Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa
File: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (raw, json)
Hash identifier: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=
Subject key identifier: BD:9B:B7:79:88:80:C6:C3:4C:54:88:BD:75:11:8C:68:86:F7:CD:5C
Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial: 01948F86899FF18790B6DBF6F87392B401CC
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa
Signing time: Wed 22 Jan 2025 19:39:06 +0000
ROA not before: Wed 22 Jan 2025 19:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 91.237.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:86:89:9f:f1:87:90:b6:db:f6:f8:73:92:b4:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
Validity
Not Before: Jan 22 19:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd9bb7798880c6c34c5488bd75118c6886f7cd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:32:0d:47:fe:b3:72:a1:4e:9c:5b:0d:70:
b6:3a:d4:48:c4:6d:1d:d3:c6:7c:34:95:03:cd:08:
97:87:04:4b:0d:fe:16:c9:9d:18:74:e5:33:70:24:
02:d3:0b:6f:7d:08:52:b6:2d:44:e4:30:98:d3:2b:
56:bd:83:6c:a8:c0:51:33:c8:af:81:ba:48:df:c1:
27:6c:be:ff:c6:ea:43:63:a3:04:0e:f5:2a:c3:1e:
16:dc:59:d6:27:00:d3:76:d9:e3:b8:16:46:78:5c:
67:f8:3e:5d:1e:9d:dd:0c:58:f0:89:cc:b2:8d:77:
01:8e:e3:d1:c0:91:f8:2f:73:00:f3:aa:7c:b1:64:
15:70:ab:03:7a:83:ec:18:d8:0c:77:ae:96:67:9d:
71:0c:40:20:6b:ab:ba:1f:d0:51:cc:a1:13:2e:b6:
c4:57:ec:5f:f5:d4:6a:bf:0a:37:44:87:e2:5a:ae:
60:4b:02:a4:98:64:b9:cc:81:eb:a4:8d:ff:c4:7c:
4f:a9:24:54:c2:b7:8c:e1:15:80:c9:cf:23:72:45:
8c:0b:ed:88:f4:3c:2a:0c:66:d0:c3:a4:21:cf:7a:
15:15:17:f6:cb:5e:b0:b0:9f:d9:cd:f7:02:f0:c4:
a9:1b:6f:37:dc:78:92:b9:e1:7a:18:54:ff:6f:80:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:B7:79:88:80:C6:C3:4C:54:88:BD:75:11:8C:68:86:F7:CD:5C
X509v3 Authority Key Identifier:
keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:95:64:54:ab:b3:59:33:32:ae:bc:9e:25:3d:66:8f:9a:fb:
24:cc:f1:3c:f5:38:8f:1a:c0:11:1b:fb:13:fb:b1:94:03:7a:
66:7f:91:f2:58:51:c0:8c:e4:0a:af:c9:fc:28:95:94:47:59:
50:e1:3b:59:38:21:26:40:92:c6:5a:41:e4:47:23:a4:bc:cf:
a1:38:e8:f4:34:bf:2f:e7:52:8b:ec:2a:76:3d:10:dc:93:74:
3b:3f:54:9e:ef:95:ae:e9:03:09:d4:b4:e0:b5:b6:cb:1a:a5:
c7:1c:93:b2:8e:cd:08:c3:ce:e7:63:34:ad:31:69:30:bb:8e:
1b:26:76:38:5d:82:26:ec:e6:a7:ed:12:d2:96:aa:f9:e3:21:
7a:5c:3e:08:54:8e:d7:45:60:d1:32:7c:c7:2d:59:7d:08:b5:
fb:cd:7e:a3:8e:ba:4d:db:95:1c:3b:32:7a:d7:ab:56:75:e3:
1d:9b:3a:58:f4:bf:c2:b2:6c:47:2d:11:d3:8f:45:d0:35:60:
43:bb:4d:26:31:af:2a:9d:c2:4c:8a:6d:77:ff:c6:3c:6b:7a:
b5:5d:2c:37:4b:d8:d2:7e:ea:83:f8:e7:c7:d5:22:d9:0f:71:
44:a6:74:f1:19:99:b7:6f:b3:70:d5:6e:95:f1:01:2f:57:f5:
14:a4:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:05 2025 by rpki-client