Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/796f0rlncfK0yTtaD6CkZkwRT4s.roa
File: 796f0rlncfK0yTtaD6CkZkwRT4s.roa (raw, json)
Hash identifier: AKdoTIc+C1lS10KwNLkNmoqljPTVyyEtoThk5e5KIYw=
Subject key identifier: EF:DE:9F:D2:B9:67:71:F2:B4:C9:3B:5A:0F:A0:A4:66:4C:11:4F:8B
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 0195851006B24A829EBE1FDE7F9AF8E3422B
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/796f0rlncfK0yTtaD6CkZkwRT4s.roa
Signing time: Tue 11 Mar 2025 11:56:14 +0000
ROA not before: Tue 11 Mar 2025 11:56:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39399
IP address blocks: 91.199.194.0/24 maxlen: 24
91.215.24.0/22 maxlen: 22
178.215.176.0/20 maxlen: 20
195.182.192.0/23 maxlen: 23
2001:67c:2280::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:10:06:b2:4a:82:9e:be:1f:de:7f:9a:f8:e3:42:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Mar 11 11:56:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efde9fd2b96771f2b4c93b5a0fa0a4664c114f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:5f:8a:77:3e:55:49:90:dd:c5:fb:fc:c8:
85:4a:c5:6f:f3:2c:54:5c:27:52:d8:03:b2:01:39:
9a:20:4c:14:af:c3:ab:07:d5:c8:4d:32:b0:4d:d5:
10:d3:6c:94:ee:13:7a:69:e3:4f:f1:58:82:c2:0d:
e0:d6:2f:76:b3:5a:27:e1:5a:2f:21:7f:5a:ea:e2:
e2:7a:58:ae:96:ec:99:cc:09:7c:92:3b:9d:51:f9:
c5:8c:90:57:0b:be:75:f0:1e:ae:09:b9:f5:6a:ce:
c7:3a:62:f2:b7:d7:59:7a:38:3f:ab:db:a9:15:64:
07:77:9d:25:63:6c:62:46:df:25:30:ac:68:8e:4b:
b4:d0:44:4f:de:68:93:a8:06:79:93:0d:b4:a6:35:
4b:c8:31:81:25:f4:43:cb:5e:f6:9c:2c:80:05:ea:
36:8c:69:aa:39:99:64:a8:f9:16:fd:0f:1a:30:c8:
4f:b7:6a:1f:b3:79:f9:d2:34:91:8f:73:13:e2:cd:
cd:65:6e:04:ae:66:58:4e:1f:61:7e:3b:da:f5:4f:
d7:fc:ed:95:8d:0a:c9:38:a4:f4:bc:1b:80:b5:c6:
b0:26:9f:5f:03:76:dc:6e:0f:94:29:cd:bb:a9:20:
cf:de:a1:2c:d8:8d:e9:30:57:ee:7a:bf:17:bd:0f:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DE:9F:D2:B9:67:71:F2:B4:C9:3B:5A:0F:A0:A4:66:4C:11:4F:8B
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/796f0rlncfK0yTtaD6CkZkwRT4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.194.0/24
91.215.24.0/22
178.215.176.0/20
195.182.192.0/23
IPv6:
2001:67c:2280::/48
Signature Algorithm: sha256WithRSAEncryption
75:0c:89:b1:d4:8b:b4:52:4c:17:76:5f:ca:31:9d:21:94:a0:
89:f3:7d:03:89:45:ba:0a:aa:3b:3a:bf:9a:22:a5:b6:21:f3:
51:d0:f7:f3:c1:0d:45:76:1b:55:5f:44:a0:66:dc:ee:2e:0e:
dc:60:3e:fb:7e:45:51:76:97:d4:c2:6f:7b:d7:ce:39:62:19:
a5:86:8b:a9:d4:3a:8a:a6:e1:13:cd:7f:19:64:04:62:5a:41:
c3:d1:1b:ff:c1:c3:9d:7c:15:32:52:44:39:19:e0:3e:fe:5e:
9d:a6:40:7c:08:be:b8:aa:b8:3e:af:e1:d9:6d:a0:bf:c0:e0:
3e:64:10:e1:fc:9d:6a:b1:6e:bd:24:51:14:7f:aa:04:17:e9:
8e:e3:b8:29:0f:10:f7:e0:09:0d:aa:f3:69:6a:7e:7e:09:58:
92:a4:b2:81:80:6c:08:b7:f4:d0:19:77:6b:d9:b6:95:f6:f4:
25:83:d0:a3:4d:5c:a4:f6:9a:a0:0b:bc:c6:ed:64:70:51:c5:
b7:d4:14:f9:71:da:54:14:b0:db:e1:99:e2:68:3a:37:c6:ed:
a6:a7:c9:ff:35:92:83:c9:91:20:64:aa:be:b9:ee:6a:5d:e2:
55:a1:3d:20:0b:ed:15:41:a6:28:f4:8f:af:ac:c5:6c:47:9f:
86:62:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:58 2025 by rpki-client on console.sobornost.net