Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/S10UUzDOnmeeWWxvUaONEcXQAi8.roa
File: S10UUzDOnmeeWWxvUaONEcXQAi8.roa (raw, json)
Hash identifier: ujWfJ7GyqiNWgO9jJtSvnGZuJ7465paQyIDlxKBrdko=
Subject key identifier: 4B:5D:14:53:30:CE:9E:67:9E:59:6C:6F:51:A3:8D:11:C5:D0:02:2F
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0195DCE4FFD98F7300CBA2EAC0DE8B32BFAC
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/S10UUzDOnmeeWWxvUaONEcXQAi8.roa
Signing time: Fri 28 Mar 2025 13:15:49 +0000
ROA not before: Fri 28 Mar 2025 13:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 91.109.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:e4:ff:d9:8f:73:00:cb:a2:ea:c0:de:8b:32:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Mar 28 13:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b5d145330ce9e679e596c6f51a38d11c5d0022f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:0f:ae:9d:3d:b5:1a:19:de:71:8b:15:23:
c6:19:70:78:68:5f:ef:7d:c1:34:eb:f9:c6:ca:be:
0f:4f:7a:22:9e:0b:6f:a4:60:84:88:b6:fe:d5:2d:
96:f2:ab:51:2e:89:f9:10:01:b1:74:9f:d8:d2:f9:
ed:be:00:27:ab:29:83:c1:09:92:15:3f:cb:b8:64:
5a:2c:38:1f:d7:73:2f:72:54:6d:71:e1:6d:bc:70:
f5:27:e8:4d:63:f4:fc:12:15:6a:71:40:07:0c:34:
91:4b:9a:bd:12:ce:fa:e7:95:fb:99:26:cc:34:73:
40:31:b2:6f:f3:5a:0c:9a:3d:87:b6:62:f2:95:d7:
48:aa:de:9d:36:25:d9:6d:3e:a6:a7:2a:5d:f3:a0:
8c:b6:c9:83:40:21:e4:67:a9:7e:63:1a:bf:fa:81:
c0:a8:7c:9c:11:67:4d:bf:ef:7b:f4:6f:d6:7d:48:
b7:c4:3e:90:a8:18:d2:8e:cc:10:68:d6:05:82:cb:
92:c1:4f:85:65:d6:a1:1c:c4:1d:d6:30:89:f4:dd:
98:07:21:97:18:1b:1c:46:2a:0d:50:20:d1:84:e1:
f2:b5:bb:3c:fb:9a:6c:ec:f4:47:a0:df:08:a7:fb:
d5:b4:31:00:0c:27:f9:e5:bd:70:5d:39:51:4b:ed:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5D:14:53:30:CE:9E:67:9E:59:6C:6F:51:A3:8D:11:C5:D0:02:2F
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/S10UUzDOnmeeWWxvUaONEcXQAi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.45.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2f:e6:c6:1e:e5:ba:0d:0a:4c:c1:55:1c:63:57:ba:7a:ab:
9b:23:a6:2d:97:d6:ad:f8:11:dc:dd:45:96:31:5d:44:70:53:
29:ff:ba:9d:e3:d7:82:f3:03:66:a4:61:2c:3c:9e:4d:c3:0a:
8f:3f:ee:5e:c6:d4:49:87:93:a0:70:7b:d0:bd:95:b0:70:54:
69:56:c0:09:55:54:51:b9:cd:97:66:11:fc:ba:92:d4:5b:c8:
e5:5f:a7:b3:dd:82:b4:f8:77:c1:8d:23:da:c2:12:46:57:18:
e7:8c:cc:54:b7:9e:02:ca:b0:02:2f:ca:0e:25:65:40:7b:54:
25:71:ed:61:1d:24:da:f3:7f:ec:15:53:52:86:e9:5e:69:1c:
6c:2d:79:ce:f5:da:3a:4e:61:04:77:1e:47:48:ea:5e:1e:30:
72:8e:92:77:d9:75:ac:c9:1c:87:60:42:35:5c:4e:6c:cd:18:
6a:76:e5:37:00:35:e1:30:6b:7f:2c:e5:0c:c4:14:b5:b8:33:
27:4a:ef:73:d1:a3:07:b2:c2:ae:c4:d3:42:b1:9d:46:17:21:
b8:ec:74:fc:39:5d:43:1e:f6:d8:ee:c7:51:4b:17:fc:7f:5b:
75:8d:c4:d5:08:e9:28:ae:a6:a3:56:b4:62:b3:f3:23:24:31:
fa:d8:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:26 2025 by rpki-client