Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/wSW6JHry9aEuEbZj9sUvZUmXDYs.roa
File: wSW6JHry9aEuEbZj9sUvZUmXDYs.roa (raw, json)
Hash identifier: chgjDOS+AVkY8OsmOxsnvb6k6+1kPmgvTXMxVKADzP0=
Subject key identifier: C1:25:BA:24:7A:F2:F5:A1:2E:11:B6:63:F6:C5:2F:65:49:97:0D:8B
Certificate issuer: /CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Certificate serial: 0195D78FF2DD6287DDC6FFF3969AFB864F8A
Authority key identifier: AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/wSW6JHry9aEuEbZj9sUvZUmXDYs.roa
Signing time: Thu 27 Mar 2025 12:24:49 +0000
ROA not before: Thu 27 Mar 2025 12:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51743
IP address blocks: 91.217.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:8f:f2:dd:62:87:dd:c6:ff:f3:96:9a:fb:86:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa9e0e8983d9deb415716d61e8c912510a26c24
Validity
Not Before: Mar 27 12:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c125ba247af2f5a12e11b663f6c52f6549970d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:59:5b:b4:3e:69:b1:df:f0:99:49:9c:53:
65:4d:c6:e6:98:cd:b1:6f:49:1d:18:43:bf:94:5a:
1b:c5:9e:e7:ab:fe:da:4e:f0:ab:b5:7b:1e:2a:43:
6e:d5:eb:12:d8:88:3f:30:0e:c9:c5:5f:2b:07:5b:
2b:01:35:77:4b:52:1f:6c:bd:d3:60:a5:8a:f3:2f:
00:c3:2f:bf:52:01:d3:83:fd:e4:49:44:a3:32:1c:
25:13:4d:bd:2d:e5:f2:47:02:39:d4:7d:51:84:40:
c9:04:18:77:ff:a3:c7:2b:d1:cf:44:98:5b:60:fb:
62:7b:63:5a:1b:fb:50:a3:5b:fa:cd:59:8c:b5:a9:
26:83:8f:d3:ca:11:23:03:31:43:26:4a:3f:c6:89:
00:4d:66:b2:a4:43:78:b4:b0:7c:57:f2:d6:8b:1d:
df:d8:96:ff:c8:37:3e:cd:9e:b4:68:75:62:a5:08:
ab:96:36:13:0b:98:eb:b4:1e:0b:2f:0c:aa:f5:0a:
11:ee:c4:ec:4b:07:5b:0f:03:46:2f:10:29:e2:cd:
4a:5b:63:af:bd:4f:02:b4:22:8d:f7:74:1f:bd:ee:
33:2e:ca:80:05:ae:3b:db:fe:9e:47:db:61:5b:92:
2f:f4:38:9e:09:6e:f9:05:d3:18:ff:4c:14:ca:f1:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:BA:24:7A:F2:F5:A1:2E:11:B6:63:F6:C5:2F:65:49:97:0D:8B
X509v3 Authority Key Identifier:
keyid:AA:A9:E0:E8:98:3D:9D:EB:41:57:16:D6:1E:8C:91:25:10:A2:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqng6Jg9netBVxbWHoyRJRCibCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/wSW6JHry9aEuEbZj9sUvZUmXDYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a666f4-f6cf-4aed-b9bc-451b96afc2b1/1/qqng6Jg9netBVxbWHoyRJRCibCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d3:da:19:67:7d:21:08:06:d9:61:38:0e:c4:65:b1:09:9f:
56:80:2b:c5:9f:54:6d:96:07:46:18:a4:2b:b9:e0:23:d0:39:
19:df:57:85:7c:70:b8:e8:2b:31:b4:97:7c:92:23:18:d5:47:
38:72:3d:6d:43:37:4d:29:87:15:6e:77:4f:04:7d:9b:a0:5b:
e6:75:c8:aa:d4:98:92:1c:80:1f:27:b3:a1:15:59:c1:48:51:
23:bc:5d:22:55:bb:d2:d6:8a:7b:d6:e6:14:02:39:fd:e9:63:
08:ae:5e:38:6d:30:02:7c:39:9b:b9:52:ea:eb:9b:e6:a2:4e:
98:9f:fb:85:b5:27:c0:d5:0b:48:87:9a:08:af:a2:c0:83:53:
ed:59:fd:d6:a5:15:81:5a:7b:33:3d:97:77:ad:ed:a7:b5:6d:
31:6c:89:a7:00:65:40:c7:11:2e:d4:0b:16:85:80:8c:2a:44:
01:b3:c5:60:2d:b4:1f:37:77:e4:08:f1:e6:e5:b8:4e:59:1c:
6e:a0:1d:9c:63:1a:b1:57:78:a0:5a:6c:58:df:3a:b6:c3:f6:
68:5b:4f:38:22:64:29:be:93:aa:75:fd:2b:4a:28:f4:0e:9c:
02:5a:7c:bb:97:10:2d:be:1e:11:b1:da:eb:86:c3:db:8e:23:
cc:cb:60:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net