Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/xqGa5yw14tF9pw6-eYINusEUh7E.roa
File: xqGa5yw14tF9pw6-eYINusEUh7E.roa (raw, json)
Hash identifier: nPIWqnbBc116jdUxehjaWv0eljgHrlqFtoj1OKZjVNQ=
Subject key identifier: C6:A1:9A:E7:2C:35:E2:D1:7D:A7:0E:BE:79:82:0D:BA:C1:14:87:B1
Certificate issuer: /CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Certificate serial: 019424B275DE3721E55ADA4BEAB98F76947C
Authority key identifier: B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/xqGa5yw14tF9pw6-eYINusEUh7E.roa
Signing time: Thu 02 Jan 2025 01:47:42 +0000
ROA not before: Thu 02 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197060
IP address blocks: 91.216.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:75:de:37:21:e5:5a:da:4b:ea:b9:8f:76:94:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9aa01ab3526b8ebb8afb17b98a7127f0f54ca45
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a19ae72c35e2d17da70ebe79820dbac11487b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:84:7a:3f:0e:09:70:24:68:8b:79:e1:55:
0f:e7:27:34:bc:ee:79:3c:f1:a1:46:04:71:8e:97:
bf:5b:42:c2:55:e8:5f:8f:a0:f1:66:43:2c:3d:6a:
3e:77:2c:e4:1c:5c:9e:71:c0:3f:9f:7f:5c:98:e1:
bf:4d:90:85:9e:48:09:e8:b5:0a:12:f5:9c:6f:81:
15:c1:76:5a:ed:2c:ea:90:b9:95:01:af:56:49:65:
5b:f2:68:eb:cf:cb:4b:57:21:2d:d1:e0:4e:2e:43:
98:7b:a7:98:f6:6b:87:a9:dd:d6:f7:96:a5:5d:6f:
23:77:28:99:65:6b:60:ba:93:96:72:9a:79:56:25:
67:f9:90:26:0c:d6:45:68:5c:0c:7f:41:32:6a:28:
f2:b5:6f:3f:86:16:1c:84:73:f5:a4:5a:14:a5:ed:
4b:6a:30:ad:e0:b5:48:bf:a6:5a:cd:9e:9f:b9:c9:
3e:e3:46:d2:83:99:1a:19:fe:0c:6f:b6:e1:f8:7d:
4a:9d:97:1d:a0:92:61:4c:c2:7c:4d:4b:0a:c5:dd:
00:3d:da:f7:95:c1:3c:ee:50:d5:89:70:a3:f4:3d:
96:72:33:b6:d2:3e:c3:68:27:16:96:a8:4f:8f:c8:
78:5b:57:93:88:91:75:9e:b1:c7:9a:98:4d:c9:6c:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A1:9A:E7:2C:35:E2:D1:7D:A7:0E:BE:79:82:0D:BA:C1:14:87:B1
X509v3 Authority Key Identifier:
keyid:B9:AA:01:AB:35:26:B8:EB:B8:AF:B1:7B:98:A7:12:7F:0F:54:CA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaoBqzUmuOu4r7F7mKcSfw9UykU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/xqGa5yw14tF9pw6-eYINusEUh7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b24786-e777-4b2f-9d81-5a7bfb3cd08b/1/uaoBqzUmuOu4r7F7mKcSfw9UykU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.86.0/24
Signature Algorithm: sha256WithRSAEncryption
17:93:21:bf:a1:a4:81:c5:e6:61:2e:6f:eb:97:f3:e4:a2:9f:
aa:50:65:78:5d:5e:0b:ad:42:42:59:d0:b9:a0:22:37:86:a4:
5d:47:e3:f0:b6:d3:e0:32:3f:bd:66:cf:05:f3:1e:78:9c:4e:
7a:8f:9d:3b:ca:39:ba:8e:ae:e0:34:96:5f:4d:17:23:f1:dc:
da:ec:3e:fe:04:2f:69:91:65:df:92:2f:e2:9b:9b:1c:35:d1:
51:ed:f3:18:a4:f7:e3:17:33:17:83:e8:d1:1f:c8:9f:d3:03:
35:94:46:a1:fc:21:c0:ff:cc:b6:18:93:eb:66:c8:7e:04:f1:
17:24:b4:75:69:b2:0b:1d:17:08:0a:0e:7c:dc:e6:c9:9c:c0:
aa:43:fe:a3:b3:5f:ff:3e:8c:44:cc:79:8f:86:8a:1b:ed:8d:
a4:7e:74:1d:22:a7:2c:60:2d:3d:f9:eb:41:ae:72:e8:6d:05:
5a:ba:9c:bf:1e:ab:e2:9b:a3:2f:79:5d:75:d9:93:61:6d:20:
44:e5:ea:8b:38:31:96:25:9f:17:99:32:1d:c6:c8:a4:d1:36:
c7:c6:ac:ed:0b:b9:13:7e:81:51:26:ed:bc:82:c6:80:a7:b9:
5b:e7:66:4a:5f:2b:6c:37:d5:b6:25:df:cf:25:30:c3:58:b1:
50:43:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:55 2025 by rpki-client