Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa
File: mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa (raw, json)
Hash identifier: 9Fpz5SGKImESLClWOjbnaFAMtUoqIoi74+/yK2yHMuQ=
Subject key identifier: 9A:45:17:9A:0C:A0:26:96:01:31:0D:88:82:6F:4B:FA:DB:FE:8F:5B
Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Certificate serial: 0194228D61602681EBCB430D0272DA6F26D5
Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205091
IP address blocks: 91.217.211.0/24 maxlen: 24
2a12:81c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:61:60:26:81:eb:cb:43:0d:02:72:da:6f:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a45179a0ca0269601310d88826f4bfadbfe8f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:c8:b7:76:c1:8e:a6:bc:f2:02:07:9f:c6:
68:55:82:f1:0b:fe:6e:53:88:6a:f3:8f:e0:ba:4c:
7b:da:d4:2d:34:78:19:57:d6:7c:7c:2c:6e:f4:1c:
20:73:1b:40:75:6a:7a:b3:f6:06:11:52:5b:39:2e:
af:26:33:fe:a7:9a:f8:af:2c:ce:84:3e:0b:c3:31:
a9:0f:eb:0a:f4:d3:aa:57:67:da:3d:ab:0b:e0:5b:
e1:3b:d4:4e:b9:73:69:6c:f5:9a:09:f8:41:15:12:
46:72:c1:6a:8e:15:31:1e:de:70:2e:11:83:12:3d:
04:c4:2f:a7:e0:1f:9c:25:47:7b:a5:7e:99:33:c7:
a6:c4:d2:12:bc:3d:4c:17:7c:19:8e:43:7d:cb:91:
f8:5d:86:83:85:33:f7:ea:e5:8d:5a:8a:fc:86:74:
79:9c:bc:19:d1:df:9f:7e:e0:32:2f:c2:7b:9b:2a:
02:c8:f8:3a:16:c5:69:d2:0d:e2:c5:3e:d7:74:56:
ab:07:d7:c3:4a:ac:7a:39:c8:91:19:6f:08:68:87:
04:03:40:84:89:38:56:87:f5:47:58:14:19:86:86:
dd:5c:30:ed:ce:f7:58:16:a9:0f:61:2a:b3:41:0b:
88:0d:cb:9a:05:68:1c:06:e1:0b:15:8f:38:0c:4e:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:45:17:9A:0C:A0:26:96:01:31:0D:88:82:6F:4B:FA:DB:FE:8F:5B
X509v3 Authority Key Identifier:
keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/mkUXmgygJpYBMQ2Igm9L-tv-j1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.211.0/24
IPv6:
2a12:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:2f:df:7c:5c:ff:a6:ef:01:45:72:94:8c:f6:3f:15:28:9d:
f0:77:6a:31:ee:49:9c:d6:94:4e:f3:3a:f6:7c:21:0b:3b:a4:
e0:51:aa:b6:a9:d2:d8:c4:7e:eb:0a:d9:3a:17:55:96:7a:77:
45:1f:3e:2f:da:84:d9:73:6e:6b:6e:61:6f:49:49:05:85:3d:
46:32:67:f6:3a:8d:3d:99:1c:66:09:fc:0f:a9:c5:43:97:d5:
cb:05:1d:78:2b:86:a5:b2:bb:00:9c:e7:2c:3c:15:b1:0f:95:
75:a8:1c:9c:3a:94:c9:a4:94:45:8f:b4:a1:83:21:ed:16:1b:
29:3c:cc:77:18:6d:98:90:b4:19:17:50:dc:64:eb:ab:c6:bd:
c4:14:00:5a:12:cb:d0:c6:3a:c8:98:77:14:57:2e:8a:c8:6d:
ad:bb:bb:3f:f9:3b:85:31:53:d1:80:bc:3a:5d:b7:25:15:bd:
2c:8d:b8:4e:3e:1c:4f:29:1d:d7:10:ff:af:91:57:ea:5e:53:
7d:5a:04:be:11:be:85:69:86:6a:5a:6b:7e:31:a5:5b:59:3f:
d8:ce:17:7a:d3:ea:11:40:8d:01:1a:98:1c:87:55:50:a0:e4:
60:ad:78:5d:87:b8:83:ff:ff:d6:ea:e6:22:bc:22:bd:c8:d7:
bb:17:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:46:25 2025 by rpki-client