Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/6y8ZIHWhlc2sKph_utNLd33zKJU.roa
File: 6y8ZIHWhlc2sKph_utNLd33zKJU.roa (raw, json)
Hash identifier: HasQx4kp3fxchQViTxwd6UK1zIzqEPsB2bNzGMKS6S4=
Subject key identifier: EB:2F:19:20:75:A1:95:CD:AC:2A:98:7F:BA:D3:4B:77:7D:F3:28:95
Certificate issuer: /CN=31836010eedef15f76adeba9f729a828bf2be8cb
Certificate serial: 019428270180F864687E9D990B9B3CB17242
Authority key identifier: 31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/6y8ZIHWhlc2sKph_utNLd33zKJU.roa
Signing time: Thu 02 Jan 2025 17:53:52 +0000
ROA not before: Thu 02 Jan 2025 17:53:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8820
IP address blocks: 91.239.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:01:80:f8:64:68:7e:9d:99:0b:9b:3c:b1:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31836010eedef15f76adeba9f729a828bf2be8cb
Validity
Not Before: Jan 2 17:53:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb2f192075a195cdac2a987fbad34b777df32895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:58:78:37:5e:59:d0:f8:ec:c6:0b:c4:86:
27:74:26:ee:6d:5e:5e:6d:2e:89:d4:94:e4:04:50:
f6:34:02:2d:0b:5c:58:e3:fd:75:b3:70:8a:d0:35:
ec:8d:1d:d6:ef:fc:7a:fa:2c:00:35:1a:d9:12:cd:
dc:be:9b:e5:4b:84:77:c8:86:e8:07:c2:9f:a4:37:
0a:83:ba:7c:42:2c:16:ea:5c:4f:ed:b8:d3:25:b8:
29:eb:df:56:a0:f8:94:7a:7f:99:57:52:14:17:18:
38:47:39:30:1e:11:7c:56:ea:77:ed:e1:13:9f:33:
49:59:12:f2:c5:63:b8:92:94:10:86:70:37:28:d0:
1f:76:b7:3b:b6:22:67:42:e5:f5:f5:e8:9d:5c:23:
8a:ce:4f:eb:14:83:43:af:00:53:7b:23:f0:2b:92:
c8:eb:eb:9e:ff:f7:80:50:f7:f2:c0:2d:b1:33:07:
91:36:4f:5c:3a:88:2e:71:72:a1:12:2d:6b:4d:43:
7b:f3:f7:81:d7:c7:34:74:ca:2b:7d:e5:08:c9:8d:
c4:c6:1e:f6:d1:dd:68:93:bc:e3:03:75:d6:ba:08:
af:a6:79:5a:27:40:76:e6:bc:00:e2:9a:ad:75:20:
4a:27:fe:d3:6f:fe:a4:85:fa:ec:bb:91:33:75:9a:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2F:19:20:75:A1:95:CD:AC:2A:98:7F:BA:D3:4B:77:7D:F3:28:95
X509v3 Authority Key Identifier:
keyid:31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/6y8ZIHWhlc2sKph_utNLd33zKJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:4f:14:e7:be:85:c7:bc:eb:62:bb:42:17:6c:0f:38:c2:4a:
6f:24:45:52:7e:11:d3:f3:b3:97:26:bf:9e:bc:ff:d6:0c:85:
a0:64:02:77:c9:e7:4a:e1:6c:8e:64:9c:78:5a:23:b4:4f:39:
51:3a:3b:a2:9e:1f:19:85:2d:30:60:83:94:71:f6:4b:9d:43:
25:cc:43:d6:67:1f:65:5e:c5:f4:d8:8b:f1:70:85:55:4e:f0:
e3:6c:6f:4a:3d:7b:66:04:b7:97:9b:f7:6c:b1:67:2b:17:48:
d0:b5:80:7f:5c:de:72:43:4f:c7:c2:7f:a7:ef:35:4d:25:12:
d5:85:2d:82:ce:40:b1:73:dc:be:4d:39:c4:4a:af:6c:9e:44:
0f:1e:04:41:5e:94:ff:32:bc:4b:15:0d:fb:d6:fa:82:bf:75:
61:e5:90:92:9f:27:6f:74:e0:94:36:60:b6:a8:3f:54:a9:3b:
49:57:18:a6:f2:f8:33:43:ec:6f:6c:d1:3b:e3:5c:2b:f8:95:
86:39:15:24:c4:f3:8f:c6:d7:0e:3a:ff:10:b8:b0:5c:fb:15:
c2:69:9c:14:5f:99:d9:9a:cd:69:8d:4b:d5:40:bd:e9:ba:99:
bf:26:13:13:28:b2:c5:11:8b:9d:83:c6:90:90:b4:b0:9a:f9:
c7:a5:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:17 2025 by rpki-client on console.sobornost.net