Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa
File: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (raw, json)
Hash identifier: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=
Subject key identifier: C1:3E:1E:F4:0A:3C:8C:54:06:C3:22:EB:08:62:13:E2:76:63:4F:87
Certificate issuer: /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial: 019420D5FDB202F1DAC2E2CEC0758DB3E08D
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29684
IP address blocks: 91.213.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fd:b2:02:f1:da:c2:e2:ce:c0:75:8d:b3:e0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c13e1ef40a3c8c5406c322eb086213e276634f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:11:7a:24:67:3e:be:f0:d1:72:67:32:2e:
7c:af:a0:50:88:bd:84:51:c7:85:8a:c7:eb:cc:af:
29:a7:4d:90:20:b4:62:e8:a5:82:dd:11:70:35:7e:
78:55:a1:b5:b8:c6:32:84:90:c6:22:f3:53:7d:b9:
aa:73:78:b6:d8:90:92:ac:ca:5f:58:28:e4:7d:a3:
8d:a9:94:2b:0e:df:f9:cb:03:95:89:f4:7b:f6:69:
2f:b8:18:d4:48:4d:8e:67:2d:ce:63:22:b3:6f:8e:
82:53:4c:c7:1e:f3:58:c7:11:a5:18:43:8f:8b:62:
0d:ab:28:19:7f:c7:eb:14:64:7f:58:4e:5e:ad:54:
e0:47:df:dd:ae:bf:6d:60:9c:2b:6e:0a:d3:cd:26:
8c:84:f6:02:44:6d:1d:95:54:f6:0a:e4:10:cd:28:
2a:3f:bf:1a:bb:22:53:97:4a:6a:0c:54:46:be:70:
27:c2:ef:90:0f:a9:4b:00:dd:e5:95:e7:8a:30:1c:
9e:ac:a1:0b:08:8c:88:a7:24:b8:cc:3e:b3:62:fd:
63:75:90:11:c0:54:5e:4d:77:b8:c9:9e:33:1d:2e:
d1:87:c6:c4:7a:c6:4f:5e:02:55:26:9f:e6:50:18:
ea:01:35:7c:de:22:b3:cd:46:a9:b8:08:91:30:9f:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:1E:F4:0A:3C:8C:54:06:C3:22:EB:08:62:13:E2:76:63:4F:87
X509v3 Authority Key Identifier:
keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.205.0/24
Signature Algorithm: sha256WithRSAEncryption
48:20:8f:68:fe:a6:14:b0:a9:68:a8:97:11:1b:8e:7c:51:87:
6c:6f:d0:05:aa:aa:02:c1:e5:00:a3:c8:e4:eb:4b:72:09:11:
80:f4:6f:a2:c1:50:ed:54:48:86:ae:11:cf:84:55:86:70:77:
02:b7:a8:08:55:26:7d:00:ce:8a:04:37:e6:6c:cb:1a:82:3a:
5a:28:38:90:f7:d5:14:97:18:8d:bd:73:73:0f:0c:14:8e:28:
83:ed:82:58:b2:64:79:ac:eb:d0:63:40:2a:bb:c7:26:c1:3b:
56:de:cd:4e:c2:ee:24:6c:71:aa:5f:65:4a:b5:9d:84:f0:ae:
67:90:6c:55:1c:b3:55:67:68:47:6a:de:8e:0d:cf:f6:f4:0e:
f7:c4:b9:26:3c:61:ca:9f:3a:6e:74:65:00:f9:26:7d:6e:d5:
21:29:3d:49:dd:5e:dd:79:03:81:dd:0f:f6:93:97:7c:5c:22:
1a:74:e8:9f:59:99:e4:45:8b:da:f3:6e:fd:d3:a4:07:64:d8:
24:58:93:e8:bf:47:dd:e4:30:d4:90:85:9d:b5:18:5b:17:55:
ef:04:b2:11:b1:1c:dc:00:bc:8c:06:66:4e:7c:f2:56:70:22:
40:b7:91:82:31:0b:2a:11:5d:50:d5:86:04:d3:0a:d6:5f:f6:
06:79:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:25:07 2025 by rpki-client