Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/AX86DsLSoXFRNkCv2pCL1_EPY5g.roa
File: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (raw, json)
Hash identifier: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=
Subject key identifier: 01:7F:3A:0E:C2:D2:A1:71:51:36:40:AF:DA:90:8B:D7:F1:0F:63:98
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01941F8C24DB5483854FC73448DD5E591E4A
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/AX86DsLSoXFRNkCv2pCL1_EPY5g.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202613
IP address blocks: 91.230.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:24:db:54:83:85:4f:c7:34:48:dd:5e:59:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=017f3a0ec2d2a171513640afda908bd7f10f6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:8a:fd:f8:cb:19:ef:f9:e6:72:8e:e6:9c:
c5:2b:e0:80:0f:b0:19:e5:21:09:36:4e:51:68:8a:
71:96:e3:e2:a0:d1:79:13:ff:d1:f4:d2:84:07:23:
5a:f9:41:f5:9b:0a:de:1c:ec:9f:69:30:d7:7e:b7:
06:31:b7:de:cb:42:93:99:41:f5:38:76:58:ad:8a:
87:e8:ec:7e:36:96:ca:89:31:dd:86:73:39:0a:95:
4d:97:4b:dc:b7:c3:20:07:93:f0:82:fe:37:a7:e5:
76:a8:bf:24:bb:47:a3:00:55:6f:bb:d9:3a:de:64:
db:16:73:30:65:f2:6d:1c:4e:d8:bf:be:ba:e6:93:
96:e7:d7:b7:18:f0:df:2a:10:03:cd:f3:98:ad:c6:
d3:e2:e0:0a:9b:32:6b:d3:5a:61:26:8d:49:3b:bf:
74:eb:e5:a3:60:45:e4:98:ed:dc:8e:16:d9:bf:70:
58:7c:a6:f4:22:7f:2f:08:6a:a5:dc:24:54:89:3a:
25:bc:37:f2:3e:94:5f:e8:f6:2b:46:59:98:ba:75:
a2:9c:d0:9c:d3:a2:68:0e:46:72:f2:f7:09:8a:97:
d1:c2:05:9d:b0:56:65:51:bd:c9:67:fd:30:97:22:
9a:8f:8f:ce:29:29:d8:70:32:e4:c4:58:ab:4c:f8:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7F:3A:0E:C2:D2:A1:71:51:36:40:AF:DA:90:8B:D7:F1:0F:63:98
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/AX86DsLSoXFRNkCv2pCL1_EPY5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
70:59:5a:10:6e:f7:7e:34:9c:1b:a9:e9:79:21:77:0f:f9:1e:
72:7b:30:d1:eb:c5:0d:c7:ac:5d:8e:2e:0c:24:15:90:20:86:
d0:ee:f7:ec:04:22:11:09:ae:79:f0:72:0f:ab:3b:e0:88:48:
8b:cd:18:6e:c8:88:ed:1d:ae:b2:62:0b:b8:5f:9d:04:29:9d:
41:0f:64:bd:ac:b4:7c:4f:9f:cb:41:f4:fb:ee:f6:06:bc:42:
39:4f:7e:4e:6a:44:ac:55:29:76:74:6b:0b:31:eb:bc:ba:35:
30:eb:c5:eb:09:71:14:e6:f1:eb:92:be:f0:63:8b:98:d7:4c:
ae:57:9a:aa:d6:54:23:36:7e:9c:8d:4a:86:7e:52:7c:3f:f3:
8e:02:bb:fc:6c:6d:8c:a8:fc:11:7f:06:1d:7a:0c:72:bf:63:
d2:1b:87:e8:91:3f:ab:87:f6:dd:13:d1:d3:0a:79:0a:27:64:
4a:66:82:80:85:d0:c7:1c:1d:35:ab:77:45:0c:1f:39:a9:bd:
4e:a3:57:48:bc:9e:bb:0a:b9:83:27:07:2e:2d:47:0c:35:29:
c0:a0:ed:e0:d3:9d:46:67:e3:f8:30:42:00:2d:58:5c:86:8b:
8d:0e:12:90:05:38:27:61:c4:6b:1a:1e:d9:06:52:06:8d:d9:
ac:58:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:03:05 2025 by rpki-client