Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/Jz9OReni23tlAFlv2GW25Ecf7IU.roa
File: Jz9OReni23tlAFlv2GW25Ecf7IU.roa (raw, json)
Hash identifier: GvIndfLunXr32q+mQyRE3wlkyEX+dK/mibzNsCJj8Z0=
Subject key identifier: 27:3F:4E:45:E9:E2:DB:7B:65:00:59:6F:D8:65:B6:E4:47:1F:EC:85
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 01942747CACE85F669B2BE471B1EA38748D6
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/Jz9OReni23tlAFlv2GW25Ecf7IU.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206123
IP address blocks: 91.213.19.0/24 maxlen: 24
91.235.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ca:ce:85:f6:69:b2:be:47:1b:1e:a3:87:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=273f4e45e9e2db7b6500596fd865b6e4471fec85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:02:30:7f:16:c5:7e:2b:ab:df:55:79:83:
e0:e4:a1:5a:40:48:29:c0:a7:38:25:61:bd:cc:14:
7c:5c:03:df:30:53:ee:13:07:5c:6d:16:71:d9:11:
f1:75:1a:b0:27:2b:71:e5:b3:4a:72:72:b6:d6:99:
90:9e:f0:cf:15:00:b5:09:60:24:c4:66:6b:30:90:
51:82:64:40:11:d1:6d:37:da:00:49:5d:57:e7:8b:
aa:f5:fa:f7:8b:1a:12:e8:5d:02:01:63:2c:1f:6c:
7b:5e:35:2a:e7:32:c9:5b:e0:9d:8c:03:12:ae:46:
e4:5a:4d:d4:75:c9:b1:c1:8d:c2:ef:bf:b0:54:34:
3f:df:a4:dc:f7:5a:49:43:a9:b5:b1:4c:34:6f:6d:
ab:57:86:b3:85:d2:15:11:bb:f4:f4:e4:e3:8c:2f:
ee:39:24:59:9a:ef:25:b7:ca:fd:e4:1b:d6:8d:27:
59:68:e0:2e:73:0b:ac:e2:d2:03:67:ec:f1:64:6b:
2c:d7:e2:d5:d1:76:e7:73:8f:cf:05:a4:cf:d2:b4:
c0:45:71:e6:b3:4c:48:2d:90:30:00:a2:56:81:4b:
70:2c:4d:c6:06:9b:cd:0b:0c:e3:f3:1a:78:7c:fb:
34:e8:d5:69:cc:26:ab:4e:90:65:20:60:51:da:3e:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3F:4E:45:E9:E2:DB:7B:65:00:59:6F:D8:65:B6:E4:47:1F:EC:85
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/Jz9OReni23tlAFlv2GW25Ecf7IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.19.0/24
91.235.212.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e2:19:5b:39:92:f4:62:14:cb:ab:f2:83:3f:5f:14:05:f6:
4c:06:16:fb:d4:12:51:5d:bf:34:99:32:8f:58:69:b5:02:db:
10:a8:87:02:db:6f:b0:71:fc:2b:51:45:bb:df:5e:37:d4:ec:
45:c6:b0:a1:db:db:9a:8d:36:f3:8e:d1:54:dc:02:89:83:08:
b1:62:15:15:68:a8:12:4f:a7:2d:d5:68:b8:48:de:5a:b6:d2:
5f:6d:d4:d3:37:69:32:ef:53:fa:14:9f:0c:e4:96:99:36:f6:
d6:3c:70:a2:09:53:3a:26:de:ef:8a:23:98:d8:38:21:1d:99:
50:a1:c7:3e:e8:2b:1a:7e:f2:5b:69:0d:33:43:99:d6:9b:db:
e2:83:e7:ed:51:bf:9f:ff:4d:1d:ef:b1:7a:db:7c:01:8c:0e:
26:e9:a3:2d:5c:62:54:89:80:4a:09:50:64:88:da:5f:a0:d1:
20:39:a6:f0:61:52:59:5e:37:a0:d6:0d:b0:66:97:71:aa:b8:
df:e5:2e:23:a1:09:5e:71:2f:8f:d6:d3:a0:16:8c:38:0a:aa:
74:27:3b:90:74:9c:07:53:5a:f1:33:1c:12:de:a6:87:d7:3a:
2d:eb:6e:09:dc:98:89:8b:8a:98:4e:b3:d3:0f:f9:eb:94:4e:
37:1e:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:22 2025 by rpki-client