Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/pP7tyuuRn66UIb06Z8juPizzBlI.roa
File: pP7tyuuRn66UIb06Z8juPizzBlI.roa (raw, json)
Hash identifier: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=
Subject key identifier: A4:FE:ED:CA:EB:91:9F:AE:94:21:BD:3A:67:C8:EE:3E:2C:F3:06:52
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 019426D99C848F3905771454F340617967C8
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/pP7tyuuRn66UIb06Z8juPizzBlI.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 91.194.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9c:84:8f:39:05:77:14:54:f3:40:61:79:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4feedcaeb919fae9421bd3a67c8ee3e2cf30652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:8c:5e:3a:08:43:4e:d3:49:be:53:55:f1:
d2:c7:f0:70:73:61:e7:4d:e2:18:60:f7:99:20:72:
56:4f:3f:96:56:d9:3d:13:fb:03:50:13:22:c3:0f:
03:80:3f:c5:eb:bf:b9:e3:87:5e:17:6d:f6:56:c0:
39:52:40:ac:bf:f9:17:af:ad:f5:d3:ee:09:12:5c:
9b:f3:b1:e6:27:33:29:9e:d8:5d:f7:81:68:2c:7f:
50:f4:13:42:66:40:7c:9b:6e:57:cf:36:62:a5:25:
41:60:9e:1e:86:d6:12:31:fc:1b:03:48:ee:03:5b:
1e:5e:9a:c9:06:37:b9:01:c1:23:75:12:b4:90:b6:
a2:21:b5:8a:de:36:99:0d:c3:67:dc:eb:05:31:cc:
1d:4c:61:57:34:12:f6:a1:19:a5:8c:7c:ca:df:88:
71:9e:ab:56:3a:34:eb:2a:8f:a4:00:07:f7:35:d4:
81:55:dc:9d:aa:0e:6a:c0:64:ef:86:f8:a8:f5:59:
4b:c1:c3:25:8f:d6:d7:3c:a3:90:66:02:73:6c:52:
a1:33:38:99:65:96:c2:56:2d:b1:09:e0:05:ad:9f:
cf:c6:44:b2:2a:d5:8a:76:24:c5:a5:bc:87:67:1f:
64:04:72:d8:95:25:dd:d0:e5:82:a6:86:b9:50:e2:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:ED:CA:EB:91:9F:AE:94:21:BD:3A:67:C8:EE:3E:2C:F3:06:52
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/pP7tyuuRn66UIb06Z8juPizzBlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.48.0/23
Signature Algorithm: sha256WithRSAEncryption
83:eb:ae:0c:f5:9f:45:52:2c:e3:eb:f1:64:e7:cd:69:f4:e0:
47:90:dc:e8:f1:b7:83:9c:26:f3:f3:53:b6:47:66:b1:f8:c8:
8e:66:98:ba:00:1c:2d:ee:cd:4b:ed:c9:f4:4b:59:77:13:83:
a0:83:19:0f:fd:db:0c:f4:04:41:25:5c:13:e5:16:da:71:4a:
9b:07:35:12:1c:66:8d:7e:d4:b2:fd:73:66:bf:72:0d:03:d4:
f6:fb:82:de:17:6f:07:7c:6f:af:2f:9d:82:0a:02:3c:75:c2:
7d:c3:fd:0f:73:57:6e:ef:77:78:dc:07:e7:78:18:ab:20:4b:
e5:0b:97:26:e2:04:0e:02:a3:e5:54:3d:eb:ba:84:dd:63:97:
1f:97:ff:9c:fb:d9:ee:32:17:86:59:12:df:b9:81:7a:17:ec:
df:14:75:e4:ee:74:18:fd:42:72:92:ba:96:80:57:5a:d8:00:
0c:d7:70:5a:9b:df:04:7f:70:9d:ed:e4:5f:5c:ee:3f:db:de:
af:50:b1:04:0d:44:4f:17:e3:75:ff:0e:df:83:e0:7a:3e:1d:
95:e7:c3:3b:a4:dc:a8:f2:5d:c1:9e:92:d6:11:1d:ae:55:c7:
9e:ab:ab:c5:8f:fe:75:93:ce:17:98:32:13:91:f3:03:1d:12:
45:3c:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:10 2025 by rpki-client