Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/dOLAcZqxH53yb4L2nTWOqgwfPdw.roa
File: dOLAcZqxH53yb4L2nTWOqgwfPdw.roa (raw, json)
Hash identifier: 2YFuU3G8qtklSATjn4cas6IxZSziYEVnTqShHhdL/7w=
Subject key identifier: 74:E2:C0:71:9A:B1:1F:9D:F2:6F:82:F6:9D:35:8E:AA:0C:1F:3D:DC
Certificate issuer: /CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Certificate serial: 0194206849059A14D7F5C1D76240BB578893
Authority key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/dOLAcZqxH53yb4L2nTWOqgwfPdw.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51816
IP address blocks: 91.220.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:49:05:9a:14:d7:f5:c1:d7:62:40:bb:57:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e2c0719ab11f9df26f82f69d358eaa0c1f3ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:62:8a:e9:85:93:3e:dc:ec:46:44:01:09:b9:
43:47:de:69:e8:63:5a:70:76:dd:1c:b8:a1:ec:56:
97:7e:a0:bb:14:55:f4:19:6d:a1:f7:57:19:10:3b:
92:16:c3:6b:0c:5b:8e:16:f3:19:3b:3e:93:2c:33:
e5:8d:8a:b2:3d:7c:37:8e:07:f5:44:d0:4e:51:fc:
cd:63:27:d5:24:1f:5b:cc:0b:88:0f:06:3a:e4:b0:
65:fd:2b:d8:8b:48:ae:b4:12:14:a1:3f:3b:4f:75:
04:80:9c:81:18:01:e4:00:1d:01:b3:28:70:d4:89:
7e:4b:16:ea:c0:42:fb:2a:7f:d3:26:df:3c:1c:20:
18:0b:10:d3:49:5e:67:61:7e:94:00:f6:42:e4:d1:
03:dd:36:51:32:f7:54:a2:bc:fc:48:87:12:6c:75:
b4:33:8f:91:93:53:e5:78:7c:de:a1:6e:71:33:ea:
11:a2:97:1e:59:8e:4a:c3:a7:75:20:0e:92:26:99:
07:37:ec:b8:b9:09:b5:ce:40:4d:ec:9e:48:eb:b8:
be:53:c0:c5:21:2f:35:e1:11:cb:a1:6f:d6:7a:8a:
e5:e3:84:53:4c:e2:bf:6c:af:81:08:67:91:89:04:
95:88:2e:6a:00:5e:ef:c6:74:6c:d9:51:a4:09:d9:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:C0:71:9A:B1:1F:9D:F2:6F:82:F6:9D:35:8E:AA:0C:1F:3D:DC
X509v3 Authority Key Identifier:
keyid:38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/dOLAcZqxH53yb4L2nTWOqgwfPdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.107.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9f:e1:44:52:1b:10:6d:b1:10:90:9f:4e:32:4b:d6:f3:d1:
06:93:93:47:55:12:5c:aa:20:35:1b:62:6a:53:52:a7:f1:90:
89:b3:c5:a4:5e:13:36:91:ed:1c:94:11:48:71:bc:7b:c6:03:
b7:a9:13:45:79:b1:55:f2:6f:9b:80:37:00:82:13:94:a8:09:
ea:1f:08:f2:0c:81:91:ca:29:9b:16:59:cc:7b:90:ad:55:e8:
26:03:6d:17:b2:fa:2c:b1:4e:f3:87:45:98:37:5c:13:28:ba:
f8:0f:db:c4:bd:3d:3b:0b:a5:38:0e:e7:79:1b:89:f6:6e:2c:
ab:da:4d:11:89:da:d6:34:56:95:a4:89:2a:b9:6d:db:81:06:
9d:e8:4e:2f:a6:92:01:1e:58:c2:6f:06:c2:53:8c:c9:25:65:
9c:95:f2:9a:1e:5a:ca:44:27:b3:c7:ee:fe:7e:86:1c:2a:09:
33:14:15:ec:c9:73:1d:c6:97:df:85:4d:9b:ba:18:65:8e:8d:
a8:1e:9e:1a:4a:e9:25:3a:86:4e:93:c7:43:7c:27:0e:d0:9d:
73:20:be:46:0c:11:c9:4a:ab:3f:67:93:12:c3:59:de:f6:27:
2f:23:04:b6:83:f2:00:06:c5:69:8d:b3:9d:70:0f:f3:2b:7f:
2e:45:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:02:57 2025 by rpki-client