Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/xM4tp_capVPp8moRSLUs7IAmgmY.roa
File: xM4tp_capVPp8moRSLUs7IAmgmY.roa (raw, json)
Hash identifier: sWAHqYhFJqnzUomZ6+aU6+jYrWdf6jmoamDvobrM7lc=
Subject key identifier: C4:CE:2D:A7:F7:1A:A5:53:E9:F2:6A:11:48:B5:2C:EC:80:26:82:66
Certificate issuer: /CN=7d96e4cc29855a88667fa98e35292dfefffa9d7f
Certificate serial: 0194B23467D4F395CE46BC380D4064FE457F
Authority key identifier: 7D:96:E4:CC:29:85:5A:88:66:7F:A9:8E:35:29:2D:FE:FF:FA:9D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZbkzCmFWohmf6mONSkt_v_6nX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/xM4tp_capVPp8moRSLUs7IAmgmY.roa
Signing time: Wed 29 Jan 2025 13:16:06 +0000
ROA not before: Wed 29 Jan 2025 13:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51431
IP address blocks: 91.246.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:34:67:d4:f3:95:ce:46:bc:38:0d:40:64:fe:45:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d96e4cc29855a88667fa98e35292dfefffa9d7f
Validity
Not Before: Jan 29 13:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ce2da7f71aa553e9f26a1148b52cec80268266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:e7:d4:19:55:c0:a8:f0:47:ea:d8:e4:1e:
5c:67:e7:16:cb:33:0a:13:3b:5f:42:5e:d3:d5:1c:
4f:f5:78:e9:64:bc:d2:04:6c:18:a2:06:96:28:b1:
14:88:90:18:eb:15:a8:38:20:fb:87:12:cb:d5:fe:
a0:6f:6e:5a:b2:64:46:00:eb:98:a4:17:db:9b:c9:
a2:00:65:7d:da:4e:e9:db:87:89:9b:90:ec:1a:15:
53:3f:02:a1:a6:b1:1f:ab:2c:59:32:79:c3:46:ae:
e0:ad:1a:a6:11:31:3b:65:c5:2f:73:8d:4d:07:4b:
31:8e:ab:0e:a2:5c:ac:3c:b0:ad:a4:44:49:7d:99:
e5:08:d5:20:61:db:80:eb:7a:28:a4:94:a3:1d:c5:
06:52:70:8c:d2:4f:b5:7d:9e:3a:9b:07:6f:39:ac:
44:6c:5c:bc:00:9b:b7:98:85:ef:77:30:0c:3f:d0:
51:ac:5d:d0:fa:97:77:fd:95:a6:b3:5a:a0:ce:aa:
aa:71:40:52:39:ce:e6:e5:db:f0:62:1e:d6:aa:6b:
28:4e:e2:21:48:4a:1b:39:9b:17:bc:f7:11:2c:0a:
5e:15:5f:b8:46:fd:0a:19:36:97:46:3f:c8:63:a1:
41:a1:84:49:5e:7b:58:ef:f6:46:5b:78:7c:cb:1a:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CE:2D:A7:F7:1A:A5:53:E9:F2:6A:11:48:B5:2C:EC:80:26:82:66
X509v3 Authority Key Identifier:
keyid:7D:96:E4:CC:29:85:5A:88:66:7F:A9:8E:35:29:2D:FE:FF:FA:9D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZbkzCmFWohmf6mONSkt_v_6nX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/xM4tp_capVPp8moRSLUs7IAmgmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cb:8a:3e:e6:20:4d:96:8d:6d:56:ae:3d:4e:d9:95:37:99:
ef:78:26:f6:b2:21:82:7c:4b:f8:f8:d9:e7:12:7d:86:c5:ca:
83:bc:a2:f3:fb:e0:66:4c:48:a0:51:98:cf:58:55:69:2d:df:
ef:13:00:0b:5a:2a:d1:fa:4f:01:c7:82:27:10:30:37:ec:9b:
93:3d:1d:c2:2a:c3:f7:5d:dd:b1:16:a2:c5:29:e3:60:10:85:
2a:21:e1:87:f9:79:48:d3:76:13:86:32:54:94:7b:5e:f0:68:
c1:16:0c:f7:29:7f:ae:06:4a:e7:1d:97:24:5c:9b:12:ea:65:
04:ff:1f:31:a4:1e:fb:e4:0b:41:7f:b3:5b:1c:e9:f3:4a:72:
56:6c:ef:e3:bb:04:c9:13:30:06:b0:96:51:e8:56:79:75:68:
1d:33:fc:82:a9:22:bd:5c:f0:11:ef:d1:5a:8f:88:ef:b4:d3:
17:70:15:bb:ab:a7:f4:d1:9a:23:39:36:28:8f:d2:c0:28:f3:
ca:95:f7:0f:a6:4e:ca:1b:77:29:5d:ee:90:c4:64:29:5b:fc:
0d:6c:7d:77:ac:b1:f2:b8:bf:75:b1:fe:81:36:8e:7f:38:a5:
25:55:e7:10:81:37:42:c0:20:a7:78:81:ea:7b:d4:9d:57:92:
56:1e:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:43 2025 by rpki-client