Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/91WG8L7kUmuFDXjEpYGtjn1lTQQ.roa
File: 91WG8L7kUmuFDXjEpYGtjn1lTQQ.roa (raw, json)
Hash identifier: 2jLPNuWeiRR5lOWZYT4oIFr3URn13WCKIhsfI/3n1wI=
Subject key identifier: F7:55:86:F0:BE:E4:52:6B:85:0D:78:C4:A5:81:AD:8E:7D:65:4D:04
Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial: 0194835582030726C8C6C9FFEBE05655F83A
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/91WG8L7kUmuFDXjEpYGtjn1lTQQ.roa
Signing time: Mon 20 Jan 2025 10:50:06 +0000
ROA not before: Mon 20 Jan 2025 10:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 194.54.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:55:82:03:07:26:c8:c6:c9:ff:eb:e0:56:55:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Validity
Not Before: Jan 20 10:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f75586f0bee4526b850d78c4a581ad8e7d654d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:fb:96:62:4e:e3:93:2e:53:b8:f6:0a:24:
e9:ad:71:26:52:ed:a8:5f:e8:7c:4e:7a:9a:5a:67:
92:a0:72:31:48:05:dc:3c:95:e4:f9:cc:f7:ef:d8:
08:a8:94:6a:1b:52:45:f7:86:79:84:9d:91:78:6a:
03:0d:32:d4:54:50:55:80:01:70:c0:a4:fe:17:bf:
7c:af:15:c1:f7:b1:ad:af:4a:3d:ae:97:23:11:3b:
e7:37:6d:29:12:b5:34:63:81:2c:f9:0f:f9:85:ea:
ad:39:22:54:c5:fc:22:5d:62:e0:5d:a4:c5:ef:76:
51:d8:77:c3:ab:2b:40:41:1d:4e:82:75:7d:9d:e1:
f9:aa:f4:07:cf:dd:b1:fa:8b:3f:4e:b1:01:bd:f0:
0b:dd:45:4e:ad:42:87:76:a0:d2:1d:12:0f:5e:52:
c0:75:27:c7:c4:b6:d5:93:94:c9:6b:46:e3:14:0e:
25:38:ea:d7:e2:05:80:50:f7:d7:55:2e:ff:e8:fa:
47:ce:18:c1:ec:b0:45:d3:3c:db:87:77:c8:a1:58:
28:2d:83:94:69:05:7f:1c:17:63:10:6b:b3:6d:a2:
d7:8f:39:1f:64:a7:c5:f3:01:eb:cb:85:0c:20:af:
83:c4:8d:86:0f:e3:45:9c:2f:7b:94:8d:a8:05:f6:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:55:86:F0:BE:E4:52:6B:85:0D:78:C4:A5:81:AD:8E:7D:65:4D:04
X509v3 Authority Key Identifier:
keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/91WG8L7kUmuFDXjEpYGtjn1lTQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a0:50:b7:e1:80:fa:07:77:53:1a:36:1d:52:d6:0d:02:3f:
f0:d4:f3:4a:80:f9:35:f9:6a:b1:9d:5d:6e:2a:50:b4:53:55:
dd:ee:2c:24:a8:20:da:93:47:79:30:f2:aa:8b:a9:d5:ac:d9:
16:40:a6:1a:52:5b:94:b4:7c:40:82:7b:65:2d:4e:40:ee:eb:
b0:d8:85:06:37:d3:4a:27:08:45:ec:10:40:d4:b4:29:12:e8:
43:c2:d9:f2:3f:57:db:79:94:db:87:71:e7:cd:f3:43:5b:bf:
f4:5d:42:d7:cc:eb:0e:fd:6c:6a:af:16:c0:55:a2:0e:23:d8:
cc:b6:12:13:60:bc:21:79:de:77:88:34:d2:17:2e:19:93:6b:
7b:04:25:2c:f3:ca:54:44:28:fc:17:ae:04:18:0b:ca:06:9c:
a8:31:ad:7f:03:09:04:3d:a6:f8:83:e9:56:b1:75:3a:a5:d5:
62:32:5e:d5:d1:3a:9b:67:c5:1d:c9:50:50:cd:c9:f3:16:ab:
ba:21:2f:20:5b:5a:db:e0:27:6e:6b:d0:3f:03:3a:02:a4:92:
de:2a:b9:88:65:40:db:f1:8f:6f:41:40:f0:68:da:84:26:a3:
81:72:5e:64:f1:22:56:87:fa:57:99:3e:ff:1e:8c:94:e3:f1:
64:97:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:35 2025 by rpki-client