Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/2dOfhpir5Q5tClQufxJ63VN9ATs.roa
File: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (raw, json)
Hash identifier: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=
Subject key identifier: D9:D3:9F:86:98:AB:E5:0E:6D:0A:54:2E:7F:12:7A:DD:53:7D:01:3B
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 01942521DFEA4FD5835927E5157BD96C320D
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/2dOfhpir5Q5tClQufxJ63VN9ATs.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197941
IP address blocks: 91.230.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:df:ea:4f:d5:83:59:27:e5:15:7b:d9:6c:32:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9d39f8698abe50e6d0a542e7f127add537d013b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:b3:90:34:82:ad:3b:ae:42:4d:5f:ab:f1:
db:ac:1b:d1:86:d5:f4:db:1b:88:71:ec:3b:0d:f4:
e6:e4:bb:0b:1f:9b:92:4a:ad:5e:0f:a2:aa:85:e6:
31:c4:99:b7:e4:75:a8:bb:c8:4d:33:c4:63:05:72:
09:d3:bf:b6:40:af:bc:10:75:1d:6a:a0:1a:f3:b8:
c1:00:a7:20:3f:ba:c7:c3:32:cd:69:71:4d:16:88:
04:9c:13:c7:6b:02:98:c3:ba:10:bc:56:c0:73:f3:
93:80:8e:69:d1:42:85:5e:26:32:b9:7f:d1:a3:4f:
24:a1:b6:b8:03:14:73:18:4f:3f:93:08:f9:41:db:
80:a1:b4:e2:c3:81:15:8e:70:f3:31:95:91:34:f7:
65:8f:84:24:e1:68:d8:1f:72:4e:2e:23:53:4d:0c:
59:6a:6d:9a:36:3c:9b:49:fc:85:6d:75:ae:5a:b1:
8f:4d:5b:dc:e6:1e:54:e0:8b:48:11:8e:7f:5a:d6:
7c:67:38:a7:ab:cf:7e:3c:c1:70:40:f8:43:3c:7c:
6c:41:f1:8e:ad:62:ae:49:9e:74:e9:b3:de:a9:bd:
cb:35:4d:20:ca:0d:10:d1:f9:cb:6d:f8:df:ad:a5:
66:56:80:75:ea:0f:e6:ea:71:5c:a8:b1:ac:8c:5f:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:9F:86:98:AB:E5:0E:6D:0A:54:2E:7F:12:7A:DD:53:7D:01:3B
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/2dOfhpir5Q5tClQufxJ63VN9ATs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.85.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ea:cb:78:ed:17:aa:19:01:c7:75:aa:60:7e:ce:56:33:81:
59:3e:c6:d6:11:f0:71:6f:11:fb:7b:b4:2e:ee:1c:e9:38:5e:
e8:96:6c:47:b8:15:30:3d:9e:31:e5:ad:8e:5a:a1:53:40:0d:
ef:a9:55:c0:8c:71:b6:36:e5:e5:d1:89:21:63:0c:00:ee:4d:
f7:1e:db:3b:f8:f5:08:ff:20:39:bd:f8:52:1a:06:dd:66:9a:
1f:a9:39:26:10:e4:03:81:f0:84:4a:57:e5:73:57:e8:2c:89:
0f:fa:fe:66:01:ed:70:2c:12:df:64:5a:c3:11:77:20:7b:3f:
e1:8a:0d:d5:16:41:ed:a0:cc:5f:06:8a:6b:4e:54:5b:ce:b5:
8d:e0:13:13:f1:46:98:94:68:8a:6d:37:89:e9:08:a4:74:83:
8c:b4:2d:37:2e:9f:30:3b:09:45:54:89:5d:eb:c5:b6:54:35:
5a:f5:c4:d8:b5:04:39:2b:31:0d:0a:6c:af:55:66:68:cd:be:
91:86:76:0b:a1:fb:05:f9:8e:c5:63:7e:c4:e0:81:07:e5:96:
5d:c7:ab:84:be:51:18:06:d8:f4:f9:70:fa:e5:69:74:c8:2e:
f9:3c:67:be:5c:0a:1a:de:dc:d4:6b:f6:38:b5:ed:b3:4a:dc:
84:17:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:29 2025 by rpki-client