Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/jMfbU8B9xmO0C72MZ1L3OtuaH6U.roa
File: jMfbU8B9xmO0C72MZ1L3OtuaH6U.roa (raw, json)
Hash identifier: F55iFlPnYx4kUu45hYGAvlwkZnfQ9ZDie6IWCaQJ+4U=
Subject key identifier: 8C:C7:DB:53:C0:7D:C6:63:B4:0B:BD:8C:67:52:F7:3A:DB:9A:1F:A5
Certificate issuer: /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial: 019426D962E2C629CC6BB57E5B48E2905346
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/jMfbU8B9xmO0C72MZ1L3OtuaH6U.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 91.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:62:e2:c6:29:cc:6b:b5:7e:5b:48:e2:90:53:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc7db53c07dc663b40bbd8c6752f73adb9a1fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:04:85:4d:69:6a:d0:91:34:e8:1e:26:be:
71:66:1f:4d:c6:12:31:a6:41:56:62:a0:6b:9c:9f:
a2:c7:9c:e4:77:c5:90:ab:00:45:77:7c:28:3c:55:
75:28:43:87:84:23:15:4b:5e:8f:e9:b4:f0:fe:51:
2b:3e:4b:42:c5:d6:f0:26:af:85:a8:2d:b6:f6:6d:
42:17:e9:4e:b2:ff:6c:21:f2:eb:64:96:98:c8:b7:
b8:d3:01:16:67:af:c4:d6:02:47:4d:d7:2c:1c:a6:
8c:ed:39:7f:31:5a:e7:fb:7b:c7:9b:5d:c0:ab:dd:
a1:b3:19:a6:d1:42:be:e4:ba:ea:6c:ce:e1:d7:19:
18:d5:f7:c1:7b:f0:c3:5b:8d:89:45:51:18:90:a6:
8d:e6:e8:9d:d9:e1:c5:40:10:78:ee:1c:09:bc:06:
d6:7b:05:e5:2d:88:a4:f5:3f:89:c1:54:b0:3c:d2:
81:fc:6e:36:04:fc:33:71:c0:9d:d3:37:ac:22:82:
c7:66:7e:1d:ae:4b:a7:f9:f0:fc:b5:f1:f2:0c:7f:
af:e5:f0:19:0d:dc:63:f6:c4:b8:13:2d:cd:24:43:
29:3c:11:67:57:44:3f:4c:93:2a:7c:16:bb:82:6d:
45:ee:f5:8c:5e:3a:11:45:db:96:b1:7f:24:06:12:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:DB:53:C0:7D:C6:63:B4:0B:BD:8C:67:52:F7:3A:DB:9A:1F:A5
X509v3 Authority Key Identifier:
keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/jMfbU8B9xmO0C72MZ1L3OtuaH6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:04:58:91:72:14:c7:3a:bc:b6:16:8e:62:d2:37:e7:07:11:
3e:a0:fa:6c:d2:45:29:e8:99:14:4b:66:de:f9:b6:e7:18:6c:
4c:e4:17:ce:f7:15:1d:a0:f9:2d:f6:6c:18:1d:b7:a9:1f:51:
09:06:08:ae:40:ea:1a:d1:39:22:2a:24:3e:4f:14:a7:9c:e3:
97:08:c7:90:29:66:10:8d:60:2d:96:90:6f:cd:0a:f3:4b:fc:
27:74:a9:74:65:2a:3c:8e:9b:3d:0a:8c:1a:40:08:a8:bf:c9:
fb:6c:91:b6:be:8e:df:be:6d:7a:ec:0d:60:2e:7f:84:a3:7c:
28:c4:85:03:09:d7:d3:be:bd:38:95:49:4e:93:08:6e:96:15:
19:01:d7:b2:1f:23:61:29:6c:5f:33:21:c7:45:92:cc:b3:4a:
31:78:8a:96:d2:c1:f1:ba:4f:83:b6:c2:b3:ec:f4:9b:a3:65:
58:f1:58:1d:f4:7c:16:10:f2:e9:59:f5:ab:0a:4d:18:64:78:
b9:a5:08:6a:52:d2:5b:49:7e:c0:65:e2:a2:dd:00:47:c5:6c:
10:11:04:88:44:bd:80:cc:1e:cb:eb:23:2d:4e:63:37:65:79:
5d:b4:bb:48:e0:0e:11:91:4f:6f:d2:e8:64:af:30:16:37:02:
98:4e:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:22 2025 by rpki-client