Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/kvZo-BdFpFiAumpYOAN_8hogK54.roa
File: kvZo-BdFpFiAumpYOAN_8hogK54.roa (raw, json)
Hash identifier: B0ogmfmwZkernYmKh+SkwXZzEeGWetiV/fs+CFuZhi0=
Subject key identifier: 92:F6:68:F8:17:45:A4:58:80:BA:6A:58:38:03:7F:F2:1A:20:2B:9E
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 019422FB1050CACFE32DA2FCB1ACBD17A3A2
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/kvZo-BdFpFiAumpYOAN_8hogK54.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49367
IP address blocks: 91.199.211.0/24 maxlen: 24
91.199.223.0/24 maxlen: 24
91.199.248.0/24 maxlen: 24
91.203.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:10:50:ca:cf:e3:2d:a2:fc:b1:ac:bd:17:a3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92f668f81745a45880ba6a5838037ff21a202b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:a9:ba:58:7a:6a:b4:be:81:a9:4e:db:71:
86:64:50:40:e7:1b:d7:fe:5f:f5:7e:83:01:40:4a:
f9:cb:23:f6:d1:cd:c4:a7:57:31:b4:80:9b:42:c3:
4f:2a:70:ee:6a:9f:3b:13:e3:af:7e:c5:cf:e9:aa:
4b:d0:ff:ba:ca:fd:c0:e1:4f:9f:d9:6c:44:65:a1:
35:5e:07:59:84:f5:10:ec:06:8a:c0:82:80:a0:46:
cd:d4:f1:d4:d4:4d:2b:6c:d1:22:9a:1e:e5:42:30:
25:66:06:e8:5c:c9:1b:3d:55:be:51:3a:8c:03:04:
96:cd:d1:fb:6a:40:95:44:71:96:95:bb:a1:3e:9f:
16:7d:d2:69:d6:dd:05:76:ad:24:66:48:6d:1c:b2:
75:27:8b:a4:23:d5:5d:04:c6:3c:fc:b6:33:dd:dd:
84:ca:6b:26:69:1c:7c:3d:19:0b:8b:69:a5:bd:c8:
74:d4:26:34:16:6b:dc:a7:ca:1f:e1:f5:56:4b:24:
51:d9:84:23:a4:7d:07:8b:6a:9a:8b:bf:7f:24:c8:
c0:02:cd:74:d6:e8:53:8e:c1:e0:5e:5f:ed:99:81:
55:6a:9c:3b:d6:d6:21:78:af:1b:e6:cb:f7:f5:ef:
ca:f2:ac:7e:4e:13:2e:f3:5b:a5:6c:b9:6c:1c:1c:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F6:68:F8:17:45:A4:58:80:BA:6A:58:38:03:7F:F2:1A:20:2B:9E
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/kvZo-BdFpFiAumpYOAN_8hogK54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.211.0/24
91.199.223.0/24
91.199.248.0/24
91.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4f:02:db:de:a6:8c:d9:47:a6:8c:d6:b2:a5:6f:30:74:8a:
79:62:ed:06:c8:ea:14:65:99:cd:ad:38:05:22:28:e0:3e:0f:
1c:08:9b:7f:e6:82:f5:2b:14:df:65:c9:7a:6a:53:95:c5:2f:
cb:6b:b8:e4:a5:44:5d:c8:bd:18:60:bc:38:15:95:5d:27:1a:
dc:13:5a:12:37:03:14:8f:ef:03:8d:cc:1b:92:31:ff:60:36:
d2:ab:e9:f6:9e:16:7c:3c:43:e7:f5:cb:f7:63:43:1b:d0:83:
60:87:f9:9a:5d:43:e7:44:da:57:01:b9:2c:71:51:83:6b:2e:
d3:3f:b4:71:58:51:cf:5a:00:9b:0d:6b:da:78:5d:75:d7:47:
cd:16:76:74:54:79:f0:ed:a1:62:2e:23:fa:62:df:9d:89:de:
cd:df:8a:bf:6d:50:c0:2a:60:37:dd:ff:66:05:ba:65:bd:d0:
3d:8e:cf:69:2e:15:78:82:13:3b:50:67:8a:c9:22:94:99:e9:
ef:3c:1d:98:cd:f4:81:bd:c2:cb:82:43:c2:02:6f:2c:33:12:
f1:1e:2a:9e:30:db:fc:1f:39:72:9c:0b:85:ee:cf:7c:f0:85:
26:58:93:08:7d:70:90:5f:c6:81:86:56:3a:80:9f:c3:89:64:
db:ed:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:55 2025 by rpki-client