Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/DPoR4kUwvFP364mIcuQBwqN8-tI.roa
File: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (raw, json)
Hash identifier: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=
Subject key identifier: 0C:FA:11:E2:45:30:BC:53:F7:EB:89:88:72:E4:01:C2:A3:7C:FA:D2
Certificate issuer: /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial: 01941F8C9E7AB1A51E3990FEC235BC3F0276
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/DPoR4kUwvFP364mIcuQBwqN8-tI.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197255
IP address blocks: 91.217.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9e:7a:b1:a5:1e:39:90:fe:c2:35:bc:3f:02:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cfa11e24530bc53f7eb898872e401c2a37cfad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:75:e1:42:1c:16:d1:8e:62:a6:cb:f1:d6:
22:2f:38:1a:8b:59:7d:33:f5:28:29:1b:78:d4:a4:
3d:19:35:70:e7:71:68:fc:18:0c:68:5f:c7:bc:5c:
42:1a:22:86:a5:f7:3b:21:7c:5a:ab:71:f0:6c:af:
3a:38:15:5e:32:bc:71:20:83:ee:d9:63:6d:ec:18:
e9:d1:aa:9e:5d:ac:23:76:6d:39:2a:b1:5c:d9:ac:
f3:16:ac:40:c9:a3:d4:52:fc:bc:44:ff:86:46:6a:
97:8a:6a:3d:68:81:75:ca:78:c4:8f:91:e1:c0:b1:
b3:b0:4b:7f:52:c0:ed:a9:74:54:7b:d1:3a:e6:a7:
48:b5:87:ad:7e:a1:bb:5f:56:cc:3d:a0:3c:d3:7c:
81:84:1b:64:32:25:ad:46:c4:b6:28:38:16:20:71:
f6:03:b4:02:8e:0b:8f:a7:48:b2:60:b7:d0:70:1e:
a5:2b:b6:12:a5:4f:10:9c:fb:db:e7:f6:50:de:a7:
69:97:59:88:79:b0:4d:97:1b:44:60:66:2b:de:52:
44:7e:4f:75:eb:b6:ed:99:89:95:9e:f9:5b:0b:ae:
ec:70:6a:83:24:28:6f:17:4a:b5:2b:3e:89:ee:15:
7e:7e:a5:fd:4c:b1:31:68:b7:04:fc:11:63:39:e2:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:11:E2:45:30:BC:53:F7:EB:89:88:72:E4:01:C2:A3:7C:FA:D2
X509v3 Authority Key Identifier:
keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/DPoR4kUwvFP364mIcuQBwqN8-tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.60.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:44:b1:ab:d2:26:66:12:db:b6:96:d6:b4:cb:94:38:85:c2:
c7:6b:f2:34:45:f6:17:50:c7:72:6a:60:21:ce:16:68:4b:e4:
86:a4:27:11:73:58:48:fe:ae:50:fe:e7:be:1a:ee:f6:c2:ed:
fa:c9:e4:38:42:e5:70:ef:f1:3c:75:c7:2c:07:c6:39:d1:21:
97:65:fc:07:8b:4d:b6:5a:cc:e6:d4:e2:65:a5:c1:85:10:30:
8f:ef:43:ef:f4:bb:86:9a:41:dc:cd:a8:58:b2:4b:e2:50:2f:
24:34:db:58:b0:22:94:48:7c:c0:29:5a:64:06:07:2d:0f:40:
bc:dd:5b:43:13:b2:7e:18:03:ab:59:24:ac:4d:94:da:a1:10:
af:01:c2:3a:ba:a7:9b:67:c2:b7:49:f2:2d:2e:c3:48:4c:2d:
1b:27:ec:0e:73:9c:e0:46:a5:81:23:64:8c:db:c4:78:d6:22:
79:63:28:e8:ed:02:f0:a9:72:d6:3c:04:88:e3:25:60:5c:dd:
9c:4a:66:b9:15:92:05:e7:4a:09:9e:b0:52:5b:a4:07:9e:a8:
fa:35:a0:2b:43:a2:b3:e6:b0:58:7d:ef:a6:ac:f5:9e:f3:7e:
45:0e:4a:9b:2c:f9:56:28:3d:db:f8:c7:b3:ea:79:d7:d4:0c:
86:1b:ff:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net