Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/9QyN-hpv3AWJTkH4wnnhS1IYs-8.roa
File: 9QyN-hpv3AWJTkH4wnnhS1IYs-8.roa (raw, json)
Hash identifier: 2wDlzVxaGTzhYKyLdrsXtAui++zgkFvv6FvoJ/etGZQ=
Subject key identifier: F5:0C:8D:FA:1A:6F:DC:05:89:4E:41:F8:C2:79:E1:4B:52:18:B3:EF
Certificate issuer: /CN=f9b10878ce301a26c7f841723ebe973dd5a91fa9
Certificate serial: 018CC2DAFBC198C87A14DC9C723D41A2B948
Authority key identifier: F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/9QyN-hpv3AWJTkH4wnnhS1IYs-8.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58281
IP address blocks: 91.240.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fb:c1:98:c8:7a:14:dc:9c:72:3d:41:a2:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b10878ce301a26c7f841723ebe973dd5a91fa9
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f50c8dfa1a6fdc05894e41f8c279e14b5218b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:dc:3d:46:7d:25:e8:f2:fe:10:87:b2:9c:
56:cb:63:16:1f:d6:4a:24:d7:42:6a:73:e2:5e:d4:
ec:79:c6:01:9f:2d:b0:24:87:26:cb:d2:4b:cb:9a:
e0:1a:5f:f3:fe:d4:a9:6d:2d:af:27:67:f4:5a:c7:
17:1f:c2:e6:ba:f7:f6:0d:cb:18:21:89:be:3f:d2:
7f:54:b1:14:06:94:52:31:cc:ed:9f:ea:bd:84:ca:
d3:51:40:1d:76:93:b7:2a:c7:9f:d1:f2:4d:84:5b:
61:a8:51:67:b3:3b:0a:86:d4:04:63:96:37:1c:3a:
01:1f:a3:14:ff:8f:1c:75:12:3e:b0:90:2d:ec:cc:
30:dc:2f:8d:68:11:2e:b1:9d:27:cb:48:4a:9a:29:
de:ef:fe:3e:83:ef:af:37:ac:bf:b7:a8:80:46:7c:
5e:3a:6f:a1:82:a7:f4:68:2d:49:60:8d:65:51:00:
32:b6:a4:36:84:d6:2b:5b:fe:f2:59:35:5a:64:2b:
26:0e:b6:58:b9:58:2a:a3:07:bb:26:db:d5:12:34:
ba:a1:6f:37:da:00:12:e9:a2:ff:c6:ce:0c:80:d7:
52:15:e3:9f:df:4e:a3:97:16:cf:71:37:ac:67:99:
e1:a4:9f:30:4d:f1:c8:c8:18:62:f4:08:0e:7e:50:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:8D:FA:1A:6F:DC:05:89:4E:41:F8:C2:79:E1:4B:52:18:B3:EF
X509v3 Authority Key Identifier:
keyid:F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/9QyN-hpv3AWJTkH4wnnhS1IYs-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1-bEIeM4wGibH-EFyPr6XPdWpH6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.69.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1c:b6:7d:f8:e8:24:3f:af:02:61:58:6d:0e:d8:87:96:ee:
d7:1c:39:28:9c:6d:8e:86:fb:30:f1:ae:0e:6b:1e:b9:97:04:
d2:99:68:96:38:24:ce:61:ed:9c:40:0a:eb:a9:0b:49:df:ea:
90:19:80:4b:97:e9:fe:b7:83:a9:b4:e1:47:40:82:85:f3:c6:
26:4a:f0:c4:45:d0:88:72:bf:cd:0b:d8:77:74:94:03:8e:fa:
63:e1:e6:bd:cf:3b:bc:c6:63:59:9b:fc:49:d1:af:ce:45:50:
fc:18:e5:48:b1:5e:de:8f:39:61:1c:0c:7b:23:40:65:8f:38:
30:ef:a4:f0:f2:d1:32:17:9d:18:e4:5b:65:f4:dc:c9:4c:ed:
67:0a:43:94:f1:08:66:91:9a:89:2c:c8:93:9f:82:b7:94:d3:
fc:c5:ad:f3:ff:dd:fd:8e:67:ba:3e:1e:1a:b6:32:0d:f2:13:
1a:a0:c2:e0:60:d7:9e:40:c8:ea:b4:6b:c3:f9:b1:71:60:34:
fc:4c:1d:10:41:4a:d8:b2:d0:eb:9f:57:6c:ab:7c:d2:34:cb:
26:b2:34:b9:0b:5f:f4:c4:ba:a2:94:f3:94:da:a4:e6:59:33:
01:4b:0b:34:9a:95:37:90:f0:66:d1:4c:e0:0c:a5:bf:87:14:
d5:39:96:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:01 2025 by rpki-client