Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/kOl5tooHYMmCtstl7OngZrFymus.roa
File: kOl5tooHYMmCtstl7OngZrFymus.roa (raw, json)
Hash identifier: MIQSNm55pK0/ZWOL6VUclSGA1LTZJ7gzQ8p6imnGB8g=
Subject key identifier: 90:E9:79:B6:8A:07:60:C9:82:B6:CB:65:EC:E9:E0:66:B1:72:9A:EB
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBBDC60C14E46782820C35C8B9042
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/kOl5tooHYMmCtstl7OngZrFymus.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.200.223.0/24 maxlen: 24
91.226.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bb:dc:60:c1:4e:46:78:28:20:c3:5c:8b:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90e979b68a0760c982b6cb65ece9e066b1729aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:68:1e:85:dc:bd:16:ea:62:4b:5d:41:51:
7f:19:86:3a:25:7b:1a:7b:65:90:cd:aa:96:e3:ac:
31:da:df:18:38:92:00:d9:2e:66:9d:74:44:1e:4c:
d5:4a:67:07:cc:1e:9b:91:bd:f8:b7:9d:db:52:23:
20:3d:a8:56:40:fb:ae:6b:aa:0d:b7:f3:c2:b1:b1:
fb:f2:d8:55:24:80:15:58:a2:09:d2:89:8d:28:71:
ef:aa:1b:fa:a3:7a:23:f0:25:df:42:d0:69:7c:f5:
c3:49:b7:d4:0e:79:a3:a3:35:e0:8e:20:84:ce:93:
55:35:7d:75:ef:24:37:59:40:bf:5b:d5:26:47:91:
41:11:68:33:61:78:8b:dc:c7:d2:9b:77:11:5c:31:
b2:91:65:3f:3e:0b:fb:13:64:9a:67:db:f5:ad:89:
10:2b:20:88:e2:d5:11:11:46:00:d8:f3:44:bf:fb:
7c:ca:39:6d:55:99:4b:52:03:d9:e9:9d:98:97:79:
f3:09:6a:46:db:62:53:08:8d:1b:86:a9:f3:9a:31:
02:66:3f:3c:df:79:c2:55:a3:1a:6a:3d:5a:ae:a6:
60:38:e7:4d:fd:ef:4a:41:b5:cd:14:6a:4c:23:94:
60:9d:02:a1:b0:9d:72:24:d8:5e:36:5c:56:19:ad:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:79:B6:8A:07:60:C9:82:B6:CB:65:EC:E9:E0:66:B1:72:9A:EB
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/kOl5tooHYMmCtstl7OngZrFymus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.223.0/24
91.226.56.0/24
Signature Algorithm: sha256WithRSAEncryption
68:87:99:07:54:61:72:ac:9b:c3:9d:ae:ba:d3:44:fe:ef:25:
97:38:64:8c:dc:c0:56:53:28:de:23:ae:57:eb:b0:26:c7:5b:
bf:58:89:67:e3:45:aa:34:b0:7e:81:ca:55:9a:6b:af:53:e1:
c5:b9:c2:7d:27:d2:c6:2f:f9:44:5f:56:97:0a:c5:c5:13:3d:
bd:90:4b:04:49:20:06:6f:59:80:5f:4d:08:2f:b1:05:c0:97:
76:ac:31:09:d3:a2:6a:3b:f3:1e:6d:3d:6f:e0:01:f9:91:b8:
4d:d4:c2:e6:50:28:b5:0f:df:b7:0c:54:ca:34:3f:7c:6c:7a:
6b:3f:51:ae:05:b9:d0:56:0e:93:52:f0:06:d6:7a:0a:5a:9c:
e7:01:60:7c:c6:75:29:33:ce:69:cd:3d:e6:bf:af:41:13:bc:
91:e3:86:c8:03:46:39:7c:25:af:ef:04:96:6f:cd:42:03:ec:
8e:c0:e7:07:e5:08:b4:ff:bf:b2:5d:a7:cf:99:75:34:21:63:
ad:df:e3:19:fd:ae:d3:85:9e:11:4f:a3:b0:f2:93:0c:8f:f3:
75:6b:0c:1c:43:26:de:58:12:2f:0a:61:c9:65:35:4b:65:ac:
d3:c1:c3:d8:71:f6:10:08:54:77:46:23:3d:ee:f8:8a:37:9e:
4a:3d:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:25 2025 by rpki-client