Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/6ZLXpTwYTRC4uQn7ucqOX1hIvaA.roa
File: 6ZLXpTwYTRC4uQn7ucqOX1hIvaA.roa (raw, json)
Hash identifier: hV7ZpjCPkW3AKeaOHVYvvR8ntBAKuUi/RL5lLxC2oyI=
Subject key identifier: E9:92:D7:A5:3C:18:4D:10:B8:B9:09:FB:B9:CA:8E:5F:58:48:BD:A0
Certificate issuer: /CN=14af42f1df4f33f0e56185b51edda8b14906a018
Certificate serial: 018A6488977A81A3E24267CEC708BD680D07
Authority key identifier: 14:AF:42:F1:DF:4F:33:F0:E5:61:85:B5:1E:DD:A8:B1:49:06:A0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK9C8d9PM_DlYYW1Ht2osUkGoBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/6ZLXpTwYTRC4uQn7ucqOX1hIvaA.roa
Signing time: Tue 05 Sep 2023 08:49:47 +0000
ROA not before: Tue 05 Sep 2023 08:49:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198893
IP address blocks: 91.195.228.0/23 maxlen: 23
2001:67c:ca4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:88:97:7a:81:a3:e2:42:67:ce:c7:08:bd:68:0d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af42f1df4f33f0e56185b51edda8b14906a018
Validity
Not Before: Sep 5 08:49:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e992d7a53c184d10b8b909fbb9ca8e5f5848bda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:44:b2:1f:f2:f5:9e:c1:ea:77:9f:f7:87:
55:b4:cf:d8:9c:96:aa:47:2d:dd:04:ad:5f:1a:ac:
c2:36:ec:7e:7f:a5:fe:c9:1a:07:27:84:81:1a:0d:
c3:20:1e:d5:4d:0d:be:9a:f9:54:87:e0:1a:da:20:
f2:59:7b:b8:5d:07:25:43:7b:19:27:29:01:ec:d5:
a5:f1:e6:c1:a0:b6:6c:de:19:07:ca:a7:2a:00:dd:
9e:54:8a:3a:3e:a3:1f:ca:c2:db:6c:58:60:1e:93:
4b:d3:13:26:8a:a7:1b:93:cb:c3:08:7b:69:74:f2:
57:dc:db:0a:7a:29:f6:25:05:a9:2f:5d:2f:5b:4f:
fe:fb:d2:b9:c7:91:ed:62:51:a1:49:a3:69:07:bf:
1a:cc:92:30:d3:0e:59:b9:da:86:a8:96:87:f0:38:
0b:73:d3:f7:72:e8:45:79:d9:a3:c1:0f:fe:ef:f4:
b6:3e:97:dd:53:3d:17:f6:d6:3b:9e:83:ca:48:32:
73:27:a0:c9:a9:99:64:e8:e8:3d:a4:25:85:08:48:
d7:79:a4:33:63:97:b6:58:2f:66:0e:5e:32:6b:30:
43:d9:9d:c4:fa:cb:f1:e1:7f:cc:a3:90:13:d7:d1:
e1:66:dc:a9:01:3b:01:82:c6:f0:67:97:bc:89:31:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:D7:A5:3C:18:4D:10:B8:B9:09:FB:B9:CA:8E:5F:58:48:BD:A0
X509v3 Authority Key Identifier:
keyid:14:AF:42:F1:DF:4F:33:F0:E5:61:85:B5:1E:DD:A8:B1:49:06:A0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK9C8d9PM_DlYYW1Ht2osUkGoBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/6ZLXpTwYTRC4uQn7ucqOX1hIvaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8a3cd0-23f0-4365-b1b6-9fb6d979b982/1/FK9C8d9PM_DlYYW1Ht2osUkGoBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.228.0/23
IPv6:
2001:67c:ca4::/48
Signature Algorithm: sha256WithRSAEncryption
a8:b0:b5:00:a1:98:5f:aa:8e:60:94:97:ad:d4:35:a4:97:1c:
79:25:5b:5b:f8:36:e6:a0:ce:1e:fd:ea:92:9f:21:83:d6:7d:
3a:31:80:b9:0c:70:b5:a7:37:f0:39:46:74:8b:0b:3f:b0:6d:
ce:d5:4f:b0:80:4c:b2:69:a8:7c:db:bf:32:70:a0:78:aa:34:
26:60:fe:37:d5:e6:c9:19:b9:80:97:0b:a9:4c:7b:69:d8:63:
b6:d6:94:c2:86:2f:b6:75:3a:0d:ee:29:30:c1:b1:f0:11:76:
cf:48:af:cd:3e:0f:a2:06:33:53:97:75:b7:90:63:b0:f8:96:
40:65:2a:c8:59:e9:ad:77:ad:b0:85:86:00:85:7e:b6:48:fe:
f3:48:4f:ba:da:0d:ad:dd:80:18:0a:a0:73:e3:50:bd:66:24:
13:65:6a:91:6a:c9:34:fb:46:de:ec:bf:aa:e4:bb:c2:d7:97:
4e:21:59:40:7d:ca:6e:01:b6:e5:af:f7:08:6d:a6:9d:9b:a7:
8c:d9:5b:3b:3a:77:01:7e:d1:6c:06:64:24:7c:f8:c4:4e:c3:
db:b4:7f:a2:25:11:d3:ce:3a:db:8c:6e:e5:e6:0f:e4:be:76:
0a:94:4b:03:b2:97:46:d0:0e:24:9e:17:2d:bb:4a:9f:ed:b5:
5f:96:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:59 2025 by rpki-client