Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa
File: 2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa (raw, json)
Hash identifier: OuAKBuCtiZrdtqQo3Ia+YQ9DdlyXDqDuhn9BW+I9wGc=
Subject key identifier: D8:8E:D4:83:FD:13:29:48:AB:60:12:9D:09:11:41:DD:7F:B2:3D:53
Certificate issuer: /CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Certificate serial: 019426D92BF11C5D155F1501D124AED9E893
Authority key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa
Signing time: Thu 02 Jan 2025 11:49:14 +0000
ROA not before: Thu 02 Jan 2025 11:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48498
IP address blocks: 91.211.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:2b:f1:1c:5d:15:5f:15:01:d1:24:ae:d9:e8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4
Validity
Not Before: Jan 2 11:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d88ed483fd132948ab60129d091141dd7fb23d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:9a:ad:54:43:d7:f9:ec:9a:12:13:88:33:
d7:6a:ba:ff:28:b2:8e:57:a6:43:e0:2d:2c:19:89:
38:e9:cf:01:ac:04:12:90:d9:9a:92:99:ee:d8:7a:
24:29:0b:75:f3:79:9d:47:0d:3f:ee:41:45:ef:5e:
a0:36:0b:47:43:b8:45:32:ef:a1:c1:34:e6:11:e4:
c3:d4:bf:f9:1d:58:60:fd:02:9e:a5:36:26:98:03:
6f:7d:8a:94:42:05:f4:63:a2:f3:db:a0:1f:5d:07:
66:c5:23:da:70:04:5e:e7:05:a2:e8:39:22:7a:5f:
87:c2:4d:a8:8c:f4:d9:28:e8:06:cc:33:48:75:8b:
fa:68:f5:37:f0:81:10:ed:4d:13:10:69:df:c0:5a:
0c:4d:1e:3e:ed:15:4c:63:9c:c6:0c:32:ca:69:0c:
cf:5c:89:2a:c3:62:b5:96:9f:99:14:5c:24:b7:b4:
f2:84:69:2d:8d:d3:81:7d:cf:a7:65:c1:f1:5d:8b:
fb:73:ac:6d:24:ba:24:e4:0f:7f:6a:8c:7d:0c:b7:
00:6b:3d:dd:bc:35:1b:94:1c:39:9e:33:d9:5b:78:
9f:d9:70:43:e0:15:26:6b:2f:f0:d4:fe:e5:a0:c7:
0e:77:6b:86:4c:f8:7d:84:89:1a:68:99:1a:13:c1:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8E:D4:83:FD:13:29:48:AB:60:12:9D:09:11:41:DD:7F:B2:3D:53
X509v3 Authority Key Identifier:
keyid:68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/2I7Ug_0TKUirYBKdCRFB3X-yPVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.36.0/22
Signature Algorithm: sha256WithRSAEncryption
87:6c:00:32:8e:1f:3b:09:64:0f:72:0c:a4:4d:8e:82:a0:fd:
18:74:f6:de:3b:4a:8a:fc:2c:2b:f2:ef:de:f5:c7:f7:56:3c:
f9:0b:65:3f:26:b3:84:74:c9:8c:89:b5:90:58:60:ec:bf:8c:
08:03:1c:67:d3:6a:fa:98:bb:29:83:f2:e5:76:27:a9:d0:30:
bd:ac:41:f3:76:6e:70:56:6b:9d:44:d8:3f:07:6d:46:44:36:
6f:b0:6f:bc:85:3b:fc:9c:53:28:39:7b:06:ad:58:67:0d:6f:
dd:9f:19:9e:47:a6:c9:98:5b:09:69:de:90:70:2b:78:00:7f:
04:89:dc:d7:63:6d:dc:70:34:f2:c1:d3:fd:23:c9:27:8a:22:
2e:ce:06:15:74:47:d1:5b:cb:d7:b4:db:4d:c2:c7:77:a3:c9:
1a:8c:5d:67:74:4d:a1:39:36:e8:64:b4:ef:12:20:01:23:78:
85:33:3c:54:31:ed:ed:5d:2e:42:7c:b6:bf:17:3b:b5:48:c7:
64:87:ab:ce:f0:21:e3:cc:62:0d:85:fb:09:9a:5a:6a:5d:a2:
80:47:15:d2:c3:00:39:77:e7:05:4a:ae:95:b9:f7:ae:1a:fa:
e1:bf:6e:dd:84:31:b1:fb:1c:85:6d:76:4a:4c:f2:49:bc:45:
6e:aa:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:50 2025 by rpki-client