Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/kfN7a1gaYfFJ6QDXRCAHsUFksqU.roa
File: kfN7a1gaYfFJ6QDXRCAHsUFksqU.roa (raw, json)
Hash identifier: 98fchG6ajtruPmSu1iHEitLSbFn7hxKxul3DfeyFstg=
Subject key identifier: 91:F3:7B:6B:58:1A:61:F1:49:E9:00:D7:44:20:07:B1:41:64:B2:A5
Certificate issuer: /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial: 019421B2222CE2D007A89B053523E410CCED
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/kfN7a1gaYfFJ6QDXRCAHsUFksqU.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16046
IP address blocks: 91.199.126.0/24 maxlen: 24
185.110.100.0/22 maxlen: 24
2a01:bf00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:22:2c:e2:d0:07:a8:9b:05:35:23:e4:10:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91f37b6b581a61f149e900d7442007b14164b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:44:c9:0f:74:b3:bc:3d:98:46:6a:f0:63:
0d:e5:c2:0f:ec:38:ed:cb:90:5b:4b:98:ce:fa:6c:
16:87:2e:7e:25:0d:54:df:2b:5d:15:39:04:b6:71:
f5:58:a6:9a:d5:ca:d1:f2:df:8d:ad:5d:50:e3:e3:
aa:dd:54:25:70:f5:c8:a8:f3:79:dd:21:06:80:0f:
91:0b:ff:ef:81:c3:da:dc:eb:c0:0c:28:83:e2:53:
14:ce:d7:c8:ba:90:28:59:55:ac:b9:d5:3d:97:0e:
b2:aa:3e:28:cf:82:11:14:ee:25:42:75:e8:eb:43:
cf:90:bf:8f:c9:77:c6:c5:48:b8:22:47:d5:be:9a:
3a:01:3c:69:36:a4:09:63:ca:24:20:71:3c:44:31:
84:f8:52:68:91:bf:39:34:68:c6:74:4a:9f:83:10:
20:f8:dc:88:74:6d:3c:69:49:79:e3:cb:a4:94:78:
a7:64:71:4a:54:8f:11:6a:d4:48:09:90:f6:ec:15:
03:35:e0:f7:d6:c3:3d:a1:49:25:83:96:eb:7e:05:
09:26:a5:8b:49:63:88:70:4b:2d:8d:9c:a1:4e:e7:
fd:3f:18:20:2d:d9:c8:48:0b:3f:06:4b:b9:7c:cd:
97:03:21:9e:0f:7b:72:63:21:67:b7:c2:9d:33:36:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:7B:6B:58:1A:61:F1:49:E9:00:D7:44:20:07:B1:41:64:B2:A5
X509v3 Authority Key Identifier:
keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/kfN7a1gaYfFJ6QDXRCAHsUFksqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.126.0/24
185.110.100.0/22
IPv6:
2a01:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
8c:03:6e:fb:76:69:c6:6e:8a:27:6e:cf:a8:37:13:78:6a:37:
7f:05:2b:d2:48:88:ab:fd:2f:bd:1d:4c:ff:83:1a:99:40:60:
38:8b:5f:b8:1e:9b:89:92:67:64:88:a6:c3:5a:06:20:f5:81:
10:c0:98:85:10:9a:61:31:f0:47:61:4b:84:05:75:a4:bf:90:
18:37:75:39:d3:2d:ba:b0:56:85:8f:44:5d:d8:41:6e:32:55:
a2:b2:34:54:46:3c:09:aa:72:2a:b2:b1:75:c9:cc:fe:71:41:
48:a4:e9:f1:94:33:5d:41:0b:58:eb:1b:f0:55:3c:84:d3:84:
82:5c:04:52:84:52:f3:8c:21:8a:5f:44:f6:b5:bc:06:84:5a:
db:55:78:07:b6:20:4a:8a:6a:2a:8f:68:cf:c0:87:76:c3:ad:
33:d2:fa:4e:a2:0a:de:71:4c:58:c2:1b:92:1f:13:d4:86:5c:
08:7b:96:5c:9b:8e:f1:73:80:82:eb:09:2f:01:de:73:4f:a1:
58:53:94:99:b7:d3:87:61:cb:96:90:de:89:69:16:98:b4:73:
f1:37:88:d9:d9:fa:b9:c7:67:34:06:73:bc:78:98:8b:80:2d:
54:c3:58:c4:6f:6f:c4:4b:21:72:1f:ed:b1:27:c7:3d:34:6b:
31:d5:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net