Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/DthOD_kxSHI_yAmMQURpyHdQPX8.roa
File: DthOD_kxSHI_yAmMQURpyHdQPX8.roa (raw, json)
Hash identifier: 8Uu1LNAmsaRUJ+QbM5XSgI4iAjEHIEeippuJeVtKzew=
Subject key identifier: 0E:D8:4E:0F:F9:31:48:72:3F:C8:09:8C:41:44:69:C8:77:50:3D:7F
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E15A678D2B098CAC09C70E7674560
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/DthOD_kxSHI_yAmMQURpyHdQPX8.roa
Signing time: Wed 01 Jan 2025 15:48:44 +0000
ROA not before: Wed 01 Jan 2025 15:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.219.17.0/24 maxlen: 24
91.219.18.0/23 maxlen: 23
91.232.185.0/24 maxlen: 24
91.233.192.0/24 maxlen: 24
109.166.36.0/24 maxlen: 24
109.166.37.0/24 maxlen: 24
109.166.38.0/24 maxlen: 24
151.248.68.0/24 maxlen: 24
151.248.69.0/24 maxlen: 24
178.212.203.0/24 maxlen: 24
178.212.204.0/24 maxlen: 24
178.212.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:15:a6:78:d2:b0:98:ca:c0:9c:70:e7:67:45:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ed84e0ff93148723fc8098c414469c877503d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:7c:2b:e0:e3:83:63:d2:e8:b6:22:11:33:
56:d3:0f:fc:08:78:ef:fd:55:d2:6d:bb:ed:37:ee:
b8:57:2c:85:05:dd:50:32:58:fd:05:15:b2:5f:de:
f5:79:3c:3d:28:d7:36:f1:2d:69:cc:3c:e7:61:0e:
e5:6d:70:b2:32:04:7e:f4:82:df:bf:28:7e:23:53:
e6:36:85:23:7f:f5:03:4c:6d:22:4f:6d:75:81:97:
6f:2e:dc:01:89:47:ca:6b:a9:4e:52:27:09:90:1c:
eb:2d:e7:1d:ac:e4:39:01:56:99:db:cb:34:99:b9:
5a:88:25:e8:5f:7c:90:a5:0c:0b:0e:b0:47:6b:30:
80:a7:f4:b9:97:37:c7:81:7b:19:10:f6:33:95:bf:
7f:01:39:0c:c1:75:0b:c5:78:4c:af:2b:87:42:d8:
f9:5d:ac:5f:33:8c:39:f4:94:16:8e:23:54:aa:3c:
fc:b3:73:ae:da:00:88:1b:b6:6d:0d:82:ba:0f:2b:
cf:f1:f6:e5:42:61:cf:53:ab:f5:68:76:c9:f1:bd:
30:d4:a7:48:4e:22:fd:1e:0c:fd:64:e1:f3:ff:f2:
4c:5f:1d:d3:10:d9:58:38:5d:56:33:4f:20:ff:f2:
15:54:a3:d8:e5:0b:44:7b:47:4c:a0:a0:85:e0:1b:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D8:4E:0F:F9:31:48:72:3F:C8:09:8C:41:44:69:C8:77:50:3D:7F
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/DthOD_kxSHI_yAmMQURpyHdQPX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.17.0-91.219.19.255
91.232.185.0/24
91.233.192.0/24
109.166.36.0-109.166.38.255
151.248.68.0/23
178.212.203.0-178.212.205.255
Signature Algorithm: sha256WithRSAEncryption
82:38:ab:bd:9a:17:f5:9b:5c:47:73:e4:48:05:24:34:56:81:
f3:7b:b4:42:2a:ad:b3:b5:46:f5:b3:ef:fc:66:49:64:71:4c:
a4:5d:77:1e:84:4f:89:67:89:6a:06:f6:7e:36:5a:74:47:52:
40:13:71:23:e1:f4:57:78:c4:60:56:c1:2d:87:b7:fd:77:ba:
d9:f2:b0:dd:ff:eb:a8:5a:3e:8e:13:c0:41:af:92:b4:02:f2:
40:98:57:b7:27:14:18:98:65:11:88:15:32:68:ac:b2:46:1c:
dd:f4:0e:1f:4d:d1:93:d6:15:76:b3:49:9f:fb:9c:31:55:8a:
27:72:01:cf:0e:d1:d8:88:b2:cf:fd:95:4f:b0:41:35:0f:b3:
11:ed:ec:a8:d0:64:66:c2:f4:fb:38:51:40:2c:d7:b7:be:7e:
8e:81:9e:86:15:e2:4d:f6:ee:f9:01:4e:8e:31:d6:ae:dc:38:
d8:a7:8b:2d:00:d9:ba:8a:6b:c1:9e:65:ce:15:a9:9f:4b:ad:
a4:ce:16:db:49:1c:8b:92:55:a1:8a:1d:8d:ae:4c:4c:6f:e6:
d5:7e:e7:d4:41:a5:89:fc:ac:f9:aa:40:44:05:20:99:c7:8c:
d5:0f:85:ab:e2:36:4f:78:df:ad:eb:ec:4c:8c:6f:51:f7:86:
e9:6e:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:07 2025 by rpki-client