Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/855GgUVEest7L9kA_-PsHWWvpu0.roa
File: 855GgUVEest7L9kA_-PsHWWvpu0.roa (raw, json)
Hash identifier: OQiFJHDcYph1uVMgD5OHTg+Cdq6dmuEujMU5l/z/YsQ=
Subject key identifier: F3:9E:46:81:45:44:7A:CB:7B:2F:D9:00:FF:E3:EC:1D:65:AF:A6:ED
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194CF59F5D99EAE81704E316ED4967A29A6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/855GgUVEest7L9kA_-PsHWWvpu0.roa
Signing time: Tue 04 Feb 2025 05:06:06 +0000
ROA not before: Tue 04 Feb 2025 05:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213613
IP address blocks: 91.92.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:59:f5:d9:9e:ae:81:70:4e:31:6e:d4:96:7a:29:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 4 05:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f39e468145447acb7b2fd900ffe3ec1d65afa6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:34:ce:3b:f3:6a:76:57:61:5c:1d:79:1b:
b0:db:72:61:14:f8:c0:af:f9:5d:b2:4f:50:af:13:
7c:ce:96:6a:20:c6:2a:60:05:6c:3c:96:37:ee:b3:
ba:3e:9c:fa:8c:26:72:b3:fd:a2:28:ce:f4:81:47:
d6:0e:4d:17:5c:22:f9:90:88:8f:c7:02:78:b4:a9:
26:9e:79:9b:e3:c9:9a:bf:a4:09:b6:e8:5a:19:ab:
41:c2:b2:1a:a6:c6:d9:65:40:f1:3d:77:27:ea:e3:
5c:f9:d1:92:62:bc:00:60:9a:3c:5c:81:55:bf:52:
03:d8:20:da:e0:a5:48:4f:08:c2:0c:57:01:6c:7f:
7e:e3:2d:20:1c:d0:1f:0c:b9:3d:6a:c1:d8:a8:a8:
1a:2e:54:ae:92:a7:f4:fc:91:1b:be:5e:3d:19:48:
cb:ad:30:34:ed:c9:a6:dd:41:b3:a6:0d:7c:6d:c8:
74:5e:66:68:a4:e6:18:ee:d2:24:b4:8b:01:7c:34:
2e:ee:45:54:c7:7a:92:83:bc:14:87:05:fc:23:87:
2b:36:4d:e5:c1:e1:cb:6f:26:9b:2a:de:38:af:79:
d4:cf:a7:da:ba:f6:d0:87:a0:fa:d7:69:d3:05:fc:
d7:35:5d:6f:ff:89:60:9c:2c:5a:06:6f:98:d7:5a:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:46:81:45:44:7A:CB:7B:2F:D9:00:FF:E3:EC:1D:65:AF:A6:ED
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/855GgUVEest7L9kA_-PsHWWvpu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.16.0/24
Signature Algorithm: sha256WithRSAEncryption
19:59:dd:6d:99:28:f1:cc:13:e6:61:dd:d7:fd:46:91:a5:15:
3e:6f:15:fa:69:b2:1d:8a:71:8c:fd:37:20:08:f3:6f:13:1a:
48:5f:19:49:8b:bd:d1:3f:2b:25:fa:70:ec:e1:69:78:98:e2:
9f:ec:32:84:15:69:6b:1a:8e:2f:d3:48:3a:43:f9:3c:00:b7:
ef:ee:a5:11:9c:1c:90:ff:4b:1b:5c:ce:8b:cb:74:14:bd:9f:
fc:94:c4:37:c9:94:22:d7:96:49:5f:0a:5c:21:0f:a7:99:9c:
6a:bc:e1:0d:56:24:fb:f8:71:b5:c4:b3:e8:5f:ed:6b:80:88:
14:21:6e:d5:0c:33:8e:c6:1c:54:75:c9:2d:da:b5:fa:b4:ac:
03:d3:33:76:c7:0c:27:8b:62:13:cb:1f:f3:7e:f6:d5:be:f8:
2d:04:d3:94:a5:54:d3:89:6b:cd:c5:fc:bb:8f:8b:c5:13:61:
7a:0c:c6:27:54:88:84:a6:9f:18:77:2e:a4:44:e2:ca:54:10:
30:ec:4e:f5:84:c3:95:ff:da:4b:f3:f7:c4:7d:d7:03:05:f8:
e0:1d:92:34:ec:59:61:1e:ad:fa:03:55:01:e2:e8:81:23:ee:
fb:d5:d2:cb:7b:c6:90:97:3a:e1:ce:d4:3e:50:6c:95:4c:3c:
87:47:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:35 2025 by rpki-client