Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa
File: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (raw, json)
Hash identifier: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=
Subject key identifier: E2:72:A0:4C:EE:E7:33:0B:FB:13:95:E4:19:91:AB:6B:80:E3:ED:E5
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 01941FFA1E3F5ADFEFE48B82873880ECEFF1
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196772
IP address blocks: 91.212.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:3f:5a:df:ef:e4:8b:82:87:38:80:ec:ef:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e272a04ceee7330bfb1395e41991ab6b80e3ede5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:7b:8c:7b:e5:ba:67:b7:c3:cb:82:3c:da:
e5:94:3e:23:d4:36:47:f7:3d:eb:54:da:df:c5:92:
67:2e:43:00:79:a3:62:26:87:f0:a1:85:cb:a3:67:
85:58:c5:18:f6:de:e1:35:28:e9:14:75:85:b4:bd:
fb:d9:69:50:df:e4:09:90:1a:0f:67:71:21:97:40:
d3:ae:5c:86:c7:7d:c8:b2:2c:11:98:8c:68:7f:be:
ff:1f:f2:81:ef:37:73:44:e7:86:c5:c2:f8:e9:7c:
68:9e:68:85:e5:20:03:e5:0a:08:7a:92:4c:74:bf:
1a:a0:66:c3:b0:79:e5:d9:fb:2c:25:a9:5e:b6:94:
af:f1:3e:6a:ec:af:fe:b4:1e:df:34:fa:77:d8:21:
72:ae:db:a0:46:e2:1e:7c:ff:bc:d8:1d:10:22:6f:
2f:ca:a5:3b:df:58:c5:61:07:4a:ef:c2:4b:87:94:
3a:91:55:b7:18:44:c5:12:b5:01:19:cb:64:1c:55:
70:aa:2d:69:bf:96:d1:04:b5:1b:27:7c:13:b2:2b:
7a:c0:a3:05:a4:d3:f5:13:4f:25:71:07:c1:fc:e7:
09:fc:33:89:1e:78:32:7d:ea:13:98:af:49:d3:3b:
6d:2d:98:4d:4f:a5:ad:1c:e5:c0:0a:fb:0a:1d:d1:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:72:A0:4C:EE:E7:33:0B:FB:13:95:E4:19:91:AB:6B:80:E3:ED:E5
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.199.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:d7:cc:0b:5a:34:5b:81:10:72:86:e3:0d:f5:e3:44:e5:c4:
a1:61:e4:36:f9:a7:b4:45:54:02:23:6b:fd:52:d6:3f:95:70:
a0:08:2d:72:b9:2d:ad:00:9a:b2:36:13:67:bf:b8:ad:84:c6:
f7:be:b6:0e:d7:56:89:4f:29:a4:e9:55:e5:0d:97:a2:56:78:
97:2f:e7:3d:58:ac:14:d6:9b:3f:a0:67:e6:a6:09:cc:b2:27:
2f:65:28:9b:6a:55:d8:fa:a1:fb:e8:b8:8d:93:6f:42:18:b4:
e1:d6:2a:b4:91:fa:28:97:eb:d4:f2:ab:af:59:55:ef:cb:73:
6f:ec:0c:76:13:e1:33:14:31:c3:42:5b:de:d4:2c:86:85:6e:
cd:23:6c:45:d6:83:44:e0:b6:a0:4c:bd:0a:f1:cf:db:87:0f:
ad:4c:da:6d:9b:f1:1a:a8:4b:f0:ed:5f:9a:81:63:68:c2:34:
aa:20:36:dd:ab:26:a3:4c:d2:51:94:16:8b:53:65:07:02:74:
99:b6:fc:df:4e:eb:c0:20:c4:fa:bb:1a:f4:af:03:7d:1c:a5:
07:c7:77:bb:06:f6:3b:c1:82:10:39:40:56:a6:4d:d5:83:6f:
22:7f:60:29:62:b5:53:b6:dd:bd:25:75:02:7a:d0:65:42:33:
f5:75:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:34 2025 by rpki-client on console.sobornost.net