Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/8hWTGCLXxSwODB2tKv40DFwDRSA.roa
File: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (raw, json)
Hash identifier: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=
Subject key identifier: F2:15:93:18:22:D7:C5:2C:0E:0C:1D:AD:2A:FE:34:0C:5C:03:45:20
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019426D9768982EA9856DD9C46AE5ADBD0D5
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/8hWTGCLXxSwODB2tKv40DFwDRSA.roa
Signing time: Thu 02 Jan 2025 11:49:33 +0000
ROA not before: Thu 02 Jan 2025 11:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 91.208.180.0/24 maxlen: 24
91.236.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:76:89:82:ea:98:56:dd:9c:46:ae:5a:db:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jan 2 11:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f215931822d7c52c0e0c1dad2afe340c5c034520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:ad:f2:10:1b:5e:2a:67:e8:f5:51:3b:06:
28:c8:66:49:85:8a:7f:fe:08:ea:56:c1:cb:20:24:
01:46:1f:44:60:a6:e8:6f:6c:7e:dc:f1:58:a2:3b:
8a:bb:54:34:b2:b1:f5:bc:59:d5:32:db:ed:39:3a:
d2:06:a4:b7:28:8e:e0:64:bf:9b:6f:a7:34:d2:60:
df:f8:a8:8d:3e:a3:26:1b:9c:9f:6a:89:70:bc:37:
93:20:dc:cb:4a:e5:39:0a:2d:fd:72:c7:fc:05:5a:
2f:03:d0:a0:64:90:fb:9a:ac:ad:2c:da:d6:fb:f7:
0c:11:38:b2:cc:b5:9f:65:1f:c1:22:88:eb:55:f6:
ff:1f:2d:c0:4e:e3:cd:87:b8:b3:5e:f3:3e:2a:f9:
de:b6:19:54:5a:c3:45:8d:18:00:14:d9:98:03:5f:
e4:d3:1f:3f:52:d8:d3:4f:43:e8:0b:6e:3c:8a:00:
a0:80:61:b1:e6:dd:b7:92:2c:55:c1:66:5e:68:b6:
5e:ad:09:1c:3a:11:f1:1a:13:d7:40:d6:05:f5:ec:
39:ef:97:af:fb:65:20:fd:ba:f2:91:1a:0e:fe:51:
7b:2d:59:dc:90:14:d8:24:6b:f0:91:3f:27:a3:b3:
f4:5b:ca:19:50:b0:fa:20:ec:59:a1:7f:5f:5f:9d:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:93:18:22:D7:C5:2C:0E:0C:1D:AD:2A:FE:34:0C:5C:03:45:20
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/8hWTGCLXxSwODB2tKv40DFwDRSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.180.0/24
91.236.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ab:57:09:27:46:d8:2c:59:5b:37:9b:81:ba:e9:75:28:87:
65:86:e3:e9:d4:61:9e:52:1d:8d:fa:19:4b:58:a4:f5:e0:d8:
59:74:2d:5b:34:e2:96:09:8d:e4:1e:bf:7c:3a:04:15:c7:eb:
91:3c:47:f9:74:65:98:61:09:00:0d:53:63:10:c7:3b:90:c3:
7e:4b:e3:94:fb:89:cf:6d:11:5d:03:30:8a:65:b2:5b:26:cb:
1f:b4:de:e7:86:85:7f:35:6a:0f:cd:77:4f:e5:a6:5e:3a:c2:
ca:ae:d4:d3:58:18:d4:9e:4b:fc:d6:e5:16:91:97:0c:73:66:
63:9d:0f:05:60:aa:e5:c1:82:39:b5:a2:df:3e:9f:89:95:bb:
f3:27:1d:80:d5:76:e5:a8:8d:e8:fc:94:b5:89:98:f5:5a:bc:
b0:46:ed:a3:e7:c1:6b:42:d3:77:a5:7e:78:a4:a9:37:b1:d9:
b7:f4:90:b0:cb:d9:b0:c1:75:d9:68:d6:2c:61:d5:a4:0d:53:
c0:0b:df:d1:fc:58:5f:54:e8:43:e9:a9:a9:b5:55:b9:c8:82:
9f:1b:ab:23:1d:88:45:bd:8a:ad:e6:b6:98:3a:d4:72:53:7e:
ad:42:05:6a:ef:dc:3f:e0:4f:a5:17:54:60:68:31:b1:c5:35:
7d:7c:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:08 2025 by rpki-client