Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/SRa_h_GHkpclvmuJwl5Lnoa0Zrg.roa
File: SRa_h_GHkpclvmuJwl5Lnoa0Zrg.roa (raw, json)
Hash identifier: MxkPCOOy41lMeNPPg2WG8Cf4fzTOh5MBJu6sszzrJRQ=
Subject key identifier: 49:16:BF:87:F1:87:92:97:25:BE:6B:89:C2:5E:4B:9E:86:B4:66:B8
Certificate issuer: /CN=6b9354d68b6ff4c97e500afc2d429375b490b0b7
Certificate serial: 018CC9BC8B665EEFA5C4D50B1918B6F6389D
Authority key identifier: 6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/SRa_h_GHkpclvmuJwl5Lnoa0Zrg.roa
Signing time: Tue 02 Jan 2024 10:33:45 +0000
ROA not before: Tue 02 Jan 2024 10:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 91.221.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8b:66:5e:ef:a5:c4:d5:0b:19:18:b6:f6:38:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9354d68b6ff4c97e500afc2d429375b490b0b7
Validity
Not Before: Jan 2 10:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4916bf87f187929725be6b89c25e4b9e86b466b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:7e:57:7e:8a:ee:02:e4:e9:20:0b:3a:fb:
23:78:45:c7:1d:85:a3:f0:0c:b5:54:b8:75:92:82:
99:96:0d:41:97:2b:b7:ae:72:1e:f6:14:16:a8:52:
76:e1:d7:d9:6e:83:01:28:65:4b:71:00:70:10:8a:
fa:77:42:d7:40:51:9e:46:09:bb:c6:66:16:04:69:
49:95:92:2e:77:81:57:ea:09:c8:a3:3f:18:71:5a:
dc:9d:5f:c5:7a:17:d1:71:c3:d9:96:db:58:02:92:
bb:12:80:74:b7:53:03:9c:9b:26:d4:f6:77:86:1f:
85:9b:b2:c9:04:65:95:8e:29:5d:21:22:12:9f:aa:
b9:a6:f2:70:11:3d:97:ee:c9:c6:f5:2c:42:e3:80:
69:2b:6a:aa:f5:f5:5c:24:da:5f:c4:28:df:e1:2d:
5a:b5:37:f3:28:99:fd:35:1b:1a:dd:7d:4c:9e:b9:
66:c7:92:da:90:9f:9d:af:e0:a3:10:4c:47:6a:fe:
7b:22:48:e0:0f:9c:c8:f0:43:f6:7a:d1:28:7e:30:
03:31:f6:4d:e8:71:8b:c0:b6:13:a8:f6:1f:1a:14:
d2:95:17:81:59:9c:da:8b:aa:a8:4e:d8:34:0a:31:
4d:75:38:e5:4e:f6:18:3d:e9:b1:af:45:67:d5:12:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:BF:87:F1:87:92:97:25:BE:6B:89:C2:5E:4B:9E:86:B4:66:B8
X509v3 Authority Key Identifier:
keyid:6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/SRa_h_GHkpclvmuJwl5Lnoa0Zrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.80.0/24
Signature Algorithm: sha256WithRSAEncryption
19:21:45:04:86:83:18:95:70:ef:ae:21:94:8c:2c:8d:4e:79:
ff:6b:a2:2a:1f:97:0c:3a:6a:fc:39:c5:8d:ed:0d:ef:a8:fe:
9c:eb:22:42:c9:57:49:99:70:78:4d:61:36:19:63:cc:a3:af:
ef:6b:1e:05:7c:f3:a0:d2:a5:26:9c:57:7c:c4:a5:6b:eb:e2:
d9:b8:a4:68:ca:c4:20:39:04:cc:37:6e:fe:eb:df:2a:04:c2:
55:3c:a8:d0:25:ae:e9:2c:14:12:3e:6a:da:80:fe:0f:70:a9:
77:d1:e3:36:fb:0f:d9:96:99:34:63:37:6a:e8:64:27:fe:a1:
43:77:30:58:a3:20:bd:c0:c3:e8:2c:4d:c7:71:8d:2d:62:50:
23:c4:e2:f8:06:ae:44:89:fc:5e:7d:42:ce:02:f4:f3:f0:e5:
4e:72:8e:8f:29:85:91:5e:1e:87:e8:da:83:02:63:c4:00:88:
e5:bb:d5:e8:58:9d:a5:18:3e:81:07:b8:67:42:c6:34:e3:6c:
84:4a:78:46:e7:0a:ac:c4:08:f0:71:f6:f9:18:0a:b2:65:83:
d6:55:6c:b9:b0:fc:f3:db:10:f6:8e:c4:ab:17:7d:d4:23:0c:
d5:9b:02:92:77:c9:a7:ce:49:d8:34:b6:b8:dd:aa:75:fb:42:
80:32:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:54 2025 by rpki-client