Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/P0hYRZk_epkkwrcDiaxk_ejd9pE.roa
File: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (raw, json)
Hash identifier: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=
Subject key identifier: 3F:48:58:45:99:3F:7A:99:24:C2:B7:03:89:AC:64:FD:E8:DD:F6:91
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD5EDB2F9F6747A0EC633E7A89F20A
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/P0hYRZk_epkkwrcDiaxk_ejd9pE.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211071
IP address blocks: 91.213.202.0/24 maxlen: 24
2a0a:d6c0:202::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5e:db:2f:9f:67:47:a0:ec:63:3e:7a:89:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f485845993f7a9924c2b70389ac64fde8ddf691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:d2:e0:c9:c0:e6:a3:44:ce:b9:2e:48:66:
07:58:f8:39:ba:4f:2d:87:4f:fa:c7:e7:0d:23:0c:
b3:0c:b1:3e:7c:b8:3c:da:8a:36:d5:90:00:c0:9d:
84:c6:6e:25:3f:9e:44:2c:3e:41:ff:c4:1d:cd:fe:
83:3e:9e:2a:72:4c:67:ea:52:47:44:74:2a:ea:8e:
9f:7c:58:a5:9e:b9:02:9b:3c:fd:04:30:95:33:80:
07:9a:37:6f:3c:0c:f6:5c:20:60:a6:44:c1:42:95:
64:dd:fc:44:bf:9c:63:ff:20:f0:48:f8:ad:fc:16:
45:0e:22:66:e5:14:f8:78:e8:5e:d8:50:bd:14:47:
c0:94:ad:21:a7:27:45:c9:3c:be:6e:34:6e:1d:0f:
0e:4c:6d:a0:16:26:1c:91:b3:41:83:e1:a3:f1:fa:
39:53:ee:e5:05:79:4b:8b:3c:ec:a3:36:23:e0:79:
84:4b:0f:28:64:d3:c2:e2:c3:0e:e7:3f:9f:47:6b:
56:db:b0:ee:af:87:ec:da:03:a4:cf:92:4b:0c:d0:
0f:7c:e2:8e:65:f6:2f:fe:cc:a3:97:7e:b9:5c:2c:
94:4f:36:77:25:4e:3d:77:01:97:9a:f1:a6:9f:53:
fe:53:9c:fd:54:60:08:e7:a9:3c:cc:87:13:1f:ca:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:58:45:99:3F:7A:99:24:C2:B7:03:89:AC:64:FD:E8:DD:F6:91
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/P0hYRZk_epkkwrcDiaxk_ejd9pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.202.0/24
IPv6:
2a0a:d6c0:202::/48
Signature Algorithm: sha256WithRSAEncryption
77:97:41:cb:37:d6:71:af:37:47:e9:2c:c7:9a:12:6a:da:20:
e3:dd:4a:07:2f:90:ce:0d:4f:1e:3b:05:3b:55:a2:c1:8d:08:
df:df:d5:b8:10:3f:b2:17:d6:3a:90:4d:3d:00:70:64:54:5b:
89:21:2d:69:1b:8c:c9:bd:33:1e:b5:95:15:39:5c:5a:70:9f:
4c:d5:82:eb:e8:b6:38:cd:fe:fb:72:66:fa:6c:5d:8a:3d:39:
eb:38:52:58:d4:e3:92:af:16:d0:7a:54:85:fc:35:27:8b:ce:
10:6f:7f:9a:8b:d5:ae:8d:3a:94:fc:89:5d:16:9a:50:0e:05:
ca:69:06:73:a6:98:db:e7:8b:b9:cc:b9:55:f9:f4:25:63:d0:
d2:a5:20:2d:bf:7b:35:a0:c2:1c:81:b9:b4:c6:6f:34:1d:89:
8a:78:fd:e7:87:9d:f7:03:55:12:38:b3:73:87:b6:52:ed:24:
00:b7:5e:67:6c:45:d7:ec:18:f1:b1:47:f5:b1:8f:ba:25:79:
78:38:1d:fc:4d:11:6f:1e:f8:5f:ad:aa:11:4a:29:84:10:57:
98:49:3e:55:b6:bc:74:68:f0:6f:d2:c3:03:75:5a:b1:d2:b6:
4f:c9:f1:4e:27:5d:00:8b:9a:8f:90:76:fb:09:6d:79:22:bf:
d3:a6:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:11 2025 by rpki-client