Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/kbgQh5M0_g-yKtLmN3KrmTRp0VY.roa
File: kbgQh5M0_g-yKtLmN3KrmTRp0VY.roa (raw, json)
Hash identifier: z/jNtNO8UaNMYKQaOjglQr+97CWlqCKHBfxIRQQtglE=
Subject key identifier: 91:B8:10:87:93:34:FE:0F:B2:2A:D2:E6:37:72:AB:99:34:69:D1:56
Certificate issuer: /CN=31836010eedef15f76adeba9f729a828bf2be8cb
Certificate serial: 01942827011FAD46CED7606A949E017D5110
Authority key identifier: 31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/kbgQh5M0_g-yKtLmN3KrmTRp0VY.roa
Signing time: Thu 02 Jan 2025 17:53:52 +0000
ROA not before: Thu 02 Jan 2025 17:53:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.239.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:01:1f:ad:46:ce:d7:60:6a:94:9e:01:7d:51:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31836010eedef15f76adeba9f729a828bf2be8cb
Validity
Not Before: Jan 2 17:53:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91b810879334fe0fb22ad2e63772ab993469d156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:21:73:3f:13:17:6c:f1:8c:0d:11:b8:0f:
d2:00:aa:7b:1b:de:e9:18:cd:4e:98:3e:b6:57:89:
c1:32:dd:84:d6:bb:29:37:bc:a0:58:13:9b:04:cd:
40:b7:c9:da:38:cb:af:8b:e9:9d:f5:4f:aa:f8:66:
27:55:da:d9:99:2d:cb:22:62:d3:97:31:5c:da:35:
47:72:fb:3d:e3:1b:cf:9b:22:cc:49:3b:a0:76:65:
af:1b:9c:33:10:d9:9d:5b:1f:11:89:b6:92:e6:c3:
54:9c:17:14:af:c2:21:48:60:e2:4a:31:1f:c1:5b:
57:e2:be:19:d1:b4:8f:df:03:01:54:70:a4:43:ed:
02:39:89:94:6c:4a:da:37:3c:6d:be:d6:aa:3f:10:
a0:53:5b:74:df:f4:50:af:21:b3:2d:54:79:64:1a:
ca:74:a6:b3:1b:8a:e3:6b:92:42:78:67:22:d0:0a:
19:fb:4d:30:74:aa:22:39:a0:3c:a9:ea:f5:34:58:
4e:2d:bd:a4:23:34:e3:2f:c1:3a:4b:38:5d:c4:d5:
f6:6a:41:0b:39:c9:e7:2f:0c:31:b8:9d:95:6f:6e:
ad:40:96:ba:38:5c:86:a0:4e:3d:b4:48:b4:04:f0:
bd:f3:d6:f3:72:2d:7a:06:d3:26:ee:2a:15:61:54:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:10:87:93:34:FE:0F:B2:2A:D2:E6:37:72:AB:99:34:69:D1:56
X509v3 Authority Key Identifier:
keyid:31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/kbgQh5M0_g-yKtLmN3KrmTRp0VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
Signature Algorithm: sha256WithRSAEncryption
10:df:3d:94:f1:59:44:8f:98:49:b0:c7:45:6e:2f:b8:e4:ff:
89:ae:a4:83:cd:65:6c:cf:d3:f6:3b:64:31:c6:9d:b9:42:65:
c4:3e:57:be:8d:b7:95:79:8b:ea:76:93:cc:3f:b5:94:9a:6b:
07:80:af:00:18:ad:2d:2c:3d:63:90:fb:47:f6:34:7e:0f:3e:
f6:39:28:35:aa:58:ac:a6:61:4e:a2:35:b7:64:2f:d0:c7:25:
1d:f8:55:4f:bc:81:fd:13:23:00:22:0b:5a:9b:8e:b4:2e:e2:
e4:4d:72:c9:0c:66:ac:bb:a8:bc:46:fe:db:85:16:7c:33:66:
0e:42:6a:e5:42:be:ca:f7:6a:30:95:25:1e:ef:ab:95:96:1c:
e4:f7:3b:7c:e6:87:b4:21:b1:4e:fc:d0:d3:d6:17:46:db:ff:
7a:7a:94:5f:f0:3e:92:29:47:2d:18:b2:91:48:17:59:02:ef:
87:1f:4d:d0:46:4b:82:3f:94:29:52:e4:38:a7:d1:f7:16:51:
22:51:82:2b:35:5f:4e:16:9e:5a:ec:aa:40:a5:1e:f0:ba:f6:
75:42:f6:20:de:24:37:43:22:1f:7b:f0:bb:8d:97:0f:ec:81:
16:c8:69:1b:38:5a:28:46:8b:cd:bc:bc:a9:7c:91:fb:17:0c:
b2:16:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:17 2025 by rpki-client on console.sobornost.net