Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/Cre1atzMDwt4GowPQslT1BJNz70.roa
File: Cre1atzMDwt4GowPQslT1BJNz70.roa (raw, json)
Hash identifier: AgobKkjGt4zwBE8+8mA/MF95V2kw1GXZGBf2IpysMAU=
Subject key identifier: 0A:B7:B5:6A:DC:CC:0F:0B:78:1A:8C:0F:42:C9:53:D4:12:4D:CF:BD
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 019422FC0B9E11564D332A3EBAB50D5F0E10
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/Cre1atzMDwt4GowPQslT1BJNz70.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 91.194.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0b:9e:11:56:4d:33:2a:3e:ba:b5:0d:5f:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ab7b56adccc0f0b781a8c0f42c953d4124dcfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:74:e8:bc:36:f3:ce:08:48:ea:b0:ae:9a:
0d:95:08:ff:e0:f4:7f:2d:a6:30:ca:05:26:2e:5e:
45:4c:52:21:7a:7c:30:aa:38:da:2f:e3:8b:b4:10:
20:12:e8:98:c2:a2:c0:76:1a:c4:d8:5a:57:c1:0e:
74:02:0e:c0:31:51:90:f9:83:dc:3f:4d:0e:55:b6:
e9:48:73:dc:3f:f4:4c:4f:91:8f:c6:2d:89:c3:20:
cb:13:2a:d4:ce:0e:dc:02:d8:73:34:13:2f:79:82:
61:29:47:cb:45:9c:7b:51:70:7b:81:a7:de:f7:33:
d2:a0:4b:80:c8:53:1f:73:b0:0e:46:ad:7d:44:db:
bd:dc:8d:4e:c7:46:35:43:b2:00:97:65:2f:e6:aa:
ad:b3:40:f5:31:b6:bb:92:a5:ae:42:37:bd:3a:a9:
d9:b9:15:12:21:42:7e:d6:56:00:7b:23:4a:9b:33:
1b:48:29:76:48:d0:46:fd:40:2e:ef:0b:79:d0:f2:
75:2c:c9:38:f9:24:04:f4:bc:1f:4b:27:5f:dc:5e:
c0:ab:64:f2:cd:2a:97:1f:13:32:88:6b:e2:a9:a7:
75:e0:f9:b0:8f:62:df:39:3c:8e:ca:88:60:e4:3b:
2a:e8:ab:d3:ae:e4:3f:8e:08:70:93:78:95:e7:72:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B7:B5:6A:DC:CC:0F:0B:78:1A:8C:0F:42:C9:53:D4:12:4D:CF:BD
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/Cre1atzMDwt4GowPQslT1BJNz70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.85.0/24
Signature Algorithm: sha256WithRSAEncryption
56:60:45:13:af:8a:d8:92:b2:33:a6:57:db:11:a1:d2:25:13:
49:fc:7e:1b:0f:d6:67:e2:96:a2:e6:16:fc:b2:aa:e8:a0:45:
28:b4:e1:23:9c:73:e0:10:bd:3a:1a:1c:9a:65:65:af:77:a6:
36:8b:ac:d8:d6:23:b8:97:87:89:07:29:6a:d5:8c:ed:a6:26:
75:7e:ab:87:09:96:ee:2d:fb:93:bc:dc:e2:31:d5:29:0f:f1:
46:30:e5:f5:b5:09:bd:1b:5b:3c:c6:4e:1e:d8:58:35:71:3f:
32:44:ea:c6:a4:e9:c9:9f:01:82:b5:91:ce:e4:08:54:d6:01:
d1:27:0b:13:5b:3b:f3:28:de:c3:d2:ff:a8:12:4c:dd:6b:a1:
f9:61:9b:4c:f1:ea:53:26:49:60:36:f2:ca:05:7b:67:fc:22:
06:0b:65:6f:a1:d9:75:9e:a3:d9:dc:82:fc:0c:86:0e:7d:fc:
ad:d0:9f:0e:66:2c:3d:96:94:08:ce:68:2e:18:91:3c:aa:ce:
39:67:9e:4a:38:8c:2b:f1:23:2e:eb:36:12:ff:d0:36:fa:6a:
74:fa:2f:ab:7a:49:e7:20:50:6a:41:cd:b0:e0:bb:ea:4f:b0:
86:79:16:b7:fc:09:6a:8a:ed:45:ff:e5:7f:a8:23:fc:a1:20:
bf:d6:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:03:33 2025 by rpki-client