Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/DRLbJL7meHAnOmMNiiVi2VhOOMc.roa
File: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (raw, json)
Hash identifier: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=
Subject key identifier: 0D:12:DB:24:BE:E6:78:70:27:3A:63:0D:8A:25:62:D9:58:4E:38:C7
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA004CFCF9A325277DCC8CAE1210D8
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/DRLbJL7meHAnOmMNiiVi2VhOOMc.roa
Signing time: Thu 02 Jan 2025 11:50:08 +0000
ROA not before: Thu 02 Jan 2025 11:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48894
IP address blocks: 91.132.94.0/24 maxlen: 24
2a03:f80:386::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:00:4c:fc:f9:a3:25:27:7d:cc:8c:ae:12:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d12db24bee67870273a630d8a2562d9584e38c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:47:3b:89:c7:74:af:89:c8:25:d2:f1:39:
e9:2a:1e:c8:cb:35:00:b0:20:46:aa:37:af:ac:48:
a0:ac:0b:f8:b2:70:9c:ba:bc:f6:e9:5c:e5:81:d5:
d1:00:a9:a0:a5:cb:cd:75:33:cd:00:56:f9:24:34:
bd:ef:d1:56:aa:0b:19:bf:70:5f:cc:df:72:a5:20:
d0:18:36:c6:46:b7:6c:2d:8b:89:01:73:76:67:32:
b7:13:79:b0:b0:99:d9:df:6c:7f:50:9f:9a:b7:8a:
4a:2f:b1:c5:7d:f9:dc:69:d6:79:85:cd:2d:56:68:
8d:ed:1b:20:aa:00:d8:2d:de:c1:8f:86:d7:52:bc:
d1:5b:48:71:57:06:84:45:88:62:d2:ad:75:77:da:
83:60:59:16:7e:5a:2f:fb:26:a3:15:99:93:53:e6:
ca:2c:65:df:2b:c5:87:58:b4:41:0d:81:23:dc:62:
bb:3a:43:f3:e0:4c:ac:3d:eb:90:1f:71:f7:af:85:
e8:aa:1a:64:19:8a:84:22:77:4f:2c:1b:8d:e7:5e:
e0:1c:f2:75:62:6a:a0:ec:5a:f9:66:e4:89:68:e4:
6c:29:0a:5d:3f:a0:b0:cb:d5:f9:c6:60:d4:c2:0c:
f8:f8:90:46:8b:7e:e4:fc:b3:a8:eb:26:40:15:40:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:DB:24:BE:E6:78:70:27:3A:63:0D:8A:25:62:D9:58:4E:38:C7
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/DRLbJL7meHAnOmMNiiVi2VhOOMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.94.0/24
IPv6:
2a03:f80:386::/48
Signature Algorithm: sha256WithRSAEncryption
2c:93:7c:44:82:af:ae:c4:5a:c8:1b:45:dd:cc:29:99:d3:c2:
da:db:cb:f6:49:30:7a:2a:d9:85:07:25:2b:24:ea:48:af:73:
62:89:e5:1c:d7:32:b6:e0:69:8e:f1:a5:61:03:bc:6e:ef:43:
b0:06:75:07:54:17:49:2f:d6:e8:f1:5b:52:d9:67:f4:f5:fb:
be:9e:17:19:76:0b:d0:8f:35:8a:87:60:c0:c3:d7:89:4e:6e:
aa:31:46:df:20:9f:bc:de:f3:54:a0:bd:d0:82:51:50:5f:be:
5f:10:3a:73:b7:77:a7:6d:f0:c9:58:4a:a5:47:1c:ad:83:1e:
31:af:7a:e3:6a:bf:d5:26:d5:84:41:c4:b5:f9:fc:62:47:05:
6a:a4:ad:d1:de:17:a1:42:a1:17:1d:26:f7:e0:bf:07:e6:3c:
9e:bd:ba:1e:ae:27:09:91:b7:68:51:19:3b:fd:70:3d:22:2f:
ce:b9:a0:78:20:b5:5b:57:f8:38:11:82:c9:fa:8e:e4:13:94:
cc:d4:90:07:47:c1:99:0f:b3:72:b4:d9:a5:65:bb:8f:2b:0c:
0a:b8:4a:31:c4:59:90:d7:88:1a:be:ba:5e:0e:e5:1b:68:0c:
6c:76:26:9b:cb:90:a0:37:3e:2f:6f:56:a0:cf:51:97:8c:be:
fd:46:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:36 2025 by rpki-client