Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/DFvO543buXO6QAD6iga-2ghdPJM.roa
File: DFvO543buXO6QAD6iga-2ghdPJM.roa (raw, json)
Hash identifier: OwW2BWhEe6SpLOjaLPnDoeeE6qmWEx2kPzz7nMDDwRs=
Subject key identifier: 0C:5B:CE:E7:8D:DB:B9:73:BA:40:00:FA:8A:06:BE:DA:08:5D:3C:93
Certificate issuer: /CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Certificate serial: 0194258F16B9995FABD3D011ADD7A8E43ECE
Authority key identifier: 3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/DFvO543buXO6QAD6iga-2ghdPJM.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41107
IP address blocks: 91.199.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:16:b9:99:5f:ab:d3:d0:11:ad:d7:a8:e4:3e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48c2701735cd5d2317d10ac63d7f2ec6618ce0
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c5bcee78ddbb973ba4000fa8a06beda085d3c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:c0:d1:b9:b4:b0:a9:12:2d:a6:4e:be:61:
a6:d6:dd:5a:75:8e:14:8e:4e:12:31:b4:82:ba:22:
c7:78:ce:fa:57:0e:c9:22:3b:98:2f:62:a4:aa:01:
61:4e:53:2a:40:58:87:44:41:b1:e4:6d:ec:16:47:
ca:7c:99:31:90:17:c6:1f:3f:d8:fc:31:a9:dc:5f:
d9:e0:9e:7f:f0:ea:93:99:e0:50:87:f9:0f:fa:b9:
de:85:0e:7c:f8:d0:5b:31:1d:fc:be:eb:51:bd:cc:
20:3f:bd:2c:bd:ba:9e:b2:26:fa:4f:d0:3c:a5:3d:
30:8c:53:7d:ca:53:71:0c:32:ab:b1:28:0b:d4:d4:
ef:65:60:2a:a5:bf:af:2a:95:8d:9b:93:dd:43:c2:
fb:aa:ce:04:8b:8e:ba:8b:9e:1d:f0:18:92:c1:01:
19:5b:ea:ad:3c:dc:77:d3:7b:1e:5c:0d:b1:bc:d3:
3f:ca:ff:fe:27:9a:72:61:42:a7:1c:72:f3:92:36:
6c:c4:d9:b9:b7:14:03:16:df:2a:d4:39:29:2e:a3:
ad:c7:3a:a9:ec:8a:35:c4:84:b9:99:8d:46:ef:0f:
27:5d:d2:42:f8:39:0c:6b:65:f1:3d:58:82:06:09:
c7:e3:d7:b8:18:06:9a:7f:5b:86:01:7d:c4:49:c5:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:CE:E7:8D:DB:B9:73:BA:40:00:FA:8A:06:BE:DA:08:5D:3C:93
X509v3 Authority Key Identifier:
keyid:3A:48:C2:70:17:35:CD:5D:23:17:D1:0A:C6:3D:7F:2E:C6:61:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjCcBc1zV0jF9EKxj1_LsZhjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/DFvO543buXO6QAD6iga-2ghdPJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e74595-d657-4ab4-8309-0d57c9410127/1/OkjCcBc1zV0jF9EKxj1_LsZhjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.181.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0f:c8:1d:99:31:a6:d4:d3:df:8d:b0:26:20:a1:fc:3a:5f:
94:06:4e:68:39:bc:40:01:b9:ba:49:c7:5c:0b:0b:64:70:1a:
eb:60:14:05:15:1e:e0:e1:fd:d0:e1:63:ab:4e:6b:33:7c:19:
6e:f9:58:f3:14:05:5f:ac:0c:22:f8:f8:fe:4d:18:85:f4:a2:
64:4d:0a:f2:13:8f:65:6f:98:17:af:4a:d5:29:19:c1:55:6f:
f6:b5:55:6a:5d:80:47:44:a7:ed:d2:8a:51:52:69:2a:de:76:
c2:e4:aa:51:94:a0:0f:cd:53:a0:09:6a:bf:41:ec:f4:50:3d:
9e:3b:3d:cc:2a:d9:06:7b:91:7b:57:49:04:13:b8:0d:6c:d6:
9a:05:72:dc:31:6c:70:ef:7b:d7:59:8f:42:6a:1e:22:be:ae:
1f:7a:a6:fc:79:b9:cf:ba:6a:fb:c3:e8:93:64:77:cb:64:e8:
09:80:27:42:aa:10:59:cd:20:17:30:2d:dc:b6:e4:f6:01:9c:
4f:39:47:f1:42:6d:1c:bb:51:4b:f7:34:3f:d8:e5:e5:8c:82:
a3:d8:8f:c3:38:22:9f:67:3e:a9:58:ae:75:0c:89:b1:51:cf:
c2:bf:20:8f:f4:47:13:e6:d9:e7:0b:4c:e8:8c:28:cc:4d:ad:
2b:8d:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:52 2025 by rpki-client