Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa
File: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (raw, json)
Hash identifier: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=
Subject key identifier: 15:FD:CD:F0:F3:B5:99:C4:27:72:C5:C6:1E:24:14:8D:03:B6:9D:1C
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 019424B2B86628A0864EDEEE1D636BE4EE1D
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa
Signing time: Thu 02 Jan 2025 01:47:59 +0000
ROA not before: Thu 02 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42970
IP address blocks: 91.213.25.0/24 maxlen: 24
185.140.196.0/22 maxlen: 22
193.200.182.0/24 maxlen: 24
2a07:1fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b8:66:28:a0:86:4e:de:ee:1d:63:6b:e4:ee:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jan 2 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15fdcdf0f3b599c42772c5c61e24148d03b69d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:66:32:fe:f3:07:be:6a:95:db:11:3d:53:
a4:36:ab:14:67:fa:ca:df:ac:90:40:4c:71:6b:cd:
8c:6c:c1:28:e5:b8:8e:6c:95:3b:19:5e:18:6c:c7:
35:39:ec:fc:9e:cf:e8:57:b6:21:e5:fe:6c:04:c6:
e7:e7:49:9b:ef:07:35:0e:02:58:17:f5:03:56:fa:
74:0d:21:9d:f6:d4:9d:83:f7:40:06:64:9a:57:56:
5d:ed:9f:f6:0a:bd:11:f9:36:6c:31:e1:e2:08:29:
2d:b9:91:90:fa:f9:52:d0:dc:d8:1b:80:ca:7c:9c:
4b:2d:33:51:bc:39:a9:4c:a1:6a:a8:30:4e:bb:bf:
b6:f8:ee:35:a4:d8:7d:f2:f8:11:f8:ae:49:6e:eb:
7f:2b:c6:44:c0:cd:3c:fb:f0:e2:fe:10:04:5a:ea:
6a:fa:a6:83:cc:be:3d:c9:31:27:89:2f:c0:b4:60:
64:3c:71:f5:fd:e0:20:9c:36:b6:56:5c:99:e8:5d:
63:7c:e1:69:c9:a4:ed:78:af:15:c5:33:55:f5:1a:
ef:a0:7c:38:e6:45:05:db:24:7c:bf:80:ea:e0:83:
30:e1:6b:d7:65:45:e8:ab:9b:1d:7b:74:b4:a0:b2:
e8:b7:16:4b:bc:52:ca:3a:13:f5:f7:38:0d:cf:ca:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:CD:F0:F3:B5:99:C4:27:72:C5:C6:1E:24:14:8D:03:B6:9D:1C
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.25.0/24
185.140.196.0/22
193.200.182.0/24
IPv6:
2a07:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:1a:67:ae:29:50:da:5f:6e:d5:1e:ff:5d:a6:cb:ba:ec:71:
14:88:54:18:61:54:51:17:f0:66:bc:78:7c:24:1f:1f:76:9e:
6e:0d:48:06:83:31:13:54:4d:d2:25:af:2f:90:7e:3a:a0:92:
58:e1:89:52:6e:d2:2c:dc:13:09:f6:ea:5c:e1:cf:de:ca:a1:
f7:b7:23:70:f0:2a:bc:10:1e:36:dc:44:d6:71:66:90:52:eb:
46:5d:fd:58:d0:22:1e:e3:65:70:08:09:2b:36:cc:d0:35:6e:
6a:a8:b1:11:fa:77:4b:19:1f:44:54:63:0d:73:5c:e1:69:2e:
60:80:47:17:30:c5:5b:1e:e7:43:62:06:f8:7a:23:b6:d4:f8:
f1:4d:99:5d:c6:ba:db:56:5e:b9:35:32:ef:83:15:0e:ab:65:
e5:94:cc:9a:c8:9e:23:37:b9:ea:94:fc:74:8c:e7:c5:96:dc:
9f:0b:64:c8:7e:3e:59:57:52:91:4f:2b:35:70:ca:04:35:f9:
21:5c:0d:2f:40:06:d8:7b:56:4a:d5:a1:67:39:17:19:98:1f:
9e:e8:0f:d0:09:db:e6:c6:73:69:64:cd:a2:33:56:ea:4b:54:
bf:93:c6:12:67:88:18:3f:c1:94:43:e6:7f:13:81:1f:ab:da:
82:37:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:14 2025 by rpki-client