Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/asJ6XoaPGanWpEOfN692jXfBcpE.roa
File: asJ6XoaPGanWpEOfN692jXfBcpE.roa (raw, json)
Hash identifier: HfCzgkEPWknm69g3E65R0N6pyQx0xgp0lMGHDo5wI8A=
Subject key identifier: 6A:C2:7A:5E:86:8F:19:A9:D6:A4:43:9F:37:AF:76:8D:77:C1:72:91
Certificate issuer: /CN=ece5feab893d52681ce5395de08f90830d3c322b
Certificate serial: 01856B6E984782C38CCF29B6D051C35B9BCB
Authority key identifier: EC:E5:FE:AB:89:3D:52:68:1C:E5:39:5D:E0:8F:90:83:0D:3C:32:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OX-q4k9Umgc5Tld4I-Qgw08Mis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/asJ6XoaPGanWpEOfN692jXfBcpE.roa
Signing time: Sun 01 Jan 2023 03:44:48 +0000
ROA not before: Sun 01 Jan 2023 03:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51055
IP address blocks: 91.216.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:98:47:82:c3:8c:cf:29:b6:d0:51:c3:5b:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece5feab893d52681ce5395de08f90830d3c322b
Validity
Not Before: Jan 1 03:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ac27a5e868f19a9d6a4439f37af768d77c17291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:64:81:b2:32:69:ba:4e:e1:12:18:07:21:
ce:cd:b9:f9:59:79:0a:9e:82:81:c0:e5:e5:78:25:
88:24:61:38:47:ac:c6:02:66:ee:b3:22:a2:75:1f:
0b:f3:68:f3:36:84:84:6d:06:a7:e2:58:52:ef:f5:
8c:18:0a:75:d8:c3:9a:74:51:8d:96:7b:0d:c2:b5:
df:11:f6:c3:8d:27:68:2a:d5:3c:cc:a6:06:c3:b4:
e2:16:35:c3:8c:4c:28:f7:11:bb:24:f1:b4:2a:88:
0c:7e:22:f3:6f:3a:06:a5:6e:74:8a:c7:a6:9b:87:
69:41:46:2c:57:b0:af:85:1e:12:82:b9:9e:ec:89:
f0:14:41:e7:a8:28:ca:cb:83:2e:38:f9:7c:92:a8:
6d:73:29:45:a0:28:33:35:1e:4f:d8:bc:a3:25:bd:
e5:6d:76:3f:95:a2:31:a1:8e:75:08:4c:31:93:c2:
af:c1:55:f0:65:c0:06:d8:29:e8:05:60:50:ca:ae:
e7:c2:78:08:d7:40:fd:bd:6b:dd:72:d5:34:af:d1:
7c:43:3d:92:23:74:94:ad:29:5d:3e:03:da:95:72:
57:35:2d:03:64:85:d8:e8:3f:a1:f8:cf:0f:43:28:
37:78:f1:67:62:62:56:34:f9:2c:44:b7:df:b5:00:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C2:7A:5E:86:8F:19:A9:D6:A4:43:9F:37:AF:76:8D:77:C1:72:91
X509v3 Authority Key Identifier:
keyid:EC:E5:FE:AB:89:3D:52:68:1C:E5:39:5D:E0:8F:90:83:0D:3C:32:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OX-q4k9Umgc5Tld4I-Qgw08Mis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/asJ6XoaPGanWpEOfN692jXfBcpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/7OX-q4k9Umgc5Tld4I-Qgw08Mis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.112.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d5:af:80:11:13:6e:4d:90:e6:b2:1f:6e:33:35:e1:8b:81:
54:b2:db:bb:3f:69:dd:ab:5b:39:14:7d:0b:b4:02:29:91:d7:
7b:e1:fa:f4:26:d4:e4:bf:51:82:73:6d:97:4c:61:8d:9b:4d:
d9:69:cf:42:cd:59:40:20:85:0a:89:71:e2:6e:cd:2a:31:37:
b4:f0:78:6a:a1:10:4f:62:9c:fa:96:ef:35:2a:02:91:af:4e:
2d:1e:bd:38:26:05:80:c8:a6:88:e2:92:81:44:d4:a9:7f:08:
8d:46:b5:ef:45:1a:7d:6b:41:b8:79:51:22:da:b8:38:d6:d8:
e4:c1:01:dd:8a:cc:e2:b7:34:c6:23:87:d6:ab:41:be:09:fa:
e8:a8:0a:6f:77:b0:08:15:71:b2:b8:f8:10:37:21:6e:5a:06:
ea:97:81:00:58:73:42:15:62:a5:74:44:83:9c:f6:95:f3:23:
bd:3e:59:10:be:f2:e1:a5:b9:8e:b6:4f:85:f7:39:fb:00:e5:
e4:d2:b8:a2:33:71:5f:0f:2e:d5:c2:46:14:01:7b:93:36:f0:
a0:ff:7f:1b:63:bd:63:b9:ea:6a:4e:f1:55:2e:e1:c3:03:7e:
d8:57:ef:d4:b8:c1:3b:ea:25:36:b3:e3:be:5f:33:51:f1:71:
95:51:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:50:02 2025 by rpki-client