Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/r6Jaw29g1mePtFZFZIng6b8nKYM.roa
File: r6Jaw29g1mePtFZFZIng6b8nKYM.roa (raw, json)
Hash identifier: 9ikRBErIwY2EEAVFfzEcrKdNA7iL3tbIPzYY8GWz3Bk=
Subject key identifier: AF:A2:5A:C3:6F:60:D6:67:8F:B4:56:45:64:89:E0:E9:BF:27:29:83
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 019420D642D163A62C652ECBC326816EC0C9
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/r6Jaw29g1mePtFZFZIng6b8nKYM.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 91.213.91.0/24 maxlen: 24
2001:67c:2ea0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:42:d1:63:a6:2c:65:2e:cb:c3:26:81:6e:c0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa25ac36f60d6678fb456456489e0e9bf272983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:b1:9f:ec:7d:2e:85:24:69:4d:ff:cb:1c:
c3:b5:2c:f7:c0:19:5d:ad:4d:da:33:eb:7c:ac:1c:
95:17:94:21:f5:ab:88:22:da:1e:f3:f0:f5:87:de:
9d:3c:08:10:01:ba:be:1c:85:77:87:87:09:d9:57:
07:15:81:f4:7f:40:ed:ee:ea:46:a2:f4:a0:e1:95:
42:5e:9c:5f:75:fd:52:cd:6d:d1:ee:d6:7f:33:4c:
25:78:dd:83:34:23:66:57:67:b1:1e:92:b0:56:f0:
13:3d:23:d9:ec:01:33:e1:ca:44:d0:59:79:1e:f5:
0c:45:bf:71:72:db:54:9f:15:2b:dd:6b:a5:e5:06:
df:04:31:02:66:5a:bd:b8:ee:08:5c:21:45:57:b8:
02:0c:3a:6e:8c:3a:7c:7b:2b:c4:d4:b8:37:71:77:
2e:4a:70:d3:77:40:6f:6a:17:67:e9:37:ec:41:77:
b9:98:c4:35:b8:96:86:38:93:46:b6:70:39:17:b3:
bb:e1:11:bb:f1:1e:30:0e:41:f1:00:fb:32:37:23:
1a:a1:0e:7b:29:f4:11:c3:42:43:5d:40:f5:6a:73:
6a:4a:b5:5d:e8:ad:48:8c:b2:32:63:71:af:fc:ee:
f0:7e:a7:62:58:49:83:21:3b:28:5c:00:42:d2:e5:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:5A:C3:6F:60:D6:67:8F:B4:56:45:64:89:E0:E9:BF:27:29:83
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/r6Jaw29g1mePtFZFZIng6b8nKYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.91.0/24
IPv6:
2001:67c:2ea0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:da:85:78:c2:4b:20:0f:60:0a:59:b2:e7:44:d0:64:26:d4:
bb:d0:71:58:f6:e5:e9:18:71:2f:11:12:6c:29:99:63:61:e8:
c3:82:6b:9e:a7:04:a0:74:92:cb:f6:7c:44:dd:9b:8c:a5:ff:
ab:8a:53:cf:8b:47:55:5e:74:e1:f0:67:e2:81:1a:08:4b:b6:
45:e6:ba:eb:23:12:11:6a:14:fc:96:15:50:23:14:07:65:72:
5d:ef:a6:6b:4b:b1:41:6d:1e:41:de:18:4f:53:63:d6:2f:5b:
19:66:75:be:b0:c6:f1:42:26:f5:2e:d5:b0:4f:61:55:31:45:
54:1f:10:e6:41:9e:a4:56:cb:95:2e:72:4b:6a:46:87:12:b9:
1f:24:1f:85:fd:12:ba:b1:1a:cf:64:ef:51:1a:74:30:9c:6f:
25:f6:b4:f8:00:15:40:49:eb:61:1b:d3:ab:8d:ec:ad:7b:dd:
f2:bf:98:9c:2e:a6:a3:d2:61:2c:a2:1b:32:c8:fd:49:5d:b6:
c1:f7:21:0b:d9:65:cd:4e:4b:2d:b4:9b:93:23:bf:82:a8:18:
26:bd:74:93:05:4b:87:08:06:85:bc:df:e8:57:76:c6:fd:07:
70:d0:cc:30:91:1e:cf:48:e6:3b:5e:38:55:6e:d2:de:95:42:
61:22:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:36 2025 by rpki-client