlJapW_qBhhOYs3cfjmb6g.roa (raw, json)
Hash identifier: fg25CTdh4wWfSSlLDFZZPAEIB6IEQNMofjk6UtMoVYc=
Subject key identifier: 44:1A:BF:B0:89:49:6A:95:BF:A8:18:61:39:8B:37:71:F8:E6:6F:A8
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 01941F8C5D8D1F77F15982132E3F4313871A
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/RBq_sIlJapW_qBhhOYs3cfjmb6g.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15870
IP address blocks: 91.216.46.0/24 maxlen: 24
2001:67c:1b28::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5d:8d:1f:77:f1:59:82:13:2e:3f:43:13:87:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=441abfb089496a95bfa81861398b3771f8e66fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:7e:4d:45:23:a1:67:5c:8b:e7:08:83:12:
d9:82:ca:b6:66:b7:e3:2d:3a:71:1d:7c:1e:10:b7:
52:ec:cb:0d:00:f5:4e:47:0e:de:53:04:5a:e3:73:
ea:99:bb:18:f6:1c:5f:2e:2b:a5:eb:18:98:f3:b1:
4c:f5:56:f3:aa:aa:12:2a:71:92:ec:49:68:76:4a:
1e:de:0b:4b:43:df:cf:00:bb:eb:f9:54:45:89:1c:
d8:30:30:2f:fe:4b:e5:53:d3:a1:3d:f9:ad:15:4e:
86:2f:ea:3d:ab:93:67:5f:82:66:8c:fd:b4:7b:b5:
b6:26:52:9e:0b:0a:88:e2:6d:7f:13:f6:18:24:fd:
01:71:16:a9:56:c8:3d:b4:95:2d:c4:46:9a:6b:d4:
05:2c:60:84:30:ff:7e:5e:85:7c:a3:7b:27:a1:4b:
bf:c6:e8:fb:78:16:2a:54:ad:ad:8a:37:5f:e4:49:
46:8d:8d:1d:50:2f:5d:c8:21:63:9c:3d:35:25:ff:
11:da:63:6c:61:af:f8:17:f5:39:25:23:18:32:6d:
d8:80:8c:63:22:c0:3d:0e:41:eb:38:a9:bf:f7:e3:
8d:ac:1a:8b:d7:80:a3:e3:e4:86:17:df:3e:0c:41:
94:39:85:85:d5:3a:59:cf:9d:af:85:17:a0:d4:b8:
a3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1A:BF:B0:89:49:6A:95:BF:A8:18:61:39:8B:37:71:F8:E6:6F:A8
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/RBq_sIlJapW_qBhhOYs3cfjmb6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.46.0/24
IPv6:
2001:67c:1b28::/48
Signature Algorithm: sha256WithRSAEncryption
66:6c:35:32:c9:b8:81:ec:ad:ba:4a:49:c4:71:9b:bd:7e:76:
fb:d5:6a:cd:cf:2e:6b:fb:82:93:39:48:aa:3e:3d:49:e6:83:
23:5a:bf:96:c8:70:83:f5:9e:ca:b3:2d:42:d9:24:08:96:8e:
1d:64:e3:22:ca:18:a6:96:eb:4f:f3:cf:65:1b:18:db:5e:7d:
d0:58:b2:56:d5:a6:07:12:97:a9:a5:56:80:8d:26:3f:9b:60:
25:cc:b0:bd:0d:5e:06:fe:1f:e0:ce:94:49:91:4d:a7:81:5a:
02:6f:ce:17:a6:81:9f:f2:a2:18:8e:b3:c4:92:c8:0d:5f:60:
1d:9a:fc:30:5a:cd:80:e0:99:4a:1b:95:a6:24:8f:f1:6a:0d:
08:8d:47:14:73:0c:37:ab:46:64:35:37:bf:0f:ee:43:cb:6f:
1f:92:51:4e:a7:69:8e:9a:8c:d5:a6:25:2f:69:de:b4:54:43:
98:5b:52:5d:3c:00:99:34:d1:9c:07:5e:4a:4e:ce:f4:87:55:
ab:b8:24:b4:fe:db:e1:60:4f:ca:bd:25:88:33:4a:5c:c3:3e:
91:67:d7:d7:78:cf:fa:2c:10:86:82:ba:03:27:2d:77:23:a4:
aa:7d:83:b1:ae:a7:fb:c8:bb:24:8d:e8:ac:4b:12:a3:65:c1:
bb:82:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:45 2025 by rpki-client