Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa
File: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (raw, json)
Hash identifier: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=
Subject key identifier: DF:50:79:2B:BB:E4:01:F4:BD:47:6C:24:1A:E5:79:75:C0:27:2F:66
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 0194228DA899D8FC7B35A3DAA2E8CB1ECF7E
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51478
IP address blocks: 91.219.12.0/22 maxlen: 22
91.219.12.0/24 maxlen: 24
91.219.13.0/24 maxlen: 24
91.219.14.0/24 maxlen: 24
91.219.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a8:99:d8:fc:7b:35:a3:da:a2:e8:cb:1e:cf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df50792bbbe401f4bd476c241ae57975c0272f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:cf:7a:4f:c7:15:58:54:a5:37:9b:5f:ef:
43:6a:88:a4:c6:7c:83:00:ed:19:ed:c4:75:9d:8f:
57:58:cf:08:b9:0b:bd:db:1d:26:7b:3c:44:84:77:
d5:26:e1:93:48:16:a8:b7:bf:de:2e:c9:dc:58:a7:
70:a8:d3:c8:cb:0c:df:d4:46:94:c6:ae:a7:60:9d:
5c:7c:60:95:94:df:57:81:85:12:30:6a:da:23:e0:
47:58:f0:93:51:ba:73:47:03:44:b9:a7:7e:0b:b7:
15:b5:ad:c7:68:90:a8:17:b6:48:fb:52:a5:f2:24:
b1:03:4a:77:c1:79:41:e3:f2:83:ac:da:b6:72:43:
80:81:1a:a2:00:72:54:8f:ec:56:aa:27:07:92:c5:
fe:37:fa:d6:99:25:71:9d:f5:a7:15:bb:62:91:e2:
46:10:0f:f8:b0:a9:ac:23:1f:c2:66:73:3e:39:e0:
03:ce:1a:f1:63:83:c3:8f:60:84:35:af:19:98:ed:
b7:00:a8:7e:26:05:4b:5c:34:38:f1:45:3b:85:4a:
a0:9b:c4:7e:63:c0:d2:00:b0:7b:c4:a1:37:c6:e8:
94:7f:fd:c0:92:d0:2f:68:d9:61:a8:83:2d:9c:4f:
2c:ab:13:56:38:c6:41:7e:93:0e:d8:c5:f4:ef:2e:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:50:79:2B:BB:E4:01:F4:BD:47:6C:24:1A:E5:79:75:C0:27:2F:66
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:dd:05:a9:79:82:cf:52:35:43:ba:32:c1:c7:a3:61:c1:36:
d2:83:24:70:e7:40:63:f7:b3:ae:fa:e9:28:f3:2d:9b:26:bb:
f2:0f:77:c2:2a:fb:32:b6:2a:2e:d4:0e:5a:83:85:74:d3:04:
c3:2b:31:a2:ed:f7:42:ca:b8:ca:9c:d3:1a:24:88:30:ae:8b:
48:82:cf:90:19:26:bf:38:20:30:93:fd:e9:db:4e:0e:6e:e2:
54:99:0b:cf:45:14:92:bd:98:2f:60:10:04:cc:5e:58:6d:b5:
1c:20:01:3f:82:13:17:15:35:ba:d5:63:d9:a1:28:9d:82:9d:
2e:2e:e7:82:61:df:2e:bd:62:dc:81:e6:4c:ff:3a:60:81:6b:
c3:d8:7f:71:ad:07:ad:4d:d5:87:56:6a:aa:38:2c:d5:2d:e5:
e4:81:af:85:85:5b:a6:ce:2c:95:d4:c4:47:c4:c4:e4:0e:c8:
88:c2:1c:1a:99:73:6a:42:b0:ab:56:76:dd:c1:b2:5f:c1:6e:
99:d1:25:84:e8:02:19:5c:a1:be:8a:64:2f:f6:2c:49:67:44:
24:3a:1b:da:0f:00:b0:c7:fe:b8:b2:c2:41:14:d7:02:1e:00:
64:13:fe:7a:9f:62:70:12:4f:4e:26:15:79:a6:ac:96:d3:bc:
c4:c6:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:14 2025 by rpki-client