Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/1NnPIelPhTu2KqOrRaVheTjGDtA.roa
File: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (raw, json)
Hash identifier: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=
Subject key identifier: D4:D9:CF:21:E9:4F:85:3B:B6:2A:A3:AB:45:A5:61:79:38:C6:0E:D0
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 0194266C34551DD7FC3546E6D8F1D5272273
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/1NnPIelPhTu2KqOrRaVheTjGDtA.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43397
IP address blocks: 91.194.230.0/23 maxlen: 24
2001:67c:d04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:34:55:1d:d7:fc:35:46:e6:d8:f1:d5:27:22:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4d9cf21e94f853bb62aa3ab45a5617938c60ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:d4:7d:35:59:78:7d:85:80:f6:e3:5b:0c:
03:64:24:c1:b1:96:dc:c9:23:0a:1b:f5:a5:e2:e9:
8c:f7:0c:b8:60:c6:1a:f6:2d:07:4b:42:c7:1c:a4:
44:5b:0f:cf:8f:1c:c8:71:21:9d:c5:78:ad:f4:6f:
0a:22:26:1f:f7:04:a8:26:15:bf:e9:06:70:e6:fb:
52:08:65:43:b1:68:c0:10:bd:4d:0c:55:3a:77:8a:
58:49:87:6b:73:3a:0c:c3:e0:18:d9:9d:29:cc:d0:
4e:a7:e0:9b:12:2d:47:07:f7:8f:44:5e:a0:33:0d:
b3:18:4f:26:42:04:7b:a4:30:a9:f2:9a:e6:3d:9d:
15:94:2e:4d:ad:1d:55:9c:8e:93:83:ab:1e:6a:a9:
cd:41:52:2c:25:d6:f5:68:73:78:21:bb:a5:bd:c3:
d7:3f:0b:d3:a6:cd:48:30:19:0f:b8:9d:26:43:f6:
a2:cd:7e:e0:43:7a:9e:af:5f:0e:82:de:80:af:95:
dd:3d:d4:61:70:19:07:47:53:2f:6d:01:85:69:a9:
06:d5:88:62:3b:bd:39:fc:20:43:a4:02:75:3c:8f:
26:97:d1:60:98:a1:2d:4b:18:d6:10:41:e1:7f:5e:
ad:30:5a:96:32:f5:80:f5:91:b6:4a:1f:36:44:52:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D9:CF:21:E9:4F:85:3B:B6:2A:A3:AB:45:A5:61:79:38:C6:0E:D0
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/1NnPIelPhTu2KqOrRaVheTjGDtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.230.0/23
IPv6:
2001:67c:d04::/48
Signature Algorithm: sha256WithRSAEncryption
61:cd:8d:8d:92:4f:ff:9b:2b:49:dc:d9:db:fa:43:5f:06:b7:
9a:58:43:63:e2:79:e6:7f:da:ab:8b:2b:5b:13:2f:e0:f0:e1:
0f:15:d8:80:78:f1:d5:dc:dc:e2:6d:2d:5a:42:d6:fc:85:80:
23:7f:d3:8e:73:79:db:42:63:62:d9:4e:b8:52:dc:68:07:cb:
e5:5e:86:08:cd:1f:7b:be:d4:81:a7:9d:e7:dd:95:3d:6f:35:
db:ed:d7:b8:c2:75:26:2d:20:63:8d:87:9e:d5:f8:d0:1a:6c:
b5:fe:da:c1:97:ee:84:e9:79:e9:04:70:ff:1f:61:da:5f:c8:
4e:32:8d:26:5f:35:34:41:98:ee:30:83:f8:8d:e4:e3:d8:73:
a8:74:a5:63:e0:14:eb:57:65:31:7e:1f:65:d7:bb:d6:bd:a4:
5d:4b:33:20:dd:a9:41:7f:0a:20:ff:5c:52:37:f8:d7:a8:b2:
bc:f1:54:95:9c:1f:8f:47:cc:f0:b6:d4:9f:ce:d0:68:78:a0:
cb:08:05:f7:a7:c4:65:30:a9:94:70:d7:32:ee:bf:e6:20:51:
3b:ff:54:12:b7:0a:f1:0e:da:b5:a2:97:92:c2:bb:1a:11:57:
3c:b0:c1:8e:e8:c0:db:6c:67:f1:d9:17:b1:84:87:63:49:5b:
f8:68:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:36 2025 by rpki-client