Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa
File: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (raw, json)
Hash identifier: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=
Subject key identifier: F0:78:CC:1A:DD:AE:F8:55:F0:EC:1F:4A:68:D3:1E:88:54:65:FD:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019424B3A719A9739DCCC26B47B135A1BA61
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44704
IP address blocks: 91.206.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:19:a9:73:9d:cc:c2:6b:47:b1:35:a1:ba:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f078cc1addaef855f0ec1f4a68d31e885465fd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:54:c1:de:37:a9:68:95:03:4a:2f:6f:02:
bd:81:8b:37:43:0f:20:76:04:b4:33:79:a4:94:77:
58:71:f1:e9:96:7c:40:ac:6f:dc:7b:6f:88:b5:06:
7e:b2:ef:da:af:11:e7:5e:13:fa:02:79:2e:ee:b3:
93:c3:e6:7a:c4:5f:21:d8:59:a0:f8:3b:98:d7:cc:
b2:55:89:12:00:c6:82:ac:96:4a:24:ef:35:fa:19:
a7:2e:fe:85:e3:a3:45:94:21:9b:10:4b:b2:de:3c:
9a:4d:96:9f:8c:27:b8:5b:bb:88:75:47:00:f6:11:
d1:0d:73:9f:8c:12:43:65:97:41:c1:9d:8e:0b:c1:
85:95:48:fa:2b:6e:b3:12:02:6a:31:26:72:3e:13:
04:77:f3:a4:f1:22:5e:03:b3:38:51:83:4d:1b:13:
44:e1:4c:b5:8b:44:06:04:b6:04:dd:ba:fe:b8:05:
6a:9b:73:ce:8c:fa:ee:02:b0:d6:56:fd:71:f5:48:
59:f1:cd:76:d7:ba:39:e2:10:b1:0a:b4:ad:74:d8:
b6:1e:da:14:8e:02:17:70:7c:87:f0:8c:7c:26:ff:
dd:6f:05:b1:9e:7b:21:fc:c7:20:81:83:b6:2e:7b:
48:d4:c2:3b:0e:80:85:51:e7:6d:80:d9:4c:99:8f:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:CC:1A:DD:AE:F8:55:F0:EC:1F:4A:68:D3:1E:88:54:65:FD:22
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.100.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:8a:c4:5e:93:f9:de:4c:06:6c:0e:47:df:d4:b3:59:48:ab:
38:fd:c1:8a:64:28:1b:1f:e9:77:92:a6:78:31:e6:35:db:a4:
d3:a9:69:4c:73:a5:a1:92:09:da:a1:6a:40:88:5f:c2:65:dd:
c4:15:4f:be:d1:04:5c:58:b8:dd:79:ff:2b:97:4f:55:74:46:
b2:0f:a7:db:43:41:2d:80:02:d4:e1:b1:b7:98:73:b9:99:34:
37:92:fc:49:f7:ab:80:5d:58:52:c0:4b:39:f8:5d:59:6f:70:
53:65:69:17:fa:b5:31:31:f6:ae:d9:67:10:7d:46:1a:e8:ac:
a8:9a:c2:b9:14:8f:64:4a:3e:f9:d2:4a:85:4f:88:7e:de:ea:
29:ea:63:72:5f:46:79:f7:9a:57:59:69:03:c6:77:44:0a:c7:
1e:cc:a2:29:a2:71:ee:6c:2b:c4:73:41:d1:fd:3a:1b:51:d7:
fc:9c:46:9f:de:5a:ed:61:f7:c3:90:d2:d6:2a:97:59:11:53:
5d:cf:92:57:a4:4f:48:24:22:ba:6f:99:de:9e:3d:a6:6c:2e:
b8:eb:7c:09:4d:6c:f8:76:a6:c5:e5:56:5c:31:cb:1a:97:97:
76:ae:b8:12:3f:77:59:12:d9:d6:15:07:22:60:fa:39:d9:20:
1b:64:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:55:24 2025 by rpki-client