Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/KwzLAJFh9AChcSwdy64vpYAmPMw.roa
File: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (raw, json)
Hash identifier: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=
Subject key identifier: 2B:0C:CB:00:91:61:F4:00:A1:71:2C:1D:CB:AE:2F:A5:80:26:3C:CC
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 0194221FA1FDF406C18F49CB8323059D5AAB
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/KwzLAJFh9AChcSwdy64vpYAmPMw.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47957
IP address blocks: 91.208.51.0/24 maxlen: 24
194.1.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a1:fd:f4:06:c1:8f:49:cb:83:23:05:9d:5a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b0ccb009161f400a1712c1dcbae2fa580263ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:46:17:6a:56:44:48:cc:ba:31:83:e6:f9:
cf:1f:7b:b1:91:af:d8:bd:97:ad:6f:2a:c4:33:9a:
f3:0e:ec:c7:27:d9:c3:e6:a4:77:62:b3:2a:90:be:
89:d7:ea:62:07:cc:fe:b0:63:69:87:c9:9e:74:c6:
f3:97:bd:15:aa:97:73:b7:c4:0b:b4:e3:1e:d4:ae:
26:d8:78:4c:d9:b7:41:10:26:8c:13:e2:45:ab:3e:
8c:39:6a:8e:4b:ac:49:2d:9b:d5:ec:3c:d5:89:08:
f7:b5:1b:ce:f8:d1:d4:6f:74:1d:dd:6c:3c:7b:44:
1f:db:ec:f0:33:95:4c:79:d6:5c:ac:e5:39:30:05:
f9:28:62:0a:ae:c8:13:27:ca:d3:74:a0:ca:2b:88:
8b:96:48:7a:bd:82:d0:ad:b2:3f:78:4a:0c:a0:a0:
47:92:0c:42:d8:3e:75:38:29:62:40:94:91:15:1d:
49:74:e8:ee:da:d1:e7:c9:c8:84:a8:ec:56:d6:8d:
6e:d3:d7:95:20:ef:64:c5:14:67:da:18:16:41:41:
3e:17:c3:ae:1b:8e:22:1a:e8:b0:43:8c:b7:6f:0d:
1a:15:51:68:4a:25:4c:af:76:41:2e:16:2b:e0:4e:
e6:23:af:5d:5d:86:24:20:1a:23:02:98:d1:fa:9f:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:CB:00:91:61:F4:00:A1:71:2C:1D:CB:AE:2F:A5:80:26:3C:CC
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/KwzLAJFh9AChcSwdy64vpYAmPMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.51.0/24
194.1.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1f:93:8c:2f:55:dc:22:40:73:5c:ab:8a:ad:ca:d0:3c:aa:
fd:01:03:c9:78:31:78:18:b0:c4:03:f6:7a:9f:ad:4f:cd:45:
66:e8:e8:27:b2:25:7a:25:8a:e7:aa:79:51:23:9d:ce:fc:9c:
3b:1a:e8:57:48:7d:a0:f9:2f:93:a9:ca:55:d3:69:f9:8d:c3:
3f:1c:76:9f:8e:a2:86:3c:c0:cc:a6:78:c8:ac:c7:2e:e9:63:
e1:aa:71:a0:f7:e7:ab:c9:88:76:e7:20:86:51:eb:b1:93:0f:
04:e0:8f:e6:4f:8c:8d:e4:0c:cf:a2:ea:83:7e:f6:f6:4a:8a:
08:8a:16:a1:18:fa:45:2b:42:1e:ce:c1:ac:31:bb:ed:70:c6:
55:8f:36:0f:c5:b7:7e:40:3f:2c:49:4e:9b:38:63:37:7b:99:
0a:ec:cc:b8:0c:04:8c:ef:c6:d5:09:fb:06:25:e2:fb:f8:91:
6e:dd:78:ee:a6:27:bc:2b:54:38:fd:92:5b:93:28:bb:a5:3c:
1e:a3:eb:cc:87:d8:d8:b6:2e:54:9c:b0:48:b2:04:db:50:0b:
ff:a5:01:e6:b9:c7:ed:3d:5b:c2:a6:22:b9:42:40:3a:a2:e3:
df:0e:aa:58:e5:78:74:d5:45:24:73:00:1f:35:3c:8b:ea:c4:
f7:f3:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:17 2025 by rpki-client