Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/lRr9ZKYToziyPo2UM6w2Bqa2bT0.roa
File: lRr9ZKYToziyPo2UM6w2Bqa2bT0.roa (raw, json)
Hash identifier: MWZiMCt9Cv6BtUBJ/n7rHLSzCBdBok8TUKj3AeUCo+o=
Subject key identifier: 95:1A:FD:64:A6:13:A3:38:B2:3E:8D:94:33:AC:36:06:A6:B6:6D:3D
Certificate issuer: /CN=2631b29ac75ab548ba752b5f6251d97cb1c55e11
Certificate serial: F8D5A0
Authority key identifier: 26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjGymsdatUi6dStfYlHZfLHFXhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/lRr9ZKYToziyPo2UM6w2Bqa2bT0.roa
Signing time: Sat 01 Jan 2022 08:02:04 +0000
ROA not before: Sat 01 Jan 2022 08:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.17.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16307616 (0xf8d5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631b29ac75ab548ba752b5f6251d97cb1c55e11
Validity
Not Before: Jan 1 08:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=951afd64a613a338b23e8d9433ac3606a6b66d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:15:9f:08:81:17:29:61:89:d2:3a:c0:0e:
0e:5f:77:c7:f1:74:0b:31:04:61:dc:6a:79:a2:5f:
8a:7f:83:5e:28:57:80:de:21:46:5a:c6:ac:a8:3d:
98:c5:56:1c:69:3d:90:c9:fe:99:9c:3f:c3:55:70:
fa:e2:5e:a0:ca:d3:d3:9a:22:15:3b:09:35:a3:9b:
a0:14:04:88:ce:d7:40:12:ca:72:40:58:04:1f:14:
74:ea:6a:48:4f:19:ab:3c:9d:42:21:d3:9a:c1:ea:
6e:bf:57:c1:9d:e2:dc:a8:2d:ea:e2:db:74:04:3f:
19:59:74:a4:1b:6d:fd:fb:9c:96:da:4f:b4:ba:a1:
42:23:02:e4:97:88:1c:23:db:1c:27:3b:5e:56:9a:
04:0f:5e:e8:01:ce:a3:7a:16:78:c1:e1:63:c5:2d:
84:31:63:b5:31:83:4a:5b:b1:c3:3b:0c:41:97:12:
de:af:e3:1e:9a:96:94:7d:f1:a1:ab:75:e0:c4:ae:
bc:17:cd:41:5f:09:8e:3f:5c:63:4d:63:95:38:6a:
06:a0:7e:1f:7b:9f:57:f4:3c:f2:8a:a2:dc:4a:0b:
0c:3f:66:9d:18:45:03:9d:1f:c6:f3:f8:71:25:20:
78:24:61:02:7c:0f:67:73:e7:04:49:f8:dc:9b:1d:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:FD:64:A6:13:A3:38:B2:3E:8D:94:33:AC:36:06:A6:B6:6D:3D
X509v3 Authority Key Identifier:
keyid:26:31:B2:9A:C7:5A:B5:48:BA:75:2B:5F:62:51:D9:7C:B1:C5:5E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjGymsdatUi6dStfYlHZfLHFXhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/lRr9ZKYToziyPo2UM6w2Bqa2bT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6be027-7e6e-4ce6-8b31-189da9a46608/1/JjGymsdatUi6dStfYlHZfLHFXhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9d:2c:83:e4:f3:62:e0:9b:8f:50:86:77:44:b6:9f:48:92:
8d:90:43:26:08:9f:3b:10:31:06:67:55:04:9e:bc:49:cb:36:
3a:76:b8:b3:83:73:04:09:5c:30:af:04:81:c7:ee:04:8e:c8:
1c:37:e6:74:8c:4f:fd:b4:79:54:9c:2a:e8:ef:eb:11:40:08:
c7:bf:09:a3:d5:da:3b:35:ee:2f:39:4d:9c:a2:3c:2c:b1:b8:
ee:fe:95:09:5e:49:e5:47:5f:ad:bc:f6:da:23:6f:51:2e:6b:
bc:5c:a4:a9:8f:17:6e:0d:01:ab:ab:e3:18:e6:af:c0:23:db:
5a:72:81:55:29:be:0c:f8:3f:33:58:d3:89:51:44:f0:8a:3a:
a7:4f:a2:97:73:cd:a6:6c:10:2a:fa:7a:57:cf:8b:fd:4d:9c:
20:97:05:6a:75:9e:83:63:d9:4d:4d:31:b2:31:eb:a1:0b:d5:
d3:be:96:7a:3a:a8:c4:d7:74:31:b9:db:35:8c:e9:6f:e2:32:
b2:0e:05:3e:fd:a5:2d:d1:67:c0:2a:d5:6c:ed:6d:92:11:b2:
8f:c9:e1:1b:de:dd:a7:20:ae:0b:a2:63:25:62:9b:db:82:7f:
0b:73:df:d0:7c:a6:e8:77:de:98:4c:1b:7e:f0:05:cd:49:13:
1d:be:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:33:05 2025 by rpki-client