Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/sVJ8yb4YMNZC8SR4z31lotsJRHA.roa
File: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (raw, json)
Hash identifier: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=
Subject key identifier: B1:52:7C:C9:BE:18:30:D6:42:F1:24:78:CF:7D:65:A2:DB:09:44:70
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019423D6D1605DB7555AE087E7F6034CD38D
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/sVJ8yb4YMNZC8SR4z31lotsJRHA.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.227.208.0/24 maxlen: 24
185.64.72.0/24 maxlen: 24
185.64.73.0/24 maxlen: 24
185.64.74.0/24 maxlen: 24
185.64.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d1:60:5d:b7:55:5a:e0:87:e7:f6:03:4c:d3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1527cc9be1830d642f12478cf7d65a2db094470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b5:19:61:ec:0c:b5:3a:74:05:f7:22:92:19:
fe:a9:a2:03:e6:6b:9e:09:12:d4:01:80:15:75:48:
42:18:08:0b:5c:c7:d7:f1:d1:10:08:5b:fd:13:a0:
ed:69:3e:02:85:25:e2:52:c6:20:1f:ed:7d:c1:16:
17:92:91:0b:9a:ad:75:41:c5:e3:36:74:9a:39:f9:
65:85:46:fc:a0:b6:61:65:da:ff:c3:12:1e:13:4a:
84:6f:b3:c5:23:a5:73:43:86:c8:12:58:dc:9c:9f:
16:c3:43:62:40:7b:13:d1:af:29:e6:7c:06:19:68:
7c:47:3c:98:64:88:bc:79:a7:ec:eb:d6:39:8c:39:
4a:1e:71:b1:55:f2:b2:37:8e:a4:d1:00:3a:f5:17:
ed:62:88:09:40:65:e4:06:ed:e9:53:29:5f:c0:84:
ea:65:54:ed:3c:51:14:58:c4:33:8b:d4:fd:43:f6:
90:25:f6:eb:d8:63:c1:7f:28:32:63:84:c1:a8:8c:
f4:8c:0b:40:0e:6b:3c:a7:2d:b2:2a:49:1b:e8:eb:
d3:c8:dd:30:95:c9:20:76:a2:d8:86:8f:0a:56:e5:
7a:30:00:3d:12:df:81:7e:07:80:1d:e7:60:b5:b7:
b5:d6:11:52:de:e9:c7:8f:d2:23:40:25:b0:de:49:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:7C:C9:BE:18:30:D6:42:F1:24:78:CF:7D:65:A2:DB:09:44:70
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/sVJ8yb4YMNZC8SR4z31lotsJRHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.208.0/24
185.64.72.0/22
Signature Algorithm: sha256WithRSAEncryption
28:5f:0a:37:a3:9e:51:d7:c2:33:fb:95:ce:54:bc:81:56:a8:
8d:1d:d2:4d:92:08:34:e9:e3:95:2e:a4:07:31:cc:d6:99:43:
36:d5:fa:b1:bb:fd:fa:c1:a6:fd:95:67:60:6e:9c:79:cf:da:
96:e0:c8:c7:b9:ac:f9:12:4a:62:91:0f:db:bb:d2:3b:07:b4:
55:d3:67:44:80:00:52:ba:ff:56:b0:c0:1a:22:8e:1e:96:63:
8e:bd:92:b3:4b:30:80:a2:11:41:49:97:fe:e4:82:a4:54:db:
9a:2c:f5:27:b6:ab:11:13:a1:b4:a7:ae:8c:86:7d:a9:84:26:
12:c3:dd:02:52:67:5a:fc:46:1b:ec:9d:f2:63:84:14:2e:9b:
9d:ee:ae:65:4b:d5:f9:06:4a:71:64:19:38:47:d5:11:11:3e:
fc:8f:c0:3f:44:0a:04:81:a3:5f:23:b8:25:33:d5:0b:7a:da:
06:eb:62:f9:ee:3b:cd:0f:ee:f7:65:77:af:f8:ac:52:3c:02:
f9:21:fb:a3:95:fd:26:ff:56:0f:a7:fb:99:4a:6e:69:7e:60:
e3:73:a6:aa:76:5b:37:18:17:ab:33:0e:9d:bb:3d:a6:e2:84:
9c:69:dc:39:88:79:a2:5d:92:1e:13:cc:c6:81:9f:16:5a:27:
d5:0e:24:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:23 2025 by rpki-client