Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/67STDF8xiOME9RNWXpEQKZiFvW8.roa
File: 67STDF8xiOME9RNWXpEQKZiFvW8.roa (raw, json)
Hash identifier: jjQZD20+917ImEuDA53t4U8Cib7GpjSkmZaz0rgBOVo=
Subject key identifier: EB:B4:93:0C:5F:31:88:E3:04:F5:13:56:5E:91:10:29:98:85:BD:6F
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4D00CD4F99F17BF5423DF00B41BB
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/67STDF8xiOME9RNWXpEQKZiFvW8.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133296
IP address blocks: 91.108.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4d:00:cd:4f:99:f1:7b:f5:42:3d:f0:0b:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb4930c5f3188e304f513565e9110299885bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:e4:e3:45:17:34:d5:44:88:54:4b:c0:60:
dc:24:c6:24:20:67:82:b2:30:c0:dc:8b:26:c2:66:
d0:37:83:5e:d4:9a:8d:e1:2d:3f:d0:9c:9c:af:81:
73:e2:41:b0:3e:2a:5c:a0:7d:ee:56:a1:b2:19:98:
ae:74:46:a8:f8:c0:49:2e:8b:ec:c2:1c:c5:bd:39:
77:57:36:50:47:fd:15:90:92:45:53:e8:e1:4d:43:
7f:66:37:a3:a5:c9:78:e3:96:55:cf:d4:0d:2e:e8:
cd:e3:9f:33:b3:35:4e:54:54:12:f1:20:9a:30:41:
af:3e:73:29:29:f1:12:94:4d:28:a0:99:3d:61:d0:
63:4c:4d:61:4e:a0:73:9c:f9:ce:b7:5b:e4:a4:2a:
67:e3:1c:a4:dc:09:03:ce:5b:33:b6:06:41:47:dd:
d7:ca:a3:5a:52:f4:09:3a:20:76:e4:da:9e:60:8d:
ee:5f:2f:71:5d:1c:79:54:e0:a4:26:28:78:36:d5:
b2:f7:82:12:d1:53:44:7b:a0:19:d3:62:83:c5:53:
55:73:03:9c:29:bd:5e:27:3d:80:6d:c3:83:75:9c:
94:32:3a:32:be:15:a0:8f:13:00:3c:5c:95:af:f5:
0d:39:6e:aa:26:68:fa:40:20:9e:09:23:60:84:cd:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:93:0C:5F:31:88:E3:04:F5:13:56:5E:91:10:29:98:85:BD:6F
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/67STDF8xiOME9RNWXpEQKZiFvW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.64.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:51:61:12:31:ac:98:84:22:63:28:8a:8d:e8:0a:a9:8b:16:
6e:a9:bb:68:0a:fb:f2:90:36:52:ab:23:d4:e1:0a:50:bd:68:
5f:a8:47:3f:56:60:49:53:00:93:a0:6b:2b:79:3c:8d:4e:4e:
52:09:56:70:a5:0e:b4:e1:3f:b2:d0:8b:5e:7d:0d:0a:c7:e3:
88:5a:ce:0f:55:21:0c:58:a4:65:5d:0c:9c:28:3e:ab:78:a2:
4d:82:99:22:48:0a:26:c4:29:61:f0:3c:e1:2a:dc:84:cd:23:
91:c4:05:ba:68:63:74:33:07:19:3e:03:11:b7:6b:e1:68:f3:
f4:6a:1b:e2:8e:f9:ff:61:ec:2e:f9:59:6d:9d:84:8b:4f:66:
45:95:c7:71:eb:70:62:87:70:6e:61:76:cf:86:e4:e8:da:4b:
f1:52:89:1b:cc:b5:c6:05:0c:3d:32:f9:58:ab:f9:43:62:cc:
7a:20:5f:93:10:c0:ba:8b:71:ec:0c:a6:45:2a:f0:5f:3d:66:
ed:44:ce:fb:28:06:71:c1:09:87:16:1d:6c:c0:1d:b2:1b:54:
cc:cc:cd:1c:86:f3:4f:dc:b5:cc:09:69:c0:6c:f2:96:4d:79:
da:d4:2e:e7:a9:15:fe:5c:8a:21:39:16:13:50:8e:2e:05:ac:
7a:06:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:14 2025 by rpki-client