Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/CmmKhdciV_F_mra-YOcbKmrYhbY.roa
File: CmmKhdciV_F_mra-YOcbKmrYhbY.roa (raw, json)
Hash identifier: VT8xbl1Jji+4wsCUPpHnl/UFnhMgpu5zo/k26EaRMFM=
Subject key identifier: 0A:69:8A:85:D7:22:57:F1:7F:9A:B6:BE:60:E7:1B:2A:6A:D8:85:B6
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019426D98B7AF6EE74BD77A86DDDA6ECD0E5
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/CmmKhdciV_F_mra-YOcbKmrYhbY.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47475
IP address blocks: 91.194.80.0/24 maxlen: 24
195.43.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8b:7a:f6:ee:74:bd:77:a8:6d:dd:a6:ec:d0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a698a85d72257f17f9ab6be60e71b2a6ad885b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:d5:1e:22:8f:1d:ea:46:e9:da:0c:ef:82:
b5:97:8f:1e:8a:93:bc:ff:de:90:77:b3:03:0d:51:
b0:ec:4c:97:2f:f4:30:70:83:ef:94:1b:21:99:7f:
83:34:43:3a:83:eb:80:17:6e:01:ec:94:54:c2:94:
e5:ae:85:f0:dc:a7:c0:13:d5:1d:31:0e:72:23:7e:
08:47:7f:e3:f0:64:0e:0d:4b:ca:bb:af:28:08:c0:
31:5d:00:49:a5:62:d4:97:65:f1:c9:85:cc:0b:89:
bd:49:98:13:38:a9:ba:4d:ba:45:31:14:5b:e7:81:
32:cc:cb:0d:72:19:b5:1f:ec:b7:45:65:04:3f:14:
10:bb:c7:fa:23:8b:4a:43:8e:00:d5:dc:bd:33:f3:
1b:60:d5:a6:1b:c6:3d:b5:70:e3:77:6c:17:79:ce:
9d:94:92:d4:d9:01:f1:5c:79:cf:2b:7f:64:90:d7:
c5:39:34:d8:e0:f1:e1:bc:1b:31:7b:2b:38:32:2b:
43:b9:c5:ee:ad:7a:ca:5b:9d:cc:90:1a:7d:59:c2:
00:7e:57:f6:15:a7:8a:79:80:56:be:77:e7:a0:9a:
c7:61:7c:17:c4:83:7c:e5:34:16:a2:93:62:e0:e7:
1f:61:82:e7:13:e7:19:0e:34:07:39:ca:67:85:1d:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:8A:85:D7:22:57:F1:7F:9A:B6:BE:60:E7:1B:2A:6A:D8:85:B6
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/CmmKhdciV_F_mra-YOcbKmrYhbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.80.0/24
195.43.146.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b3:51:42:b9:80:b1:a6:61:cd:06:dc:03:6f:39:0b:eb:50:
c4:be:ad:5f:f9:5b:58:e2:b8:7e:7d:26:25:89:b3:8e:f4:d9:
a2:89:c9:c6:ab:a3:5a:75:e8:da:ed:9e:c3:5e:65:22:ea:a1:
9d:3b:4e:81:7f:06:7f:3a:e2:ef:22:5a:d9:43:5d:73:5f:1a:
ea:01:48:29:1d:31:2f:fd:85:7e:d8:1b:e2:bf:85:65:e9:1b:
f3:87:40:1f:f2:0c:95:51:e2:1b:a7:67:77:0b:07:d0:68:3d:
a3:e1:61:89:26:d5:9c:b9:a2:ce:4d:69:24:2f:7c:f7:cb:22:
e3:a1:b5:bc:38:15:ef:04:ff:1d:fe:37:e5:cd:31:cd:85:21:
ba:c3:cd:19:2d:dc:33:77:06:70:d2:2a:e8:c0:72:a0:c5:f0:
85:a4:fc:a4:d2:42:25:80:53:8e:a4:ba:45:fc:09:94:0d:e1:
25:ad:ae:bb:f6:f3:6d:68:46:5e:43:2c:24:0d:fe:be:20:a1:
0c:00:3c:b4:be:2f:3d:dd:16:24:95:14:86:42:6f:2e:2b:b4:
d2:43:58:dd:c4:0d:fd:11:73:2d:12:3a:4e:b5:0a:ba:b9:0e:
cb:aa:d1:ac:68:8b:cf:b2:52:d6:09:a7:7a:a2:64:11:a8:e9:
98:36:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:19 2025 by rpki-client