Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/KFmrVFMv5VvGN18H4jdGIeWGvn8.roa
File: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (raw, json)
Hash identifier: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=
Subject key identifier: 28:59:AB:54:53:2F:E5:5B:C6:37:5F:07:E2:37:46:21:E5:86:BE:7F
Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial: 019428262629B1F2B2809E05970C5EB836EB
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/KFmrVFMv5VvGN18H4jdGIeWGvn8.roa
Signing time: Thu 02 Jan 2025 17:52:56 +0000
ROA not before: Thu 02 Jan 2025 17:52:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198812
IP address blocks: 91.239.147.0/24 maxlen: 24
2001:67c:1240::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:26:29:b1:f2:b2:80:9e:05:97:0c:5e:b8:36:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Validity
Not Before: Jan 2 17:52:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2859ab54532fe55bc6375f07e2374621e586be7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:bf:c5:77:3f:f5:36:6a:91:e7:3e:b8:9d:
0a:41:ca:61:c4:8a:50:e8:d2:d5:dd:56:38:87:e2:
54:35:09:db:67:c1:99:80:15:9e:16:a3:b6:1f:5e:
21:41:99:81:1a:96:2e:6d:27:8b:61:77:7e:75:fd:
03:88:0f:ac:96:c4:d4:4b:1d:d9:5b:88:23:10:a2:
7f:7d:bd:80:c5:9b:54:49:7f:13:77:39:d7:a1:45:
80:1b:f3:b2:d1:92:62:bf:6a:5c:35:78:85:ab:8b:
44:3c:2e:07:b6:3d:78:10:24:60:b7:61:ea:dc:72:
c1:8d:f3:b7:57:a2:17:56:4e:e6:67:40:32:54:44:
76:ec:45:ca:ff:bb:48:59:e6:26:fe:76:38:9f:42:
86:49:36:c1:f4:ea:be:2e:67:35:5f:fe:fc:41:9a:
ca:30:55:b9:81:ae:79:89:0a:55:05:ed:50:42:6d:
89:88:de:66:cf:24:f9:03:58:33:24:fa:f6:c7:fe:
3c:be:bf:bd:d3:cb:f2:42:93:ff:70:01:dd:bb:fe:
66:68:2c:20:4c:0f:c5:a3:b0:22:46:84:25:8f:6e:
c7:84:93:26:1e:df:7f:5d:47:6d:d2:16:a4:0a:c3:
41:8e:4b:3a:66:fb:6d:7e:1b:35:df:0c:aa:94:f9:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:59:AB:54:53:2F:E5:5B:C6:37:5F:07:E2:37:46:21:E5:86:BE:7F
X509v3 Authority Key Identifier:
keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/KFmrVFMv5VvGN18H4jdGIeWGvn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.147.0/24
IPv6:
2001:67c:1240::/48
Signature Algorithm: sha256WithRSAEncryption
5d:3e:96:81:7d:3f:df:2f:c9:b8:4f:3c:e5:f2:12:eb:39:93:
e0:61:de:84:d8:98:28:ec:b5:79:0e:d7:2a:16:d0:ea:ae:13:
29:a5:8e:1c:45:f3:a0:fd:74:b6:0f:38:26:e0:6e:10:6e:36:
c7:18:72:29:3a:e6:89:03:3b:94:c9:ab:85:01:32:37:da:07:
86:b0:97:14:b2:c7:9e:8e:78:92:ae:ae:5d:6f:ee:3c:75:9e:
02:52:e4:4a:c2:8b:f8:51:80:12:61:e9:89:2b:f5:6d:44:5e:
cd:5c:53:fb:07:50:58:67:1e:2a:fe:92:3a:40:ac:00:5c:71:
bb:71:2e:b8:44:bc:46:b1:30:ab:5e:08:9a:c0:66:00:0d:b7:
c8:80:fe:74:22:67:62:da:3c:e3:7d:a8:eb:a7:4e:da:b9:26:
4c:f1:1a:3c:fc:f4:bb:21:70:f8:51:dd:e9:bd:00:4a:e4:69:
1b:49:ce:ca:22:75:35:61:1a:89:38:a5:f9:b4:55:56:4c:d9:
8d:f8:a6:b9:2a:1a:36:f7:a0:a5:6c:65:57:d1:7e:63:23:6e:
a0:dc:d4:38:15:d2:20:ab:fc:65:c7:13:c3:5e:c1:c8:38:8a:
be:81:da:c5:f0:ef:79:5f:a5:61:fc:97:a0:bd:46:79:b5:ab:
69:c0:1a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:16 2025 by rpki-client