Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/I3Uc8V053uFj5fj5J5RtiNnfgAo.roa
File: I3Uc8V053uFj5fj5J5RtiNnfgAo.roa (raw, json)
Hash identifier: b0A6+wRSSjRxTpI7kD0JYl/s4YiHTAyHBtwpK4TyBS4=
Subject key identifier: 23:75:1C:F1:5D:39:DE:E1:63:E5:F8:F9:27:94:6D:88:D9:DF:80:0A
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B67D970EF7081816084E6853645CBE
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/I3Uc8V053uFj5fj5J5RtiNnfgAo.roa
Signing time: Thu 02 Jan 2025 15:50:58 +0000
ROA not before: Thu 02 Jan 2025 15:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57899
IP address blocks: 91.236.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7d:97:0e:f7:08:18:16:08:4e:68:53:64:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23751cf15d39dee163e5f8f927946d88d9df800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:d4:d3:5f:5a:da:20:06:7b:82:5a:fa:20:
69:f1:83:87:80:38:98:43:fc:79:99:91:48:72:e4:
e8:ba:a3:55:dd:e7:e1:17:8e:92:ed:a2:8b:2c:6d:
2c:e1:c9:6b:f6:44:45:ab:64:05:20:e9:fb:45:40:
3c:f1:56:f0:ee:b7:3a:76:12:4b:30:95:a8:63:92:
cb:23:39:ce:37:bb:cd:db:bb:e6:be:77:7e:78:fc:
86:f0:e1:c5:d6:c5:f9:e0:6e:44:44:eb:ac:19:56:
af:d4:cc:34:a9:4a:7b:fe:6a:ee:be:84:9f:31:77:
05:94:24:65:51:b4:03:b9:e2:4a:0e:fc:d4:b2:c9:
8a:1c:d3:9a:b9:51:cf:0d:e1:f8:4b:3d:7b:77:eb:
70:21:3e:f1:14:d3:27:a6:7e:d7:33:96:1c:51:56:
fc:38:8c:7f:e7:26:1b:fc:ba:49:fa:72:0a:9d:2a:
94:a6:e5:e2:37:97:12:58:dc:b9:83:a4:b5:d1:3b:
65:28:ff:e1:26:28:d4:6c:1b:75:fb:2e:4a:f9:c5:
33:93:6c:9b:bf:ec:e9:e3:33:0d:6b:e2:70:f9:ed:
19:41:6c:dd:04:03:9f:20:1d:e6:45:b0:f0:c7:5d:
74:78:ae:19:1e:6f:36:d7:44:94:23:1f:90:be:2d:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:75:1C:F1:5D:39:DE:E1:63:E5:F8:F9:27:94:6D:88:D9:DF:80:0A
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/I3Uc8V053uFj5fj5J5RtiNnfgAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.135.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7e:c3:16:d8:9e:b1:5c:91:7c:fa:c9:85:36:09:58:17:b6:
83:3d:f5:6d:ba:33:cd:a8:cf:3f:99:05:bb:34:fd:92:c3:74:
87:03:93:3f:89:81:43:81:1c:9d:42:94:fc:0e:2c:52:c2:c9:
d3:4f:9a:54:65:8b:81:31:55:a2:2c:45:7f:a5:5e:41:19:6f:
2b:ff:95:6d:8d:c2:b0:02:1b:47:86:30:4d:db:e7:7c:69:7e:
22:88:53:95:64:5a:82:19:49:8c:d7:81:1e:34:1f:9e:17:5e:
6f:4d:a3:37:ff:08:2a:86:2a:50:3c:bf:84:bd:6b:90:7a:9c:
08:0d:55:12:6b:f0:52:70:7a:67:38:2c:89:28:14:cf:81:95:
c3:38:54:19:45:6e:f1:45:23:2d:9c:e4:74:40:c1:a6:b7:f4:
7a:9d:8b:f9:71:50:ec:4f:ff:6b:0c:31:8b:6b:ec:65:f9:59:
30:7b:bc:dd:ce:c7:1d:39:14:a2:bd:89:c5:39:eb:c1:a7:80:
8a:9f:09:37:a6:53:77:25:30:83:35:b2:47:3c:ef:82:0c:a0:
47:71:3d:b4:e1:c3:9e:18:83:12:6a:77:18:58:38:a9:b6:10:
9f:ba:0c:2e:f0:85:25:2f:74:02:8f:da:f2:66:1f:40:1f:cb:
86:a4:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:29 2025 by rpki-client