Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/4Eso2GRh3TFlocCc5lcI1-kD4Pk.roa
File: 4Eso2GRh3TFlocCc5lcI1-kD4Pk.roa (raw, json)
Hash identifier: ZZWcQEmA2vmSeltVrHKBZfPJ+X7E/tLB/wKbTZ0f8BU=
Subject key identifier: E0:4B:28:D8:64:61:DD:31:65:A1:C0:9C:E6:57:08:D7:E9:03:E0:F9
Certificate issuer: /CN=db42059ce291d49a66920731c767da563ef21124
Certificate serial: 019423D80165083092C329CAEEF015B7BE6B
Authority key identifier: DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/4Eso2GRh3TFlocCc5lcI1-kD4Pk.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57815
IP address blocks: 91.235.165.0/24 maxlen: 24
194.40.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:01:65:08:30:92:c3:29:ca:ee:f0:15:b7:be:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db42059ce291d49a66920731c767da563ef21124
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e04b28d86461dd3165a1c09ce65708d7e903e0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:e8:8b:24:96:6f:21:d4:b2:c6:c6:02:e4:
2a:ff:b9:55:4f:38:fa:8e:f2:88:99:6a:d4:ce:ec:
5a:8f:a6:cf:67:e8:c8:7d:33:b8:d5:0a:9c:47:80:
5c:aa:16:93:cb:14:a0:f0:d5:c4:7e:5a:7a:17:27:
62:9a:9d:06:64:f6:f3:7a:1e:da:7b:c2:19:37:09:
7a:20:6f:2c:04:00:2a:31:9a:78:67:6f:ae:15:ea:
c4:95:91:ab:8e:a1:64:e3:87:f6:ac:ca:89:85:f4:
cb:e5:6f:7d:25:f0:b4:5d:72:aa:6f:60:9b:1e:20:
4e:b8:0a:2e:92:61:dc:8f:cb:3c:ac:5b:4a:57:e1:
b7:3e:8e:e1:2b:b6:3f:2b:48:53:2f:40:b2:6c:95:
1c:6a:07:18:58:b3:ad:06:53:d0:71:c7:d8:2c:d7:
d3:87:36:10:87:13:b6:e8:56:23:b6:3f:e7:d2:02:
55:a1:59:1f:60:f4:77:7a:13:52:fd:b5:da:5e:96:
4b:44:61:ef:b8:50:5e:f7:24:20:5d:c3:5a:ac:97:
1d:89:9c:f7:41:83:6e:40:81:9a:14:17:78:89:f5:
fa:78:26:4c:b7:25:99:ca:9c:f4:5e:3c:ae:9a:24:
ff:91:26:ca:ba:f1:8a:07:a7:cb:8c:dc:fb:4d:0b:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4B:28:D8:64:61:DD:31:65:A1:C0:9C:E6:57:08:D7:E9:03:E0:F9
X509v3 Authority Key Identifier:
keyid:DB:42:05:9C:E2:91:D4:9A:66:92:07:31:C7:67:DA:56:3E:F2:11:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20IFnOKR1Jpmkgcxx2faVj7yESQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/4Eso2GRh3TFlocCc5lcI1-kD4Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9e3f2a-1440-4084-84c2-9312d087dfca/1/20IFnOKR1Jpmkgcxx2faVj7yESQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.165.0/24
194.40.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2b:fa:7f:06:ac:be:fc:2a:a5:fc:f4:17:17:13:69:cb:5f:
ce:cf:f1:b4:17:cf:69:af:2d:24:ea:cb:af:53:1b:8e:47:0a:
08:61:cb:d1:38:52:7d:6f:35:f7:6e:23:e5:3e:bf:8f:1b:af:
4b:8d:13:2c:ef:ca:27:0c:d4:e6:fc:5e:db:26:24:89:08:11:
ae:82:7f:1c:08:e8:a2:9c:05:9a:db:ca:6d:8d:2c:d4:9a:d7:
9f:de:b9:a3:6d:37:8b:75:59:28:70:28:a9:73:0c:7a:3a:38:
f8:9d:50:a7:fb:8c:4e:26:c6:c9:b2:30:be:a7:34:bf:8e:f7:
d6:0e:b0:f8:cc:ac:0f:74:52:79:cc:3d:18:f3:b8:13:60:e9:
bb:08:91:85:0a:34:59:08:80:85:63:48:ba:db:34:95:38:23:
42:4a:ae:b0:a9:12:fa:90:ae:f8:e9:78:0d:b6:1e:92:3e:1e:
28:6b:2f:4e:b2:6c:e6:0c:00:55:d6:7f:77:6c:9e:1b:7d:af:
48:47:e5:71:6f:a4:4d:c5:71:e2:42:92:9f:ab:51:f6:da:35:
36:4d:a3:e8:98:f9:6d:9d:6b:90:ec:22:c2:2a:d7:63:81:35:
93:f3:48:0b:aa:a0:e4:c7:24:7f:34:8c:46:28:7b:7c:ae:36:
a3:27:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net