Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/_3NEeq6GOXOiLdZdEWjfBKtdhh8.roa
File: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (raw, json)
Hash identifier: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=
Subject key identifier: FF:73:44:7A:AE:86:39:73:A2:2D:D6:5D:11:68:DF:04:AB:5D:86:1F
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 01941F8C3217DD3DDF3C83C9DDD2F78F7902
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/_3NEeq6GOXOiLdZdEWjfBKtdhh8.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42112
IP address blocks: 91.199.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:32:17:dd:3d:df:3c:83:c9:dd:d2:f7:8f:79:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff73447aae863973a22dd65d1168df04ab5d861f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:61:83:4c:c9:35:b3:a2:02:2e:83:bf:07:
b1:6d:e3:05:8f:68:9b:24:97:4e:a5:92:7a:0b:49:
76:61:7a:0d:6d:ae:21:8a:52:16:54:df:8c:cb:f0:
85:57:9b:90:57:5d:5f:56:d8:71:42:70:3d:c3:06:
bc:7a:ff:60:c7:59:78:67:0e:54:f1:20:14:f9:7e:
fd:8c:62:3b:d0:8e:29:cb:42:aa:3e:45:df:cd:0e:
9f:b3:b5:ec:15:20:eb:f5:5a:95:63:1a:d7:c2:f2:
8c:f1:5f:f0:5d:e3:ec:c2:b9:28:ff:46:01:c9:7f:
79:33:8d:62:d3:db:44:e3:31:87:b8:b3:1b:23:50:
44:f5:bf:ec:fa:13:08:c0:3e:60:13:8e:7e:35:d0:
74:82:de:fa:e1:02:7d:49:3b:ff:93:8f:b8:dd:f6:
5c:7d:a2:8c:d5:55:98:3b:38:1f:39:40:15:25:8a:
0e:9d:38:5c:68:11:d0:e2:a0:17:e6:d3:2b:26:b7:
aa:d4:8d:bf:a2:f6:f9:c7:80:0d:76:47:df:31:e4:
1b:a2:6f:01:ec:6b:a0:ac:3f:eb:fa:4c:17:48:75:
32:c4:2b:e0:ee:1a:3e:8f:00:0d:f2:1b:65:01:32:
d7:49:c6:2e:08:43:70:02:fc:7a:12:a9:d0:93:19:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:44:7A:AE:86:39:73:A2:2D:D6:5D:11:68:DF:04:AB:5D:86:1F
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/_3NEeq6GOXOiLdZdEWjfBKtdhh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:34:69:37:e7:40:48:ff:27:e2:b8:00:dd:ef:12:7e:99:60:
72:28:f8:9c:0b:89:da:28:bd:3e:eb:05:76:71:f6:b7:bf:04:
07:3b:41:02:6a:22:3f:ae:22:1b:07:51:94:29:b7:70:44:16:
27:42:72:1b:f6:c9:74:c8:1f:4c:ab:b2:ba:cf:5a:e4:6e:b6:
1b:41:0b:06:36:47:6e:2a:e8:44:f6:75:02:5f:b9:b9:65:b9:
2c:72:1c:30:39:07:ad:19:d7:62:1e:19:00:ae:13:10:54:c5:
48:e2:89:93:f7:fb:64:2e:8c:07:3d:29:2d:cc:fb:7d:48:37:
f9:6f:66:96:d1:07:6e:77:fd:d9:3e:c7:39:15:3c:56:6b:ae:
39:10:e4:d2:d2:6f:de:fd:22:78:d4:06:98:ca:20:14:39:5b:
a2:47:65:4d:09:e3:00:24:62:e4:37:42:68:04:dd:9e:a1:e6:
f9:c7:64:e7:80:c7:37:55:42:cf:6b:eb:b7:c6:92:6f:6b:d2:
43:62:72:fe:c7:46:39:48:4f:52:29:f8:9b:a3:9f:e1:16:fe:
47:f1:41:03:0e:ba:b0:e7:38:38:32:b7:9a:d7:3a:68:f2:22:
ad:3f:8e:cc:4c:75:ad:18:6d:1c:9d:5a:9e:7b:2a:de:5d:89:
d5:93:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:45 2025 by rpki-client