Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/8x0fSHHCWYsF_T4odWtFCNS4Epc.roa
File: 8x0fSHHCWYsF_T4odWtFCNS4Epc.roa (raw, json)
Hash identifier: 1s4m9WtdCeBK4pn2ywhMmGjSw2YWKAtIctHhy4zfyyE=
Subject key identifier: F3:1D:1F:48:71:C2:59:8B:05:FD:3E:28:75:6B:45:08:D4:B8:12:97
Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial: 0194221F8FE5BA4848AC2183167D32CB7C19
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/8x0fSHHCWYsF_T4odWtFCNS4Epc.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 91.205.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8f:e5:ba:48:48:ac:21:83:16:7d:32:cb:7c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f31d1f4871c2598b05fd3e28756b4508d4b81297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:43:55:a2:20:c8:b5:e8:0f:71:37:7f:cd:b1:
2d:02:6d:55:26:d5:96:0d:c0:13:5f:2c:b6:7f:eb:
54:4a:b1:dd:e0:36:e1:b1:f3:69:1a:84:6d:97:1a:
96:45:aa:05:08:bc:c2:21:4a:0f:58:e7:f3:4b:c4:
cb:11:ad:d9:3c:bb:40:1a:77:fd:ac:a8:70:40:70:
99:8e:47:7b:0f:e3:51:c1:8a:80:9d:dd:10:ee:35:
a9:eb:32:35:8c:bc:60:ad:bb:17:b6:58:e0:5e:7c:
d8:b4:68:43:1f:7c:df:dd:a0:f5:02:49:59:ec:d3:
2c:44:87:ad:54:e0:4f:46:12:04:4a:2c:d6:56:e0:
fc:61:e8:fa:3a:f4:be:f7:8f:a4:80:e6:a4:c6:32:
23:3c:3d:74:93:b9:27:5e:23:c5:27:9b:a6:39:7f:
60:7a:de:64:9e:1d:c8:bf:60:e6:83:3a:11:fb:a4:
d8:b1:62:6a:48:39:3b:16:5a:11:cc:66:2f:bc:d7:
00:58:12:89:1c:7a:c4:25:32:e1:37:26:26:a3:4d:
a4:1f:2e:93:6c:86:a3:3e:00:99:7d:9d:b5:cf:62:
2c:ef:8e:32:87:53:c5:83:35:e6:84:28:17:19:54:
57:25:e1:7d:7f:51:28:3f:01:0c:38:ce:16:59:42:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:1F:48:71:C2:59:8B:05:FD:3E:28:75:6B:45:08:D4:B8:12:97
X509v3 Authority Key Identifier:
keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/8x0fSHHCWYsF_T4odWtFCNS4Epc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d8:09:60:f5:6d:f1:f5:9e:c7:03:c7:99:05:63:f5:cd:7a:
60:d1:86:96:82:f0:9a:8d:54:df:91:3a:ca:b7:61:24:c9:64:
96:60:ca:51:33:d9:16:c1:d5:c7:5d:a6:76:05:f6:ed:85:5a:
78:51:31:1d:d9:7b:69:a4:81:6d:88:06:5f:ef:38:1b:c6:af:
7e:4d:41:07:6e:13:7e:8a:75:50:0d:ac:de:2d:a4:1e:ab:fb:
16:8e:5d:7a:68:e9:25:85:2e:55:fe:b1:f5:6e:76:5e:d9:76:
7f:26:03:8b:f4:10:77:85:8c:72:ea:73:34:a1:5a:ef:01:e8:
0c:26:d8:51:82:fb:ac:a6:4b:67:a0:c4:76:46:d4:b5:58:d1:
09:5a:c8:c6:2a:1e:d5:22:d7:f7:7c:56:9e:88:16:2e:8b:07:
9d:e2:42:e4:8e:6f:73:26:f0:a5:76:7d:77:26:68:1d:7a:66:
4b:b8:43:c8:a4:b6:1e:66:de:f1:2d:c4:81:64:4d:f5:9c:de:
bc:24:62:0e:54:75:50:df:dd:8e:ac:5d:bb:25:91:42:e2:da:
fe:e2:5f:19:78:d8:62:cb:74:49:b5:6b:36:b0:ad:21:ad:cb:
14:aa:9c:05:24:3d:71:51:61:72:12:b9:b9:3a:25:07:55:22:
c7:4b:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:15 2025 by rpki-client