Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/eXKi70pVOkSciah0yxPymcceP7o.roa
File: eXKi70pVOkSciah0yxPymcceP7o.roa (raw, json)
Hash identifier: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=
Subject key identifier: 79:72:A2:EF:4A:55:3A:44:9C:89:A8:74:CB:13:F2:99:C7:1E:3F:BA
Certificate issuer: /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial: 019424B35CAACF7DB73739A3A19AB95B4604
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/eXKi70pVOkSciah0yxPymcceP7o.roa
Signing time: Thu 02 Jan 2025 01:48:41 +0000
ROA not before: Thu 02 Jan 2025 01:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207439
IP address blocks: 91.234.47.0/24 maxlen: 24
2001:67c:29bc::/48 maxlen: 48
2a0c:800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:5c:aa:cf:7d:b7:37:39:a3:a1:9a:b9:5b:46:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Validity
Not Before: Jan 2 01:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7972a2ef4a553a449c89a874cb13f299c71e3fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:43:fe:90:c9:54:06:fb:d2:fd:bd:b8:b6:
64:ed:f3:9f:70:1d:eb:7b:b4:20:81:17:75:ab:33:
a2:77:68:6b:ef:fd:4b:a2:8c:6e:b8:c9:15:12:c7:
ca:87:cf:9d:74:ac:c6:8e:d7:0b:36:44:6d:13:05:
a7:d2:90:fc:e7:8e:80:39:f4:87:a2:5c:37:8d:13:
7f:80:c5:eb:0d:ef:0e:62:95:d5:f5:e2:8b:59:d1:
ec:4a:f6:0c:76:e8:1c:8a:2c:9f:09:81:12:02:f6:
58:af:2b:06:1a:72:17:60:0a:37:b8:50:58:7c:00:
23:48:2d:06:78:4b:8d:18:cd:7a:b7:8b:f4:8e:00:
e0:58:74:d8:95:96:6f:ef:b2:bd:d8:a0:30:22:18:
30:f7:a5:a3:b4:ab:58:fa:f3:03:4a:de:1d:b7:24:
4b:b1:3e:7d:05:7c:89:3a:2a:c3:ff:34:df:5e:65:
4c:89:84:a9:72:a7:12:0a:5f:92:86:1f:59:0c:b6:
6a:5b:26:09:c7:96:43:57:eb:e0:d6:58:dd:7e:1a:
ae:01:3c:55:5e:3f:26:45:0c:61:55:55:fa:f2:1b:
34:32:7a:e1:90:30:60:d6:49:8a:76:09:a0:b4:5d:
2e:ac:52:d7:47:ca:9a:cc:1d:50:e4:9b:e1:fd:77:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:A2:EF:4A:55:3A:44:9C:89:A8:74:CB:13:F2:99:C7:1E:3F:BA
X509v3 Authority Key Identifier:
keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/eXKi70pVOkSciah0yxPymcceP7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.47.0/24
IPv6:
2001:67c:29bc::/48
2a0c:800::/29
Signature Algorithm: sha256WithRSAEncryption
39:56:00:e9:d6:62:78:64:ff:2f:f3:2f:f0:a4:03:de:e8:34:
65:6c:33:d6:ab:6b:12:1c:2e:84:da:a5:75:1e:4b:98:57:20:
4d:d4:10:9a:a6:ae:1e:71:79:1d:18:2f:c3:06:ca:56:0d:a7:
79:2f:b3:d4:15:44:cd:50:a6:3f:10:0e:59:21:f5:cf:a5:d1:
6a:e8:18:27:6e:14:6b:c2:61:7c:29:ea:f8:d8:e5:64:99:3c:
17:f5:0d:ce:49:7b:79:cc:b9:f8:b0:e4:ee:6e:a2:87:50:69:
36:1c:d3:f0:6a:ae:a0:1a:28:28:04:6b:5f:b2:8f:17:11:11:
cf:b7:be:66:c0:2b:48:fb:2d:4d:e6:1b:08:94:82:6d:45:53:
d8:4d:09:ee:ad:f5:69:10:50:d6:46:d3:b1:ef:a7:78:f6:1b:
15:7d:72:d1:c8:fc:f7:ef:34:a5:50:81:a3:c4:7c:71:e0:42:
7b:08:d5:01:9e:5a:9e:87:c8:97:34:a4:65:93:c5:2c:92:38:
ac:9c:98:32:e2:48:b3:26:33:0b:fb:14:59:8e:6c:57:46:20:
d6:73:0a:1a:36:d1:d2:86:5e:e1:49:e6:b9:67:ae:b6:c8:21:
87:87:63:8c:56:00:c0:19:5e:f7:f0:61:de:3f:02:cd:06:23:
e2:01:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:42:29 2025 by rpki-client