Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/z4hyHniAgsjhip0WWSLXoanCOdQ.roa
File: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (raw, json)
Hash identifier: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=
Subject key identifier: CF:88:72:1E:78:80:82:C8:E1:8A:9D:16:59:22:D7:A1:A9:C2:39:D4
Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial: 019623290107CB457C5B175ABF7901ED2D70
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/z4hyHniAgsjhip0WWSLXoanCOdQ.roa
Signing time: Fri 11 Apr 2025 04:43:31 +0000
ROA not before: Fri 11 Apr 2025 04:43:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210663
IP address blocks: 91.218.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:29:01:07:cb:45:7c:5b:17:5a:bf:79:01:ed:2d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Validity
Not Before: Apr 11 04:43:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf88721e788082c8e18a9d165922d7a1a9c239d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:24:e4:69:09:bd:ad:2a:1c:7c:e7:2c:85:
bb:ba:c2:9c:a8:d8:8f:1e:cd:79:52:84:32:86:d6:
3f:41:93:08:c5:33:7d:a3:93:1f:c0:23:cd:ac:ee:
d8:09:ab:73:c4:2a:79:d0:17:a1:44:c7:eb:95:0b:
05:37:1e:a6:cc:95:c7:63:78:a7:ab:6e:bb:4e:32:
8c:10:e1:df:d7:b9:ad:33:34:44:c4:5f:8f:ee:ca:
d1:db:dc:78:5d:2d:47:c9:f6:58:66:e6:cb:1b:90:
68:b9:27:23:8b:e6:1f:ff:90:86:fc:0d:c3:e5:23:
97:33:5c:b6:46:33:1c:c6:45:ef:bc:8d:b9:cb:5c:
6f:7d:7c:2d:44:54:52:4f:b9:d8:ea:52:2b:8d:e6:
27:d0:1f:af:4d:03:b4:ef:3c:df:00:df:83:cf:8e:
9e:28:e9:38:25:53:49:13:d0:69:d1:c7:20:19:94:
55:16:37:89:40:1a:e2:7a:04:a2:d8:51:b2:a9:35:
94:87:cb:68:8c:af:94:e0:57:e7:c6:86:ab:86:a0:
b1:ea:63:bc:dc:4c:d3:e2:8b:a6:23:8e:21:f0:88:
60:b2:ef:78:59:be:4d:9d:1f:56:ff:6e:4d:e5:a0:
7b:28:77:06:0a:d5:48:85:12:6a:c8:a8:30:4e:b6:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:88:72:1E:78:80:82:C8:E1:8A:9D:16:59:22:D7:A1:A9:C2:39:D4
X509v3 Authority Key Identifier:
keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/z4hyHniAgsjhip0WWSLXoanCOdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:27:e4:84:80:b7:60:2b:03:66:17:95:06:80:80:f0:aa:46:
4e:9f:94:1c:ec:5b:c3:7e:42:ff:7f:01:c2:26:c5:0a:d7:73:
f3:0e:44:6f:e6:20:25:14:b3:01:bd:14:8c:0b:9c:cb:fe:f1:
c1:d7:70:df:d8:4b:83:4b:2b:1d:79:b7:e7:12:46:41:60:4b:
24:87:28:af:5b:2e:16:fd:cb:8f:b0:05:77:4a:0b:68:7f:d5:
17:33:0f:3e:26:59:b4:e9:8b:34:da:b0:4b:3e:6a:71:7f:7b:
15:ce:95:e2:10:8d:1f:b1:4d:74:2c:81:ef:25:c9:bc:ff:18:
b3:2d:9c:04:05:80:22:a2:a0:4c:83:c4:87:fd:3e:af:40:63:
0b:f0:17:f6:8d:d7:c1:ef:51:70:56:83:cb:41:a7:34:60:0f:
89:b6:d5:cd:6c:c5:7f:20:26:c3:a6:bb:83:9b:6f:ac:b8:d2:
5b:08:ae:17:11:e0:dc:05:01:16:62:13:18:05:d7:6d:2a:07:
93:a7:74:cf:fa:39:81:d9:56:80:5d:46:cf:9b:14:c9:e4:ec:
9e:dd:cd:dc:dd:5d:8c:f6:da:89:42:d6:e9:85:d3:51:f6:c3:
5c:54:03:53:13:0f:e6:c1:54:f3:2c:b0:97:96:60:00:00:18:
cc:e5:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net