Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa
File: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (raw, json)
Hash identifier: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=
Subject key identifier: 38:5F:F0:F2:C9:14:ED:64:63:5A:4D:26:A5:6F:57:BE:3E:42:DA:7C
Certificate issuer: /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial: 019427B40EB5A762478E3F9C1AC726FF22E2
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa
Signing time: Thu 02 Jan 2025 15:48:19 +0000
ROA not before: Thu 02 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197138
IP address blocks: 91.206.50.0/23 maxlen: 24
2001:67c:354::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:0e:b5:a7:62:47:8e:3f:9c:1a:c7:26:ff:22:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Validity
Not Before: Jan 2 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=385ff0f2c914ed64635a4d26a56f57be3e42da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:ca:76:12:f4:b2:21:54:87:f3:a6:33:de:
f5:06:87:07:8f:5c:4f:a6:aa:e8:74:e4:75:83:14:
5c:99:31:42:a7:1f:db:2b:5a:42:a4:50:95:4a:7d:
8c:f4:50:54:78:74:1a:f3:3f:2b:6c:44:67:4d:a0:
46:43:72:b1:88:3c:a5:bc:e7:37:0d:ef:92:af:09:
63:64:00:b0:7a:ca:ca:7c:53:ab:71:30:e2:95:76:
3f:90:e0:b9:e7:2f:f4:d9:a6:8c:68:4f:68:2a:96:
8a:5b:c8:a3:7e:72:35:9d:aa:8d:78:5b:6d:da:63:
0b:e8:c2:ce:c0:56:13:37:81:98:86:84:42:2c:4f:
f3:6f:ee:03:cc:a5:19:dd:29:95:1d:9e:85:42:66:
b5:ff:bc:9f:d6:06:bc:90:f6:45:34:eb:bd:2a:7b:
82:bb:b4:9a:5e:d6:cb:6d:0c:64:01:f4:19:d3:f2:
70:05:d7:ff:dc:68:9d:94:0d:6d:14:8b:f8:79:49:
b7:a8:22:ce:fc:ed:09:74:4e:ed:bb:0f:9f:01:22:
04:6c:5b:16:46:06:56:63:ac:45:ae:2b:cd:a6:b5:
01:b0:f7:b4:7b:9d:dd:b1:c5:de:55:12:1c:6d:e0:
dd:8d:e4:2d:8c:a3:22:dc:f9:89:f6:09:42:95:d9:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:F0:F2:C9:14:ED:64:63:5A:4D:26:A5:6F:57:BE:3E:42:DA:7C
X509v3 Authority Key Identifier:
keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.50.0/23
IPv6:
2001:67c:354::/48
Signature Algorithm: sha256WithRSAEncryption
51:4d:3c:7a:04:8c:38:f0:bd:8a:cf:5a:47:74:de:d4:0f:74:
00:94:f8:74:b6:5f:b7:4d:8a:bb:3e:e2:dd:b5:5f:a2:af:6a:
10:ec:bb:f7:f9:a3:f4:59:e9:66:8c:93:ea:ea:53:f9:a2:31:
e4:22:1e:79:21:4c:8e:c2:26:99:bc:87:0b:d6:98:d0:9e:c8:
fb:70:25:a3:c0:0c:9a:bb:bf:1f:f2:85:bf:5f:05:55:6f:6f:
21:7e:8c:ea:c9:6b:b1:35:44:4c:75:40:65:64:4f:26:91:3f:
87:41:bb:ae:ba:03:85:e7:77:40:7c:58:dd:cb:8d:6d:64:a4:
fa:e9:fc:a6:68:91:1a:b4:ca:f0:60:3c:67:09:1c:a2:63:d4:
b9:b4:98:26:99:f0:c9:a1:61:cc:e2:c9:72:f2:05:83:54:e6:
fa:74:c3:36:aa:66:4e:c0:f3:60:7b:bc:b5:ee:2d:65:5a:1a:
ef:7a:57:d7:08:b6:5b:f2:c8:50:5c:e6:7a:7a:d3:13:26:3d:
a5:ba:d6:86:bc:08:28:9f:ea:b5:53:37:ec:2e:d5:67:42:8b:
2f:7e:7a:b6:53:7d:fd:fb:f9:b2:21:6a:f4:6d:f3:eb:8e:ea:
3c:04:1b:17:3c:3e:01:16:4a:a4:d0:aa:a9:de:41:fd:5c:13:
81:db:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:01 2025 by rpki-client