Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/e423f_-NPWho20AuEAOYRpyN6jM.roa
File: e423f_-NPWho20AuEAOYRpyN6jM.roa (raw, json)
Hash identifier: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=
Subject key identifier: 7B:8D:B7:7F:FF:8D:3D:68:68:DB:40:2E:10:03:98:46:9C:8D:EA:33
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01942521E485BC0ABA9225D872696379366E
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/e423f_-NPWho20AuEAOYRpyN6jM.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205241
IP address blocks: 91.126.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e4:85:bc:0a:ba:92:25:d8:72:69:63:79:36:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b8db77fff8d3d6868db402e100398469c8dea33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:96:62:2b:a4:d8:c4:84:62:0a:e9:c0:9e:
6e:bb:5f:34:e0:8d:39:df:81:75:66:46:9c:83:8b:
99:5e:a9:4d:45:48:d9:ff:92:9f:22:4d:2a:25:1d:
57:a7:73:8a:44:da:39:05:fe:99:51:d0:da:58:66:
7b:d3:9f:80:da:76:d5:e1:d0:77:83:b4:7c:57:97:
bc:5f:9e:45:e8:98:9b:19:76:2a:32:82:73:e1:d7:
96:7c:d1:27:3f:df:57:79:5f:d0:c2:98:ca:40:97:
12:19:65:20:13:c9:10:12:d2:7b:a2:f5:a9:8b:cb:
09:cd:81:5f:9d:65:c1:e7:f3:21:59:8f:8e:41:bc:
36:e1:ca:9b:28:46:0e:42:0f:08:9b:ea:5b:d2:91:
ea:00:18:a6:52:8e:9e:b3:15:f3:96:02:6a:e1:58:
ce:8d:16:14:1b:d5:fb:33:a3:b8:3f:c7:2a:ed:9c:
33:74:16:0b:2c:bd:98:4b:80:56:10:fe:b8:00:9b:
4c:2f:cc:cc:14:6b:f4:5c:92:76:c7:3d:57:e6:96:
d0:db:d5:f1:fe:17:ff:eb:32:ae:78:70:4e:fb:ba:
96:6c:6c:3c:25:53:63:6f:5d:46:94:c0:4a:8f:05:
d7:21:4d:7c:39:74:96:9c:e1:06:ad:5f:8f:63:7c:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:B7:7F:FF:8D:3D:68:68:DB:40:2E:10:03:98:46:9C:8D:EA:33
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/e423f_-NPWho20AuEAOYRpyN6jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.77.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b4:b4:b1:5e:9c:cd:27:ac:69:5b:d7:bc:f2:b2:ab:82:79:
e6:92:f7:d9:fe:f2:8d:4b:52:e1:38:85:14:38:c2:5a:fa:eb:
a1:35:2c:a7:f3:77:b3:de:ad:af:64:cd:d3:86:f4:c5:85:6b:
a7:9f:43:ec:6e:ec:fe:13:de:9b:0d:7f:75:9b:5c:0b:df:98:
9a:21:f4:83:c2:14:03:67:80:df:ae:18:ae:38:99:a4:7e:92:
dc:a5:a1:ac:58:df:0a:ed:ea:25:ad:d7:b0:5f:31:a0:c9:7c:
ad:f4:a1:49:0b:dd:df:3a:73:f8:9f:50:cb:78:53:f7:59:69:
60:40:52:51:90:37:1d:c1:8f:76:71:aa:e4:63:90:75:30:b3:
70:c2:ff:66:81:01:8d:7c:9b:c0:2d:49:1f:97:e4:dc:38:48:
f9:91:a8:1b:83:37:e3:bb:87:e5:2b:dd:63:84:d3:d7:61:46:
f5:d7:b2:81:fa:d0:82:b0:93:9f:9e:78:0f:ae:31:b7:de:73:
d1:34:3a:32:80:e5:97:3c:da:43:28:e3:88:99:09:a1:61:46:
1e:d9:f7:5b:1f:f2:f7:72:9e:b6:29:f6:09:de:de:8d:1e:b4:
e8:62:0b:05:ce:f1:62:92:31:16:f6:ad:99:c3:f4:98:6d:f1:
f0:c7:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:23 2025 by rpki-client