Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/dh95O1dB3GK1CEkOtCIFzjLf5oE.roa
File: dh95O1dB3GK1CEkOtCIFzjLf5oE.roa (raw, json)
Hash identifier: iquwJa/eYSZ4o0HvbhTJ3GQJK6OG8r+hAE6Yg/LMclY=
Subject key identifier: 76:1F:79:3B:57:41:DC:62:B5:08:49:0E:B4:22:05:CE:32:DF:E6:81
Certificate issuer: /CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Certificate serial: 019427B5310D5C2693B59CF6047A765670BC
Authority key identifier: 1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/dh95O1dB3GK1CEkOtCIFzjLf5oE.roa
Signing time: Thu 02 Jan 2025 15:49:33 +0000
ROA not before: Thu 02 Jan 2025 15:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57530
IP address blocks: 91.232.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:31:0d:5c:26:93:b5:9c:f6:04:7a:76:56:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a60b96670893fc3d6371f6c5746c5f26b6a203d
Validity
Not Before: Jan 2 15:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=761f793b5741dc62b508490eb42205ce32dfe681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:8f:f0:58:7e:13:22:03:60:a0:68:69:1f:
e8:8c:12:3f:5d:d7:3b:a9:52:b8:ed:91:7e:1d:20:
a5:39:11:1e:50:39:94:58:c4:43:06:76:9b:54:38:
16:a1:0e:90:ca:a0:41:21:f7:a5:03:d9:60:ab:21:
94:68:42:50:c7:95:3b:bf:d7:22:70:6d:e0:20:78:
87:12:a2:d2:05:14:16:e8:13:e4:e3:a8:f5:b2:af:
69:d2:e1:4b:08:d2:71:66:b3:c7:02:f2:c4:f0:10:
30:56:31:85:4e:71:d5:09:09:ce:d3:4e:07:18:fc:
9d:54:70:27:f2:2d:36:7d:c5:07:e9:d8:e9:4b:f2:
3e:17:d0:54:a5:f0:bc:c5:e0:1c:17:f2:d2:93:1b:
d8:3f:ec:55:ed:d4:9a:82:ce:8f:de:ae:eb:4c:56:
16:c7:e3:8e:02:40:c3:5c:01:88:d4:04:e7:c2:63:
ac:9e:ba:0e:6d:aa:ba:ed:20:b2:4d:53:d5:3a:cb:
0a:44:85:44:db:66:dc:f3:33:f2:fa:fb:82:7b:83:
0a:b7:53:51:79:c8:f9:0f:4f:30:c6:36:d9:2f:4b:
ce:eb:fe:9e:f6:b6:ac:fd:79:ba:ec:24:52:a8:69:
9b:4f:54:84:12:ff:e2:ed:99:97:c2:5f:26:64:d1:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1F:79:3B:57:41:DC:62:B5:08:49:0E:B4:22:05:CE:32:DF:E6:81
X509v3 Authority Key Identifier:
keyid:1A:60:B9:66:70:89:3F:C3:D6:37:1F:6C:57:46:C5:F2:6B:6A:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmC5ZnCJP8PWNx9sV0bF8mtqID0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/dh95O1dB3GK1CEkOtCIFzjLf5oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/11c1ec-ab64-4979-afb9-6a61394f6269/1/GmC5ZnCJP8PWNx9sV0bF8mtqID0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.113.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e4:13:10:3d:5a:60:38:c2:62:b8:6c:53:6e:eb:e2:7c:b1:
0f:f4:67:b5:1f:08:5c:2d:b2:d4:a1:79:93:f2:1f:9d:7a:23:
0d:61:98:73:38:e9:91:11:24:32:86:3d:5a:d2:7c:39:9a:63:
67:d0:c7:d1:8e:e7:77:da:a1:0a:d1:f2:3f:2b:d5:83:11:a8:
ef:5a:28:1a:83:60:eb:ef:0f:ff:b7:e5:ff:2c:3c:61:70:28:
b5:77:7c:e1:4f:ad:ec:a6:c1:ca:ec:b0:a9:35:96:65:70:d2:
c9:98:56:aa:1c:21:6e:a9:0e:34:6a:d2:92:c9:67:ae:df:a0:
6f:e7:e8:d0:95:2e:4b:18:43:ac:e4:7e:a3:54:6a:59:50:6e:
40:9e:91:83:d4:d9:53:d8:9c:de:03:1c:bd:57:50:a2:a2:b3:
dc:e5:c9:53:33:47:55:6e:0f:07:32:0e:22:46:9d:d8:9a:0f:
87:86:71:82:0a:6e:7c:b0:27:a9:20:7f:36:76:84:54:e2:6f:
e0:bf:5f:a0:8a:56:bb:b3:6b:ca:32:1d:c4:ab:f5:ff:44:eb:
0d:2c:aa:a3:e5:08:02:0e:25:2a:16:03:87:7a:6b:51:07:b5:
4a:36:b0:c3:6d:b7:fe:08:4c:c9:f1:9d:1a:a6:28:c7:e5:89:
ff:a2:4c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net