Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/kxpaHhhuxaN-Jg9For9SY2Nccrk.roa
File: kxpaHhhuxaN-Jg9For9SY2Nccrk.roa (raw, json)
Hash identifier: Q31rgNDFAzRPHBiMS/f4s6A4eZqCkoNUT9MdgG2F6C8=
Subject key identifier: 93:1A:5A:1E:18:6E:C5:A3:7E:26:0F:45:A2:BF:52:63:63:5C:72:B9
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 019426D9170429D026293D3986E6BC679453
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/kxpaHhhuxaN-Jg9For9SY2Nccrk.roa
Signing time: Thu 02 Jan 2025 11:49:08 +0000
ROA not before: Thu 02 Jan 2025 11:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 91.199.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:17:04:29:d0:26:29:3d:39:86:e6:bc:67:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Jan 2 11:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=931a5a1e186ec5a37e260f45a2bf5263635c72b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:2e:9f:4a:93:88:48:bf:c9:81:ef:92:26:
a3:2b:73:20:e2:04:70:d9:39:1d:9a:13:7c:a0:58:
f5:72:f1:ec:51:32:97:5c:db:4a:74:72:5a:f5:b2:
45:c1:c9:4d:82:e0:97:f2:dc:73:9a:23:a4:e1:b0:
f2:c3:14:34:16:91:14:ea:60:f9:a6:39:8e:e6:20:
e8:e5:17:6d:99:77:27:e0:7d:c3:07:2f:2e:75:51:
62:03:87:a6:05:28:3a:c0:ee:45:a7:ff:0f:33:fb:
d3:e1:57:63:f2:5e:6c:e7:70:e0:4d:cb:1c:fc:bd:
63:f4:24:9f:a3:64:05:82:b9:ae:66:5c:7c:f7:b9:
b9:5c:a9:b3:f6:71:ea:72:01:ca:81:dc:de:1c:ca:
3d:1e:0a:59:46:64:14:82:6d:86:1a:be:a3:fd:c6:
e3:73:d9:93:5d:2f:3b:05:2f:83:4d:73:c9:6a:9d:
1b:9a:df:a3:2e:0e:a7:7d:35:6e:1d:43:98:8a:6a:
ee:1e:d8:62:4c:78:88:2b:c6:f1:a8:66:40:30:b4:
c0:31:3c:97:4e:1d:6a:5a:c9:72:47:28:62:cd:03:
55:85:e1:3b:85:38:18:be:5a:8a:17:89:39:56:8d:
2a:9d:0c:8a:d7:ca:6d:e9:ca:41:4c:f1:78:87:25:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1A:5A:1E:18:6E:C5:A3:7E:26:0F:45:A2:BF:52:63:63:5C:72:B9
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/kxpaHhhuxaN-Jg9For9SY2Nccrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.217.0/24
Signature Algorithm: sha256WithRSAEncryption
03:05:ae:ed:44:07:eb:69:ee:c8:ed:7a:e4:48:5a:2a:0c:69:
a0:3e:fb:a3:40:e9:53:84:6e:ad:60:95:e9:0f:05:4f:11:db:
18:47:68:51:14:7e:c7:e2:d7:e3:32:c4:ca:91:59:d8:55:92:
41:4a:1e:06:a7:29:fd:de:0d:18:65:03:3b:79:ea:5b:00:44:
c4:d3:de:36:63:12:97:e8:cc:d5:da:e9:eb:9d:13:16:a4:af:
7e:40:ef:a4:c9:7f:71:8f:67:c5:7b:16:87:9a:1c:60:87:a3:
c1:ca:43:bd:16:58:93:5e:95:3b:54:44:2d:d7:e1:4d:1f:cd:
91:f5:a9:18:2d:d1:c7:a2:c1:73:79:e5:c7:be:4b:27:02:a7:
e3:94:b8:19:3e:86:1d:e2:b4:ea:d1:62:ef:9c:67:a3:2e:ba:
1a:03:08:90:db:1e:ce:b0:1e:6f:1a:09:70:38:6c:59:65:f2:
aa:db:7d:c2:9d:a7:de:43:2c:41:bd:44:6c:63:2e:a5:7d:56:
e7:ed:df:d2:4a:34:37:a5:ac:d7:84:66:0e:8b:47:00:53:e5:
00:18:2b:3a:06:a9:8c:d0:a4:8c:fb:34:3d:3d:ae:aa:2b:f5:
5c:78:48:d3:0b:58:e0:d3:f3:c6:0e:f3:0e:12:59:3e:11:74:
fb:7c:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:35 2025 by rpki-client