Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8Wf3fX_wbzR51JDgka2w7Kzde-M.roa
File: 8Wf3fX_wbzR51JDgka2w7Kzde-M.roa (raw, json)
Hash identifier: myUj2ydYGEFiHi56GZDVoGZHpMa+MbInIi2Ql7IpOSM=
Subject key identifier: F1:67:F7:7D:7F:F0:6F:34:79:D4:90:E0:91:AD:B0:EC:AC:DD:7B:E3
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC201A13F744442FC41D3D9718CC7E
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8Wf3fX_wbzR51JDgka2w7Kzde-M.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207246
IP address blocks: 91.242.76.0/23 maxlen: 24
91.242.98.0/24 maxlen: 24
91.242.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:20:1a:13:f7:44:44:2f:c4:1d:3d:97:18:cc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f167f77d7ff06f3479d490e091adb0ecacdd7be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:ea:c0:18:7e:56:bf:5d:42:20:ec:e7:66:
b5:ef:e9:cc:57:7f:81:19:6d:f6:d5:49:1f:3a:f9:
dd:6c:75:27:ca:14:38:09:dd:75:08:83:42:6e:36:
9d:b2:54:22:cc:87:a0:8d:43:36:29:45:0b:d9:cb:
8b:63:26:5f:a5:cb:fe:d0:1c:aa:a1:a3:e8:9a:29:
f1:22:74:5c:d2:94:b8:82:d5:94:92:26:c2:4b:4c:
dc:d0:2e:60:61:58:2b:3c:da:97:c4:c3:4d:8a:a7:
51:06:37:e9:17:7c:9f:87:71:6d:96:ce:66:80:a9:
19:6e:be:ec:c0:bf:63:bb:31:3b:e7:32:d4:f3:17:
14:f1:82:c0:9e:84:87:c3:26:5b:fe:e1:ca:6a:1d:
63:69:57:56:f2:df:28:cd:92:17:fe:07:ef:5f:f6:
54:97:9c:e8:00:d1:22:2a:51:a5:62:7d:c7:c6:a1:
9c:3b:78:f3:69:68:9c:17:99:c7:4b:fa:2a:55:96:
68:8b:de:ec:11:b2:d5:20:80:33:f2:dc:f8:be:45:
e6:87:c2:ff:cd:7b:54:a8:85:c0:48:3d:cf:79:eb:
97:b5:82:f7:74:8e:51:86:68:7c:75:6b:ff:6b:82:
dc:ce:4c:ad:36:1f:a2:7d:d3:c5:f9:4b:e9:e7:99:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:F7:7D:7F:F0:6F:34:79:D4:90:E0:91:AD:B0:EC:AC:DD:7B:E3
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8Wf3fX_wbzR51JDgka2w7Kzde-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.76.0/23
91.242.98.0/24
91.242.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cc:cb:f4:c4:e5:19:a8:0d:1a:b2:8a:8f:30:99:32:ca:db:
cb:3c:e8:6d:dd:ad:49:f2:54:cd:aa:48:2e:45:fa:00:bf:e7:
f1:d3:72:d0:f3:bc:43:e9:88:6d:7d:6c:32:47:c7:98:6b:ab:
36:5d:c0:d5:32:d1:e9:46:02:b1:da:ee:84:9c:5a:e9:76:99:
3d:e4:ab:17:e4:2a:e9:3f:06:d6:20:a6:4a:a6:cc:11:48:38:
46:c4:6f:32:fd:ae:61:fa:f9:b4:bc:ae:35:2e:be:c3:60:4f:
cf:4f:20:d2:8b:91:72:9d:d4:f4:b4:c6:ff:ff:14:61:6b:bf:
d3:f3:50:cc:dd:f5:d6:da:09:fc:c0:24:f2:5a:0b:97:ee:80:
c6:5e:53:49:38:f5:41:63:23:38:c4:76:4e:cc:08:21:9d:e5:
3f:f1:b0:04:5f:81:ef:2f:b2:59:1d:b9:17:b6:bc:ef:e7:c7:
fd:5f:57:07:02:4b:12:c0:85:6e:a4:87:7c:9d:f2:1f:79:b4:
92:d3:7a:d2:4b:17:38:28:6d:07:55:62:4e:4d:3f:a4:d2:7b:
0a:5b:93:a6:0b:75:62:66:7e:e6:c9:cb:7e:ef:28:5e:93:4b:
ba:bf:9d:da:e8:70:5d:51:85:57:e4:fa:5b:6f:c8:94:ee:2a:
de:6c:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:21 2025 by rpki-client