Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/RPI004Nflusi7FfUJpmrxTwPQuQ.roa
File: RPI004Nflusi7FfUJpmrxTwPQuQ.roa (raw, json)
Hash identifier: +Ae0xcW4fJMWdAq7n5EIK34ZCifbX83L0SoWJBas4kw=
Subject key identifier: 44:F2:34:D3:83:5F:96:EB:22:EC:57:D4:26:99:AB:C5:3C:0F:42:E4
Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Certificate serial: 019427B6057EE750FD621990563033E9218E
Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/RPI004Nflusi7FfUJpmrxTwPQuQ.roa
Signing time: Thu 02 Jan 2025 15:50:27 +0000
ROA not before: Thu 02 Jan 2025 15:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43854
IP address blocks: 91.198.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:05:7e:e7:50:fd:62:19:90:56:30:33:e9:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44f234d3835f96eb22ec57d42699abc53c0f42e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:d2:45:db:2e:45:15:d3:eb:20:11:60:c6:
2a:aa:2c:88:a3:0f:9c:71:e6:f3:b5:a0:c6:b7:c2:
b8:51:68:e3:2f:4b:5b:a0:55:af:4e:7e:d3:1d:03:
59:3b:26:23:4c:b7:2a:ca:d6:21:e3:48:1d:97:ac:
a4:2f:61:9f:62:ce:25:6e:be:71:4b:9e:4f:2c:17:
56:a9:70:5c:a9:1a:26:ad:1c:94:dd:6e:cc:5a:fc:
3c:cc:f0:e4:36:0f:00:31:f3:03:6f:24:1c:e1:ee:
d4:80:b3:61:57:79:91:bc:b6:84:a5:1c:43:c1:ba:
fa:e3:e3:29:30:5a:1b:e8:25:9b:b8:d2:ab:c2:11:
dd:8f:c2:e1:96:2f:0e:b8:8f:53:70:80:90:2e:a4:
9a:32:16:7d:fc:c4:0b:92:45:4d:b5:74:07:3f:96:
a9:47:7b:f6:8f:a0:3c:b4:9a:ed:91:65:b3:14:35:
9e:5e:07:e2:94:f3:3a:f3:4f:82:73:af:d0:84:9b:
c5:b4:36:3d:75:6a:f3:77:94:a9:54:2e:05:18:8e:
be:f3:71:eb:6f:d7:ea:12:bc:7b:90:71:75:f3:03:
2c:2c:5f:da:02:0e:bb:5a:7a:8f:fc:93:b1:d5:d3:
2b:1c:b2:17:20:df:a7:37:21:9b:65:f8:6f:b2:a0:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:34:D3:83:5F:96:EB:22:EC:57:D4:26:99:AB:C5:3C:0F:42:E4
X509v3 Authority Key Identifier:
keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/RPI004Nflusi7FfUJpmrxTwPQuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.190.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d7:f6:97:3b:3a:9e:dc:83:05:dc:05:50:5b:32:75:b8:7c:
a7:d6:22:49:bb:1a:77:7f:8e:1d:43:ae:2d:be:bc:28:52:a7:
07:02:07:23:03:71:0e:80:30:25:70:0e:f2:ec:1f:6f:f8:36:
d8:00:5a:ac:c5:1a:7e:11:da:93:93:2c:08:69:88:29:0f:9a:
26:36:9c:ac:5b:a8:f1:c1:0b:4e:f4:e1:fb:70:13:d0:c1:90:
e0:dc:5f:7c:9c:4b:a6:f6:27:bb:96:10:48:bc:7b:19:b2:1a:
af:03:e7:f1:df:f3:8c:d9:24:68:cf:18:75:51:95:d4:77:c8:
9e:58:2d:02:67:6f:a7:f5:8d:d2:64:5a:b9:eb:8d:18:13:ef:
80:20:7d:9b:78:36:73:7a:cc:08:e5:b4:1a:ea:83:f0:23:7f:
45:91:70:88:57:fa:d1:44:d5:3a:8a:96:fb:6c:51:85:e2:1f:
d2:52:9e:3a:44:57:3e:f8:3a:e4:af:62:a3:2d:53:e2:22:79:
fc:19:73:e9:dd:de:6b:76:1d:ad:2e:c0:fa:bc:fc:78:bd:9d:
0d:e7:7a:92:6f:f1:c8:08:6f:52:4a:5b:47:c7:1c:ff:df:cd:
20:c5:3f:80:ff:24:61:51:e0:fe:d4:b2:fe:11:8e:8f:c9:58:
9b:ec:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:02:20 2025 by rpki-client