Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa
File: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (raw, json)
Hash identifier: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=
Subject key identifier: E4:C2:95:1F:03:F9:40:00:9B:0F:04:94:24:A0:36:19:6E:EC:1E:74
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019422FAF33F0C6A942A9A968CB2B10CE408
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa
Signing time: Wed 01 Jan 2025 17:47:39 +0000
ROA not before: Wed 01 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47344
IP address blocks: 91.202.248.0/22 maxlen: 22
91.202.248.0/24 maxlen: 24
91.202.249.0/24 maxlen: 24
91.202.250.0/24 maxlen: 24
91.202.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f3:3f:0c:6a:94:2a:9a:96:8c:b2:b1:0c:e4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c2951f03f940009b0f049424a036196eec1e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:be:76:aa:28:3c:62:81:d9:44:2e:f2:72:
dd:51:ee:eb:c8:9a:13:a1:95:f7:e5:ae:c2:ef:1c:
a5:a1:99:27:bb:d3:98:b8:36:06:a6:80:32:16:37:
4b:bb:06:67:30:0a:fa:22:46:1e:f0:a9:e6:b2:e3:
93:e3:d0:9f:6c:5d:47:14:ef:cd:0d:47:4a:9d:8e:
b4:56:13:60:e8:c5:2c:18:cb:14:2d:0d:fe:a9:b6:
3c:75:30:3e:6b:9a:22:de:4c:d4:ec:1e:92:8f:d2:
49:96:3d:57:b0:04:1b:e5:76:65:90:9a:bc:ca:27:
4f:bb:aa:bd:5a:6b:33:54:1a:42:2d:49:01:84:03:
77:6f:10:6c:eb:15:f7:a0:c5:d4:ce:1e:9b:bf:89:
e3:24:3f:f1:23:6d:36:ab:bf:24:fc:e2:4c:24:44:
ca:b3:5d:5a:ca:82:93:30:59:8e:29:ed:e9:82:dd:
30:3c:10:5e:44:ec:10:6a:13:33:79:d5:7a:c7:19:
78:71:41:c1:46:ab:06:6a:e8:dd:64:92:73:f9:cb:
8e:8e:9c:1b:e0:48:11:47:21:0d:99:33:a9:14:48:
54:44:aa:75:07:97:6e:9c:2a:fc:a7:7b:af:b2:3f:
46:d7:a7:b6:4b:3d:db:1b:2d:cf:2b:90:fc:87:9e:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:95:1F:03:F9:40:00:9B:0F:04:94:24:A0:36:19:6E:EC:1E:74
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.248.0/22
Signature Algorithm: sha256WithRSAEncryption
52:9f:d1:64:b4:db:83:58:1c:6f:31:24:63:11:d8:f1:6b:78:
95:d2:18:be:6d:17:88:05:de:af:ef:87:7e:b0:9f:8b:b8:8c:
ea:4a:21:89:cd:11:9f:74:5f:40:82:71:e5:4e:59:83:48:32:
b8:45:01:b3:e8:af:1b:fd:2d:42:13:6d:09:a0:cf:0a:c2:02:
6f:9e:97:39:7b:fc:26:80:b2:25:71:07:d1:5c:f7:ec:60:ac:
c1:d7:e3:8a:88:15:3b:66:bd:d7:6e:c7:da:bc:1c:67:a8:6c:
42:05:fd:15:86:cf:7e:8a:1f:db:11:48:64:94:df:f6:d5:d1:
05:a7:c7:d1:e3:0d:f7:8a:22:6b:dc:b4:12:a6:26:98:72:6c:
26:ff:32:f1:de:11:e0:3c:c0:26:21:79:43:2a:f8:1a:bd:e5:
5d:f1:d8:20:6b:3e:d6:9d:62:1e:f6:ea:93:ea:70:14:e9:3f:
49:9f:3f:97:72:cc:be:79:50:c6:d6:17:59:9e:67:cb:e6:4a:
a4:6e:7a:f6:87:89:b7:90:27:1b:96:85:4d:aa:7c:ec:50:d1:
0e:22:f5:2d:08:c2:80:dd:a2:b9:4c:0f:b2:1d:1b:f3:46:12:
e5:82:aa:a8:f8:d7:af:e7:68:ae:bc:75:b3:1b:11:7d:92:ef:
35:db:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:32 2025 by rpki-client