Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa
File: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (raw, json)
Hash identifier: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=
Subject key identifier: 6F:D4:B0:81:BC:A2:F1:A4:C7:D4:ED:0E:0B:ED:88:ED:F5:EF:19:D8
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 019425FDDDC9F690C546A769D17AF1DC78C3
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 91.214.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dd:c9:f6:90:c5:46:a7:69:d1:7a:f1:dc:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd4b081bca2f1a4c7d4ed0e0bed88edf5ef19d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:fb:69:10:7d:2c:d5:7d:ec:6a:45:62:a8:
71:e4:89:b2:0e:cc:49:49:4b:ae:61:72:07:15:17:
0c:af:19:bb:33:fd:7c:e3:e6:79:de:36:a0:8c:d8:
32:05:10:75:f4:06:0b:b8:95:f5:24:ec:fa:65:02:
49:b3:c4:90:ad:35:8f:3c:0e:45:18:3a:b7:b2:cc:
67:89:88:bf:c5:21:c3:57:2d:3b:5b:a6:9d:fd:37:
14:c2:a1:fe:7a:3d:e9:fb:bf:73:fb:1a:b1:3d:ee:
5f:51:b6:89:28:6c:d4:ec:75:f8:f6:21:6e:43:f7:
dc:2e:30:68:d1:64:43:5e:0b:8a:02:ed:c5:ea:39:
48:04:75:34:5b:62:16:94:20:65:7c:3f:cf:10:10:
6a:43:e7:04:a1:9c:7d:f2:54:30:76:cb:1d:ec:03:
37:24:fc:5f:8e:f9:03:b7:3e:f2:6f:ae:25:f3:77:
17:2e:fd:d6:7f:32:71:ad:b1:b2:4c:40:7b:85:44:
c2:3e:bd:ee:3f:36:8a:03:81:16:dc:86:00:3b:e8:
11:8b:4a:0b:87:3f:e0:d1:45:b8:6d:ff:99:8e:d4:
37:0b:cd:04:e6:0b:78:da:2f:83:28:3c:58:c9:64:
92:f4:b3:7b:f1:71:ee:2d:39:0a:42:02:2a:5b:ca:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:B0:81:BC:A2:F1:A4:C7:D4:ED:0E:0B:ED:88:ED:F5:EF:19:D8
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.78.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b8:7b:f8:22:1c:12:ec:d3:70:7c:78:e3:c0:f0:99:74:4d:
32:81:13:95:dd:3c:0d:a7:1d:fd:6c:5c:7c:e0:cb:9e:97:42:
c4:a6:fe:5a:b3:b2:e1:ba:91:85:71:cf:17:1a:cb:23:c6:fa:
39:ad:af:02:64:86:1f:3e:8f:30:5a:d2:34:88:e7:7c:60:fc:
76:d3:3a:ce:11:c6:e0:a1:26:b0:1e:d5:f6:a7:ca:c7:f7:51:
73:5b:31:48:6c:2e:26:31:a7:e0:ab:9c:c5:da:75:86:8b:c2:
b5:bb:7b:fe:95:82:a9:d8:4b:20:d1:99:f7:f8:a7:44:5d:6d:
04:9f:ce:21:70:ee:32:42:24:9f:32:0d:2d:4e:81:bf:91:2c:
05:b6:8a:72:a2:98:4d:83:c8:e2:01:21:21:58:4f:22:06:53:
cb:9e:3c:cb:9f:fb:c6:2b:a5:9e:56:04:c5:b5:46:a6:96:8b:
49:22:38:dd:39:1a:cb:02:d6:34:cf:46:b9:66:6d:c4:06:f1:
95:35:5f:34:66:b8:00:41:80:35:29:fb:d9:9c:93:b5:71:a6:
6d:24:33:8a:ca:26:9a:6e:1a:1b:5e:47:9a:13:9f:72:58:49:
74:77:07:94:23:fc:22:1e:f0:af:6d:ea:e9:28:3b:e3:23:5a:
55:84:8e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:30 2025 by rpki-client