Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/OpWpWHElMT6Em0cb46EU4-eZHBM.roa
File: OpWpWHElMT6Em0cb46EU4-eZHBM.roa (raw, json)
Hash identifier: UkmgnvSBtnTTqSpYqYCCjTjePdoSg2sK2f+rfkHw/HY=
Subject key identifier: 3A:95:A9:58:71:25:31:3E:84:9B:47:1B:E3:A1:14:E3:E7:99:1C:13
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 019426D9575C070C8140060425C3FDD1494C
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/OpWpWHElMT6Em0cb46EU4-eZHBM.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39944
IP address blocks: 91.212.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:57:5c:07:0c:81:40:06:04:25:c3:fd:d1:49:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a95a9587125313e849b471be3a114e3e7991c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f6:63:3b:7a:32:8e:09:5f:a7:47:2e:f7:1b:
df:56:a1:fe:6c:9c:70:f1:eb:46:91:49:47:49:ad:
88:00:0b:a4:99:ed:64:bd:74:3d:93:ff:82:9b:0f:
b4:4c:cd:1d:23:5e:d3:90:bd:53:10:97:07:55:c4:
2f:a4:e8:59:ea:b2:54:20:7a:84:38:dd:42:83:ec:
ee:75:61:a6:e0:4e:29:42:a2:fb:4e:5b:af:01:78:
d6:5b:1d:5d:56:99:2a:92:3c:fb:41:7b:95:d2:6c:
e5:c5:b9:52:af:f6:1f:f5:f9:d5:8b:e9:29:1f:40:
cf:6d:ef:b8:27:3a:1f:00:e1:66:f3:da:54:7d:56:
ad:a1:63:ee:31:be:ec:f5:f8:55:45:21:3d:3a:62:
a6:52:04:09:ed:98:49:c1:db:40:24:ce:41:b4:97:
5b:bb:38:69:28:62:4b:e2:ba:47:51:be:52:58:9b:
0d:e6:1f:9f:82:37:7c:19:cc:e1:96:51:7b:18:f0:
08:38:55:4e:58:68:71:ad:b1:d6:e3:2e:55:e6:06:
ba:98:9f:f7:f5:93:52:fa:12:62:85:36:33:da:e2:
01:7d:22:59:ca:e5:1a:5f:11:f4:a6:0a:17:ff:98:
e7:3f:c7:37:24:39:d3:5b:af:1d:e5:72:b1:fb:a2:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:95:A9:58:71:25:31:3E:84:9B:47:1B:E3:A1:14:E3:E7:99:1C:13
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/OpWpWHElMT6Em0cb46EU4-eZHBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:19:da:f2:36:90:66:57:2a:dc:5e:17:af:f5:12:75:80:58:
a0:6e:50:f2:3c:7a:40:76:19:e4:ab:3a:bb:a8:36:74:c2:77:
83:39:b4:aa:80:06:fb:3b:73:0f:14:d8:42:38:2f:da:b4:d3:
4c:57:f8:e5:cb:8d:1c:15:0a:a2:29:fd:fd:ba:65:0b:db:46:
a1:11:3e:25:7b:94:b0:ec:16:02:b2:b2:9d:85:15:90:bc:67:
11:64:fc:44:42:01:d2:0a:17:2c:65:5b:13:67:8b:a8:0d:5e:
29:44:49:24:5a:a8:69:04:e4:4c:61:71:53:3f:47:b0:89:d4:
4d:2c:60:35:1c:e0:4d:cc:35:5b:9d:10:ef:07:a3:ce:a2:61:
9d:83:8e:a0:3d:d7:02:9d:dd:c3:7e:62:96:b8:35:cc:23:b4:
a5:a6:d9:f0:dd:40:72:f4:8e:fd:72:3e:68:2b:39:23:df:38:
c1:2b:4e:89:ef:0f:a8:c2:3a:20:3c:8a:6b:59:cf:de:3c:d8:
1f:7e:9f:7e:6a:1c:c9:1a:df:b2:42:e7:1b:5b:06:77:84:51:
1e:26:62:79:96:a3:52:71:97:d9:20:e7:34:30:a1:ad:e7:28:
07:2b:fe:99:e5:c0:55:42:08:b4:fd:7d:e0:68:27:ae:4c:b5:
4f:b8:e4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net