Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa
File: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (raw, json)
Hash identifier: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=
Subject key identifier: 90:BF:57:79:A5:5D:15:82:07:F0:47:B6:D6:68:E4:12:01:01:67:93
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 019423D77F0F8ED0DD8F70FF88002E655613
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa
Signing time: Wed 01 Jan 2025 21:48:32 +0000
ROA not before: Wed 01 Jan 2025 21:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199898
IP address blocks: 91.238.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7f:0f:8e:d0:dd:8f:70:ff:88:00:2e:65:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90bf5779a55d158207f047b6d668e41201016793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:20:19:8b:ec:65:df:71:9e:6f:04:d5:49:
45:47:16:11:58:e8:6b:07:f8:6a:11:7a:23:84:ae:
68:6d:e4:80:d6:a8:58:06:aa:58:68:2d:56:1f:72:
d5:95:39:09:e5:9e:7c:3f:b7:a4:50:19:61:a8:20:
4c:b7:1e:bc:5c:42:a4:85:ed:bb:ac:f7:1b:c9:07:
56:e0:2f:31:f4:06:2c:2c:38:59:9c:8c:80:4b:cb:
e1:1d:bc:47:a0:ed:55:e2:13:41:e9:6e:03:1b:ce:
5b:0d:47:d2:04:46:be:d5:8a:4e:5e:cb:f2:8a:b3:
c1:af:b0:1b:85:6e:1c:0e:a4:3f:c9:05:ee:00:e0:
6e:7a:9e:ad:a8:18:7c:2b:7d:70:4e:8b:8c:86:01:
27:43:92:29:42:76:2b:dd:28:77:63:66:54:c5:de:
2c:89:62:3a:5e:34:c8:61:2a:f6:65:46:e9:37:b8:
6b:30:5f:9e:9c:3d:33:00:61:1c:8d:3b:7a:d6:1e:
fa:24:27:c0:95:cb:c6:9c:a5:ba:4b:95:5a:6c:e9:
c0:e2:4d:e2:bd:ab:da:21:ef:da:13:8e:dd:06:cb:
08:8d:fc:12:64:23:8e:92:cf:d2:5a:a3:d1:83:4e:
68:a9:7f:c8:ce:91:d1:dc:d3:62:4a:2b:e4:69:c0:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:57:79:A5:5D:15:82:07:F0:47:B6:D6:68:E4:12:01:01:67:93
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.251.0/24
Signature Algorithm: sha256WithRSAEncryption
12:10:c4:10:a9:57:de:28:c8:99:96:94:c5:99:35:1d:72:87:
49:ff:31:14:1a:26:ad:50:bb:c5:06:1f:8c:6e:55:49:64:a2:
12:9c:99:76:4e:39:6e:88:76:40:56:93:4a:9d:e4:96:a3:c6:
02:ff:2e:db:32:ec:25:02:7f:8d:57:af:7f:1f:0c:ba:aa:1c:
93:eb:c4:c7:9e:00:f9:b5:7f:2f:1b:8f:aa:74:ad:23:9c:de:
8d:b7:20:51:02:8a:82:5e:e0:cd:94:c8:8b:f1:f3:cb:47:57:
e9:f8:e1:1c:f5:f0:ec:41:fc:b4:32:04:cc:4f:6f:20:f1:d3:
65:8a:28:ac:e4:ab:b3:94:9a:5c:17:58:a0:cb:c2:1d:1c:85:
e3:c3:4a:b4:0e:75:b9:60:a1:25:db:13:0e:93:1a:ec:2b:81:
21:fa:10:d1:27:3b:67:cf:c3:a2:76:d2:75:79:96:de:c4:fb:
64:d0:e1:fb:24:04:b2:74:2d:a0:c5:b1:10:b9:40:6f:73:ef:
ec:09:7a:2e:bb:b1:38:e0:e7:33:04:9d:e6:59:71:cd:84:f3:
40:d4:81:c3:4d:cf:65:c6:81:7d:e7:74:cc:b7:4c:2e:48:6c:
64:83:31:bf:e5:9c:a0:e8:7a:8c:22:8a:8a:bc:9d:bb:c8:d8:
10:ce:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:59:31 2025 by rpki-client