Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/1OOgCvrkMSPlJGXfwud-L77F8RQ.roa
File: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (raw, json)
Hash identifier: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=
Subject key identifier: D4:E3:A0:0A:FA:E4:31:23:E5:24:65:DF:C2:E7:7E:2F:BE:C5:F1:14
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 01941F8C07BC23DAE05E4AB918BADED8415E
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/1OOgCvrkMSPlJGXfwud-L77F8RQ.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51972
IP address blocks: 91.222.60.0/22 maxlen: 22
91.222.60.0/24 maxlen: 24
91.222.61.0/24 maxlen: 24
91.222.62.0/24 maxlen: 24
91.222.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:07:bc:23:da:e0:5e:4a:b9:18:ba:de:d8:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4e3a00afae43123e52465dfc2e77e2fbec5f114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:cf:b8:b1:ef:9d:4c:be:34:37:8f:1a:6f:
94:8d:99:07:1e:6c:0a:14:74:1f:c0:05:99:bd:04:
61:59:a2:2e:c3:f8:27:b0:08:c5:92:e0:d0:b8:81:
9b:1d:84:43:a6:ab:d2:5f:5b:77:86:de:40:66:49:
62:9f:a0:cf:cd:2d:b8:88:c6:c1:02:74:88:59:fe:
72:27:3a:d0:67:b5:66:da:50:14:ee:0f:b0:19:ec:
2c:46:2c:49:d3:cd:38:2a:dd:47:84:c6:cf:fa:31:
13:d6:fc:84:df:a6:a8:71:e3:13:37:2c:ed:59:dc:
eb:f5:4a:0d:fb:81:ff:63:b3:5b:7c:63:6d:dd:b3:
d8:fb:b8:b8:4b:18:9e:e2:7a:9d:86:1f:4c:d0:7d:
eb:ec:d9:b3:c8:23:bd:f5:10:ff:34:41:76:67:0d:
ac:61:bf:3a:65:d9:96:19:29:8a:eb:17:d2:4a:22:
74:8a:e8:10:8b:57:72:84:ac:b1:66:02:98:6d:78:
85:75:6c:06:d0:cc:11:58:70:9e:7d:54:2b:a4:f5:
ac:2e:c7:e6:96:c7:e7:0e:bd:02:82:fe:a4:bd:64:
2d:38:7f:c3:24:a3:94:99:d0:37:df:85:6a:7b:0c:
12:30:14:f0:e6:c3:21:b8:b7:c3:c5:f1:99:23:15:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E3:A0:0A:FA:E4:31:23:E5:24:65:DF:C2:E7:7E:2F:BE:C5:F1:14
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/1OOgCvrkMSPlJGXfwud-L77F8RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.60.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:94:a8:60:e2:23:ab:4d:3c:1b:bc:16:31:61:1e:eb:87:f8:
ee:f7:00:91:18:e9:a3:9e:3b:fe:87:5b:4b:b9:b7:00:00:1e:
76:b9:e1:09:38:6f:f8:57:30:74:29:19:de:b0:a8:a1:7b:70:
88:9f:70:a8:6a:4d:9a:c4:7e:3b:15:45:a1:02:c5:80:59:5d:
1d:4a:27:3f:d4:66:f0:f9:58:09:d9:39:05:6f:52:f8:03:0f:
11:15:38:6d:36:81:fc:80:f0:26:c6:1c:57:cc:49:2e:2c:44:
53:ef:cd:ae:7d:b0:22:04:b4:5b:12:a0:d9:2d:70:91:82:98:
b4:0d:97:9e:79:c5:79:59:9d:69:05:40:e0:17:0d:33:9e:4f:
a6:83:18:dc:ff:f8:03:e7:e7:60:4d:88:61:34:c8:c3:50:34:
62:d9:dd:a5:88:bf:3c:2e:11:1b:74:e0:c2:0a:78:d5:36:a9:
7a:0a:d5:d6:4b:09:6a:b1:a1:20:09:b4:78:21:90:64:57:d6:
cb:e8:8c:40:8e:66:de:69:7a:eb:22:08:48:1f:55:36:1a:49:
83:f3:68:ff:fd:70:49:2f:9c:42:b0:be:98:de:81:cc:b5:72:
e2:50:da:b7:1c:b1:72:3b:ee:e6:2a:64:7c:8b:1e:7c:cd:e7:
36:4a:45:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:53 2025 by rpki-client