Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t-_0uhPeNJuwf5YqzrIKsHkuF_0.roa
File: t-_0uhPeNJuwf5YqzrIKsHkuF_0.roa (raw, json)
Hash identifier: cIDkyvjdR/48FgmvQAw5YLlaDdYiK2LcXXvPzo8l17U=
Subject key identifier: B7:EF:F4:BA:13:DE:34:9B:B0:7F:96:2A:CE:B2:0A:B0:79:2E:17:FD
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274855F31E35DE820DFD611C382FEA7D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t-_0uhPeNJuwf5YqzrIKsHkuF_0.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273069
IP address blocks: 91.109.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:55:f3:1e:35:de:82:0d:fd:61:1c:38:2f:ea:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7eff4ba13de349bb07f962aceb20ab0792e17fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:f4:44:e6:10:4b:db:d6:7d:7a:53:34:54:
f3:4d:2a:ae:e9:a1:1c:31:d3:bb:f0:2f:0c:ea:5d:
c4:fc:da:86:b2:1a:4b:03:22:f4:3e:fd:d5:41:57:
29:e6:6c:57:fa:a3:fd:3b:6e:af:e2:7c:e1:eb:41:
e1:29:bb:f4:77:2a:44:36:f2:33:54:06:ec:ea:20:
ff:7b:c0:8d:1b:bc:05:30:a5:ca:ac:20:6d:91:27:
0a:e2:c5:e9:b4:dc:66:40:44:a8:58:07:08:c1:01:
52:17:3f:2b:44:12:ea:54:c7:ad:73:c6:c0:1a:df:
64:5b:3d:59:f0:33:99:0a:19:86:a8:1f:0b:9d:4e:
8b:89:f9:28:ee:da:57:ed:d1:e9:f8:79:8e:36:66:
62:6c:83:bb:2c:90:18:c4:3d:e9:bf:9a:cd:93:60:
41:33:fc:a0:29:1c:2d:c2:a7:fd:67:c4:76:0e:dc:
87:ad:d3:29:0f:53:bf:a8:5c:ed:25:aa:92:5f:95:
15:91:e6:4e:ee:89:48:72:83:32:2f:64:b2:07:d6:
3a:40:a2:d8:79:3f:0a:20:3d:92:f1:56:39:96:60:
2f:3a:2c:e9:58:92:af:f0:38:6b:78:c5:81:85:ab:
48:09:2a:10:98:a9:2c:09:cd:fb:9d:87:0e:4f:19:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:F4:BA:13:DE:34:9B:B0:7F:96:2A:CE:B2:0A:B0:79:2E:17:FD
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/t-_0uhPeNJuwf5YqzrIKsHkuF_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.161.0/24
Signature Algorithm: sha256WithRSAEncryption
27:13:e5:6b:83:69:9f:a3:d0:bd:cc:b3:d8:13:ba:da:11:7a:
38:ab:d3:6d:e9:41:d5:bb:1e:76:94:b9:2d:f3:2d:43:fa:4c:
9e:5d:4c:8a:dd:94:26:f4:04:0f:d4:25:9a:04:e9:70:23:4b:
21:ca:a0:71:b7:cc:f7:5a:2d:c6:19:5f:31:0d:a9:43:65:31:
8f:c1:a0:23:43:49:ab:a7:8a:b4:d4:c8:c1:be:33:51:05:f6:
a1:4f:48:38:a9:2c:26:5a:fa:65:c5:4a:15:0e:11:0c:67:7c:
cc:01:bb:5f:87:c6:86:96:38:3a:0d:68:f2:c5:a8:f9:3e:61:
8a:0e:25:88:46:b2:c4:9d:24:7e:1f:f8:e5:c9:d5:ee:a1:55:
44:ca:c9:3e:21:d1:7b:b9:9b:e7:ea:e7:52:8c:82:4f:af:fe:
bf:c2:2f:83:05:45:4b:3c:6d:9b:ab:70:c0:53:a2:49:9d:25:
64:84:17:b2:87:b2:e8:ff:f1:5d:bc:87:15:f5:1e:68:83:39:
2b:63:61:52:02:48:34:c6:ee:1e:e1:78:ca:3a:05:69:45:74:
ef:02:d0:a2:1b:5e:b7:7e:aa:0e:9b:cf:47:33:a0:d5:99:d9:
79:29:aa:63:40:e6:c8:0d:8c:14:94:d8:ae:fb:fc:71:04:49:
0f:03:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:14 2025 by rpki-client on console.sobornost.net