Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa
File: cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa (raw, json)
Hash identifier: zfCI0F+07BYWYyzF1MeX//gwKdw4GZRgrDLUW2XUt3U=
Subject key identifier: 71:3B:B7:2A:82:D4:2F:5B:F4:65:69:99:82:5C:85:29:4D:AE:88:A6
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 019425221A53D2628DD4C8AE300B3C3195F9
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 91.233.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1a:53:d2:62:8d:d4:c8:ae:30:0b:3c:31:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=713bb72a82d42f5bf4656999825c85294dae88a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:13:7d:64:4c:1c:a6:54:93:25:7e:95:6d:
37:75:95:04:b0:6f:f7:ed:87:8a:04:50:63:2e:68:
10:6d:53:11:28:c6:ef:42:4d:9d:83:be:33:a9:7a:
a2:41:64:54:f4:7e:35:d0:c3:78:e8:70:bd:49:95:
b9:21:60:d1:e6:a9:70:6b:c0:a6:9f:e5:d7:fe:e7:
37:de:0b:43:9e:20:9b:de:a8:b5:c1:52:be:6a:f1:
78:62:5c:05:de:3c:95:dd:98:56:62:79:49:67:5b:
47:9f:43:11:b3:1a:d4:fa:93:26:88:78:a7:11:62:
8a:78:01:fc:92:70:cc:6e:64:a1:9c:04:72:cc:67:
6e:a8:a5:70:13:5c:d8:8f:ed:61:69:a5:d0:21:d5:
30:8e:81:1c:fe:31:65:2e:99:78:94:9d:41:42:59:
57:df:4a:ac:97:ef:e6:ea:f7:77:ff:74:ff:0a:09:
6e:02:ca:51:88:78:7d:3b:51:68:18:ed:71:4d:13:
c2:88:a4:d4:ef:9f:54:db:12:e1:bd:a3:29:de:25:
68:ea:16:f0:4e:49:f2:72:e9:71:27:42:2d:8f:dc:
75:1d:0f:be:18:eb:af:46:39:05:2f:8c:5f:06:30:
e8:4a:51:16:fb:cb:8b:57:5f:d3:53:12:7b:af:e1:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:B7:2A:82:D4:2F:5B:F4:65:69:99:82:5C:85:29:4D:AE:88:A6
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/cTu3KoLUL1v0ZWmZglyFKU2uiKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c9:7f:d2:00:e8:17:e3:c6:51:8f:ac:85:b6:d9:ce:bf:bb:
72:2e:33:bd:7a:f4:63:6e:6e:b5:d8:26:6b:5f:2d:52:ca:00:
f8:92:9a:d6:1c:0e:68:8a:e0:f6:31:92:1a:8c:a2:88:3b:03:
f4:fd:8c:a4:40:65:98:48:24:2d:98:9e:27:84:85:b1:c0:14:
0d:18:0c:9a:27:c5:0d:05:e3:c8:77:e4:2e:2b:4e:30:40:e1:
d4:41:86:c5:0a:ac:4f:1f:30:87:03:57:42:3f:c6:bd:bc:3a:
d2:76:5e:83:2c:a0:0d:f7:b6:71:9d:45:cf:01:0d:e4:7e:86:
30:3d:7c:5b:c7:f1:52:57:61:a5:43:e7:15:9d:8a:c9:8e:c5:
fb:04:78:e8:1b:49:a0:6a:c1:3c:e0:07:9e:fb:cc:94:08:a3:
a6:fe:c1:03:9b:0b:b3:24:88:28:94:4d:70:8a:5c:62:f4:01:
88:05:26:aa:ba:5c:b6:d5:8e:06:24:e1:87:b1:b5:db:62:49:
c3:3e:65:4d:a3:96:9c:06:77:ce:eb:0c:1b:b3:d0:e4:c8:30:
fc:2e:6e:c0:89:08:92:7b:82:89:50:bb:14:ee:40:3f:0c:39:
a1:6e:b4:0b:b3:0b:81:0f:0e:93:40:36:65:d9:fa:d1:84:fc:
1b:e3:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:13 2025 by rpki-client