Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nuZgvRVO5iKFZNYtvJQbgPnw9bI.roa
File: nuZgvRVO5iKFZNYtvJQbgPnw9bI.roa (raw, json)
Hash identifier: faqu0OIp4O2Fr7plgG8q81cb+qD5EvHU6IUqBvZdbVM=
Subject key identifier: 9E:E6:60:BD:15:4E:E6:22:85:64:D6:2D:BC:94:1B:80:F9:F0:F5:B2
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B599FF1FBF5B53DB436B5A06116312
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nuZgvRVO5iKFZNYtvJQbgPnw9bI.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 91.243.41.0/24 maxlen: 24
91.243.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:99:ff:1f:bf:5b:53:db:43:6b:5a:06:11:63:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ee660bd154ee6228564d62dbc941b80f9f0f5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:45:29:e7:01:33:74:ca:2f:7b:8a:c1:64:
86:74:82:8e:1d:dd:65:b5:2a:4c:97:a5:90:65:e8:
f7:15:ec:4f:f9:10:02:85:f9:98:13:fa:36:cc:e8:
1c:fd:00:28:f8:ee:f0:31:b7:2e:38:84:66:db:5e:
41:fc:2c:59:e1:70:97:b5:68:36:36:d4:2c:bd:c5:
5f:ab:62:56:56:dd:b7:ce:97:85:f5:16:92:c4:34:
9e:56:1f:11:4f:fc:53:61:21:a0:6e:8a:af:0d:2e:
4d:8e:6c:34:54:7e:fa:72:c8:fc:97:dd:79:47:37:
4f:22:4c:20:8b:21:02:a4:31:0b:37:ea:d8:46:50:
fc:21:65:ca:81:17:e4:1e:89:98:eb:4a:1a:16:24:
6b:79:f9:fa:1b:5e:96:52:c4:a6:6d:00:97:91:c0:
cc:07:ed:b6:b7:0f:91:c9:ff:26:a4:f7:36:2b:e7:
cf:6c:08:e3:25:49:fa:12:4f:e2:86:b7:18:a2:53:
4e:d5:40:64:45:cb:ec:7a:f2:38:2e:cb:ac:58:f0:
27:be:a7:d6:f1:e8:ea:c8:7c:fa:e8:59:cb:d7:7b:
72:95:10:6c:ec:26:b5:95:da:30:a8:23:50:94:f2:
4d:c7:7e:c1:78:78:18:4b:12:c9:b8:4c:ad:5a:5d:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E6:60:BD:15:4E:E6:22:85:64:D6:2D:BC:94:1B:80:F9:F0:F5:B2
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nuZgvRVO5iKFZNYtvJQbgPnw9bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.41.0-91.243.42.255
Signature Algorithm: sha256WithRSAEncryption
42:3a:c2:dc:09:d3:b3:5c:85:02:9e:c2:f6:93:bc:d5:80:fc:
f3:ed:9d:ab:37:36:b6:b6:76:3b:36:21:b9:dd:b8:ab:80:bb:
aa:ba:f7:67:2c:db:39:fe:7c:30:a7:87:3e:da:48:f4:3c:3b:
b9:48:c5:0d:29:46:a7:2f:c3:f4:ff:43:49:e7:95:4d:ec:c6:
99:8b:7d:16:5b:c7:cb:99:4a:7c:fe:45:b6:2d:50:2b:a6:09:
d1:45:1b:7f:2a:72:df:7e:a7:a8:62:4c:d4:ee:27:e4:b1:c7:
18:f2:55:4a:df:2e:de:43:5e:52:47:cc:a0:29:7e:15:58:19:
2d:4a:d7:1e:de:e9:71:2f:8b:aa:7a:83:b4:84:57:2d:6d:5b:
86:73:d2:1e:af:1f:55:ec:2b:e4:65:2b:66:d3:0d:27:0a:fd:
cc:fe:02:d3:6d:e3:60:0f:ed:4c:10:29:29:48:34:6d:84:2e:
a7:4d:c1:b2:90:67:8f:a3:0b:73:86:f1:8d:98:3f:c9:a6:c1:
82:7e:27:aa:60:1d:58:8c:d6:62:9d:b7:24:5d:48:fd:57:4c:
5b:51:f3:da:97:b0:18:c3:b8:ae:e3:8b:b0:cb:89:28:86:5f:
89:24:8e:78:e3:73:bb:ef:68:d9:b7:f6:ff:08:a2:27:83:6e:
28:5b:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:53 2025 by rpki-client