Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/kxbMV2SMh7dc23vBzW031omIs7Y.roa
File: kxbMV2SMh7dc23vBzW031omIs7Y.roa (raw, json)
Hash identifier: 2RUWy0fzMJHJuSCYqz6uVOQ8Ya6aS+gLwwmJs8cWW7I=
Subject key identifier: 93:16:CC:57:64:8C:87:B7:5C:DB:7B:C1:CD:6D:37:D6:89:88:B3:B6
Certificate issuer: /CN=9caf9a0d78a6811cd1686deb117788af866c8091
Certificate serial: 01958B67C9EC84EF05B21EB7FF501F249C1D
Authority key identifier: 9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/kxbMV2SMh7dc23vBzW031omIs7Y.roa
Signing time: Wed 12 Mar 2025 17:29:49 +0000
ROA not before: Wed 12 Mar 2025 17:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 91.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:67:c9:ec:84:ef:05:b2:1e:b7:ff:50:1f:24:9c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9caf9a0d78a6811cd1686deb117788af866c8091
Validity
Not Before: Mar 12 17:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9316cc57648c87b75cdb7bc1cd6d37d68988b3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d6:b8:28:45:70:37:98:4c:c4:53:d5:b3:8f:
5e:22:49:94:2c:70:11:c4:b9:e3:9f:a2:91:5c:94:
84:e8:bb:88:45:17:8d:35:9a:37:0b:ac:c0:af:6f:
0a:04:88:13:1e:f8:20:13:7d:8d:05:e1:52:d0:1f:
36:92:e8:71:e5:91:31:8a:57:97:38:7c:17:af:e2:
15:86:0c:0c:86:4b:54:e0:e0:13:ad:bd:b4:22:5a:
b6:73:a6:2a:3b:41:fc:c2:9d:17:3c:a0:7e:08:1a:
0d:13:35:79:64:74:b5:78:ff:17:df:9c:83:fd:a1:
e4:36:6b:3a:37:6d:fb:c9:d9:e5:3e:e7:dd:63:ff:
0d:7d:f5:b7:1a:b5:c5:9c:d1:bf:47:f2:4a:ec:67:
55:95:64:9b:cf:93:18:2a:76:82:22:56:15:99:75:
93:2c:13:56:90:0f:c9:db:d5:11:99:b0:28:c2:a6:
fa:20:08:1b:85:f0:db:fe:6c:49:63:80:c2:c6:50:
f3:05:fd:7d:ad:72:5d:3f:5e:1c:ed:e5:80:75:c7:
4b:41:92:e5:40:08:c5:bf:a5:55:5f:34:42:d8:79:
3c:7e:ed:75:9c:d2:00:bc:6d:f1:d9:21:e6:dc:58:
af:e6:44:48:da:f3:77:bc:a2:58:dd:fb:26:3e:c6:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:CC:57:64:8C:87:B7:5C:DB:7B:C1:CD:6D:37:D6:89:88:B3:B6
X509v3 Authority Key Identifier:
keyid:9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/kxbMV2SMh7dc23vBzW031omIs7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b6:30:12:a1:e1:38:ee:bc:68:cb:93:12:4d:d0:18:fb:41:
1a:2d:7d:b0:d1:86:b6:a2:9b:ce:d9:92:f8:07:fe:d1:1d:ef:
ba:e2:f4:50:2b:2e:9e:91:5f:c1:48:23:a5:84:f0:92:4f:83:
f3:bd:11:d5:60:16:e5:b3:94:c9:49:10:cb:d3:0d:9c:df:cf:
06:7b:8d:f9:6a:ca:74:56:38:34:66:b7:50:05:cf:16:70:b3:
6b:c3:ea:d1:5a:57:34:19:53:8e:b0:e0:06:1a:ff:ab:d5:00:
c7:6e:71:5c:7e:83:c0:22:d3:30:7e:08:c0:a7:f8:1b:b8:44:
77:fd:e1:55:93:55:19:63:fa:2d:5c:44:87:9b:cc:6b:7d:66:
54:44:17:a4:f2:9e:b5:47:f7:5d:ea:40:28:22:11:de:30:21:
30:e8:58:31:9a:68:3f:a0:0f:51:57:44:99:a5:03:18:0d:91:
eb:b7:aa:3b:86:7e:be:b2:ef:05:c8:b3:cd:5b:ca:63:89:6f:
8e:57:ab:54:40:f6:8a:d2:34:77:cb:bd:ef:32:2e:92:35:0f:
60:b5:42:4f:fa:3f:d5:c4:86:9a:c5:3d:89:5b:88:eb:a8:eb:
fb:c6:f3:be:26:2d:f9:e2:fc:ef:8d:de:ab:87:20:f5:e7:6d:
bf:be:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:45 2025 by rpki-client