Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Xg9_0g6AruUdP8btK8A9lf_QDLw.roa
File: Xg9_0g6AruUdP8btK8A9lf_QDLw.roa (raw, json)
Hash identifier: cxSEZ+jVJKv+PAN+nsq2/IV6m//3vIXQqyGSkhq450c=
Subject key identifier: 5E:0F:7F:D2:0E:80:AE:E5:1D:3F:C6:ED:2B:C0:3D:95:FF:D0:0C:BC
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B67C110CE02AF973E9DABDA68B8C7A
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Xg9_0g6AruUdP8btK8A9lf_QDLw.roa
Signing time: Thu 02 Jan 2025 15:50:58 +0000
ROA not before: Thu 02 Jan 2025 15:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48086
IP address blocks: 91.207.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7c:11:0c:e0:2a:f9:73:e9:da:bd:a6:8b:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e0f7fd20e80aee51d3fc6ed2bc03d95ffd00cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:b5:e1:95:ca:ce:eb:32:d0:65:31:35:cc:
bc:fa:a1:f4:02:05:2c:1b:73:0c:2a:a2:d2:23:62:
d0:dc:6d:b4:f5:80:a2:2e:fe:b7:9f:d0:7b:f0:fb:
4d:e4:9c:9b:2f:de:8d:3d:5a:70:83:8a:b1:0b:bf:
78:20:24:3e:40:8d:9e:00:9f:18:48:58:b3:e3:7b:
b9:9d:0a:22:37:b1:85:dd:de:78:3d:a8:dd:9d:91:
90:88:49:9e:88:98:ca:ec:71:52:90:f8:bb:5d:77:
a5:39:f7:d1:27:c8:e5:55:89:f4:62:17:62:11:df:
5a:6b:18:f6:f8:d3:4f:b7:86:1e:04:0b:1b:5d:ec:
7f:75:25:bd:78:de:96:d9:68:99:96:81:ea:44:cf:
96:a7:d4:40:84:02:ae:bd:b2:76:6a:6e:cc:6c:f6:
68:39:6b:1c:55:54:f0:62:32:a1:5f:a2:7a:53:98:
bc:cd:f0:dc:b8:a1:0a:b0:3d:50:45:dd:68:2a:69:
c9:bb:2b:70:70:eb:cc:59:9b:53:e5:45:de:78:60:
2e:72:9d:78:bd:75:ba:9e:22:90:a7:13:37:e4:24:
a8:56:55:5a:a6:80:17:28:89:be:9d:02:4c:5f:b7:
80:fd:3e:42:d8:1a:1b:73:45:a4:9e:ad:5e:0c:22:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:7F:D2:0E:80:AE:E5:1D:3F:C6:ED:2B:C0:3D:95:FF:D0:0C:BC
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/Xg9_0g6AruUdP8btK8A9lf_QDLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ca:08:46:9d:48:3d:be:7a:1a:99:04:53:94:da:45:84:e9:
bc:23:de:20:96:04:04:cd:86:b2:18:b3:3f:93:05:d4:79:55:
4a:58:23:f4:b0:ea:89:25:bd:39:2c:12:bf:ce:e2:53:06:b1:
1d:02:34:f2:4e:59:5d:36:fa:ac:64:cf:28:37:0e:c7:a1:9a:
b5:b0:b0:62:2a:46:b8:aa:09:de:30:03:7b:b4:86:b6:ed:ad:
42:2a:27:f4:6f:22:20:f5:79:bb:2b:3c:3f:90:fb:ef:b0:a0:
cc:c9:33:13:70:c7:ee:79:fe:b0:37:3f:9f:34:f1:e3:ea:5a:
8e:da:48:3c:2a:f1:45:08:02:0a:26:7b:29:3a:1d:ad:1d:04:
59:2a:9f:68:43:13:05:51:00:a3:8d:c3:58:f6:91:10:7f:cc:
8f:37:48:2a:b9:e8:36:8f:ba:14:56:e1:8a:ca:83:76:7c:4e:
83:f2:18:ab:fb:99:d5:0e:57:bb:c9:6f:e0:72:5a:10:f0:50:
92:79:9b:fe:e8:7e:0f:2c:6e:ef:a3:31:45:59:69:ef:07:ce:
4a:88:5e:2f:9f:34:0b:a1:31:e1:bc:1f:06:c4:12:d6:07:ee:
fa:84:1b:86:8e:2b:2a:1d:36:8f:71:16:03:b8:9e:b5:ff:2f:
e7:d5:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:04 2025 by rpki-client