Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/1ogdJyRq3kjlLK-OBXBljBBzxSI.roa
File: 1ogdJyRq3kjlLK-OBXBljBBzxSI.roa (raw, json)
Hash identifier: ncBqQOBzAjOyptBOSGpV6pBlk69nyPrlzu+2Ps8+fqI=
Subject key identifier: D6:88:1D:27:24:6A:DE:48:E5:2C:AF:8E:05:70:65:8C:10:73:C5:22
Certificate issuer: /CN=cbf6f8aeabeb3167d1192d628480c7e2bfd97248
Certificate serial: 019423D7BDEF347A7AD3916B0126B83B2D35
Authority key identifier: CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/1ogdJyRq3kjlLK-OBXBljBBzxSI.roa
Signing time: Wed 01 Jan 2025 21:48:48 +0000
ROA not before: Wed 01 Jan 2025 21:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200062
IP address blocks: 91.103.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:bd:ef:34:7a:7a:d3:91:6b:01:26:b8:3b:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf6f8aeabeb3167d1192d628480c7e2bfd97248
Validity
Not Before: Jan 1 21:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6881d27246ade48e52caf8e0570658c1073c522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:cb:64:62:f6:91:6a:e7:44:78:fa:36:df:
ff:20:21:9b:f5:7c:8d:25:5b:77:6d:ea:8c:ef:4d:
c5:f0:a4:a8:ea:e8:e7:3d:56:2e:8f:4f:81:5a:30:
29:70:88:07:3c:0f:d0:b8:58:e4:e9:6f:f8:f3:3a:
b6:98:16:51:01:07:69:a6:68:3a:50:7d:89:50:18:
17:20:bf:b1:d0:30:6e:24:be:2d:71:87:d9:fc:8e:
43:0c:69:fd:42:d2:8a:54:94:48:89:86:67:94:13:
4e:34:50:46:1f:71:cd:87:f4:56:7b:ff:54:ec:f0:
41:a0:a3:4f:6e:e5:a6:77:ff:34:a4:14:9c:09:86:
b3:37:ee:8f:6b:a9:d0:39:56:1a:00:46:8d:cb:55:
a6:6a:7c:9b:d4:7a:9a:3b:ba:47:10:3c:9d:51:ac:
54:28:19:41:f9:2e:a7:32:1e:4b:99:ec:8a:93:eb:
79:e9:f4:16:3c:a1:c2:d6:40:6d:c1:66:d0:e1:dd:
f9:ed:ca:13:4a:d3:42:37:ae:5d:ee:99:18:55:40:
2c:b8:4f:3c:2f:23:c7:e3:78:c8:48:86:6d:fa:f9:
a9:98:90:11:bc:08:60:83:1d:18:50:ad:35:6a:55:
20:92:62:e5:8c:4d:7f:6b:d7:54:47:8a:8a:f6:9c:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:1D:27:24:6A:DE:48:E5:2C:AF:8E:05:70:65:8C:10:73:C5:22
X509v3 Authority Key Identifier:
keyid:CB:F6:F8:AE:AB:EB:31:67:D1:19:2D:62:84:80:C7:E2:BF:D9:72:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_b4rqvrMWfRGS1ihIDH4r_Zckg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/1ogdJyRq3kjlLK-OBXBljBBzxSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/84e3f6-6931-4693-9579-1b3235babe27/1/y_b4rqvrMWfRGS1ihIDH4r_Zckg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.12.0/22
Signature Algorithm: sha256WithRSAEncryption
35:90:5d:ad:75:63:e4:86:43:0c:20:9d:b8:99:2a:90:c2:27:
fd:be:25:5c:fc:9e:00:75:c8:c6:bb:43:97:36:60:5d:05:4d:
8d:cc:fe:1d:a4:5f:cd:8d:5a:f8:90:0e:20:bc:b7:20:00:25:
64:ac:93:31:3e:af:84:ab:66:3d:f2:45:20:10:aa:ff:a6:0a:
df:6f:fb:46:41:5a:77:b8:11:e3:dc:42:4d:1c:f2:5b:7f:b1:
64:f9:e4:73:2b:9b:43:30:05:57:ad:eb:65:c3:ff:8a:c8:8f:
81:13:24:c8:17:c9:f4:6b:cf:7b:1a:62:2b:4d:46:a9:1e:6d:
f6:be:0f:52:2b:43:af:49:c9:ba:c3:e6:8f:ec:48:89:ec:f7:
1e:5a:10:17:aa:8e:86:c7:08:fd:37:e5:ee:8e:5b:af:18:f9:
5a:17:f3:ef:d3:49:f4:eb:4c:cd:e0:90:d3:46:12:0f:2b:7f:
d6:56:c0:5d:53:ac:84:5e:d7:c0:7b:64:af:6d:7b:52:09:5f:
95:c0:f7:71:61:7e:78:a5:ef:82:32:72:1a:b6:b5:bc:65:08:
2b:04:a8:d0:6f:49:23:98:af:b4:2a:42:7e:8b:50:0d:dd:03:
68:cb:ea:01:97:85:76:12:b2:2b:a0:86:b5:5a:50:df:9a:fe:
26:cb:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:52:56 2025 by rpki-client