Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/XJeFszxemC7e9u-8mZLkEs6aHFs.roa
File: XJeFszxemC7e9u-8mZLkEs6aHFs.roa (raw, json)
Hash identifier: OiP4xwhS3dePGm/ma2M64C+nfCdXfnndrH2qcjsO/X0=
Subject key identifier: 5C:97:85:B3:3C:5E:98:2E:DE:F6:EF:BC:99:92:E4:12:CE:9A:1C:5B
Certificate issuer: /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial: 019420685D4350273A827F9452536A56EF09
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/XJeFszxemC7e9u-8mZLkEs6aHFs.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57419
IP address blocks: 91.199.204.0/24 maxlen: 24
185.207.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5d:43:50:27:3a:82:7f:94:52:53:6a:56:ef:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c9785b33c5e982edef6efbc9992e412ce9a1c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:4d:cb:a5:1f:d4:90:e1:c1:04:0d:0b:3f:
ec:64:90:c4:1e:d7:fa:d0:ba:2b:29:b2:7b:11:97:
47:fd:60:d0:7b:9b:ff:8b:28:8c:26:a4:8c:ce:a6:
0f:11:f5:dc:b1:03:9d:ef:dc:3c:cb:bc:72:69:80:
c6:52:7f:96:01:f7:fa:c7:cd:b4:b1:6f:8b:75:66:
85:88:f7:8a:34:a2:0a:5e:42:52:a9:14:0c:e2:aa:
39:24:6a:fe:2b:f8:ae:bf:d0:b1:f9:ab:4d:d2:9b:
6a:ed:fb:ce:06:7b:d9:b3:53:be:4d:8c:b6:46:de:
c3:db:21:d4:c5:f8:dd:ca:44:2a:d4:f4:32:27:a5:
55:70:0f:04:e4:ee:f3:dc:45:ab:04:2a:cd:0e:6c:
8a:78:a6:7e:12:f1:49:46:46:55:9b:11:b3:19:4b:
38:9b:99:ee:5f:64:02:2f:28:c9:9b:30:9f:73:90:
d8:46:7e:cd:71:b2:be:a7:ac:1a:39:91:81:e4:b0:
58:04:dc:72:4c:41:f4:ac:1e:5d:42:4d:61:46:76:
e1:23:5f:58:55:b2:e7:99:c7:8e:2e:68:41:3c:c7:
11:67:3c:15:22:83:cb:8d:57:d2:4d:e7:d9:ed:be:
cc:13:ac:80:a5:e8:19:67:82:20:0e:f3:ef:23:4b:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:97:85:B3:3C:5E:98:2E:DE:F6:EF:BC:99:92:E4:12:CE:9A:1C:5B
X509v3 Authority Key Identifier:
keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/XJeFszxemC7e9u-8mZLkEs6aHFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.204.0/24
185.207.3.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a3:b1:78:f4:f4:e8:dd:ab:18:19:21:2d:17:37:61:8d:86:
fd:76:1c:9a:7e:5d:ab:5c:cd:96:4c:5c:9a:60:23:6b:2d:23:
0f:d7:4a:d4:df:85:ce:39:c4:38:30:cc:27:20:34:f2:14:1b:
ff:a6:e0:35:e1:8c:a7:b3:7b:36:5e:83:83:c7:65:da:97:93:
45:02:99:cb:34:f9:ec:cc:eb:85:65:07:93:69:78:c0:c3:ba:
fd:13:55:80:95:45:7b:27:e6:d3:87:7e:a9:0f:ca:97:c0:ec:
ab:29:fd:6e:a4:25:d4:7a:69:8f:84:83:45:26:3c:d0:88:68:
e4:38:8a:7e:f2:a4:49:8f:13:65:68:db:da:2c:57:79:78:dc:
2e:e3:b9:55:66:bd:23:9f:f9:05:90:22:d0:62:ee:18:bd:1b:
e6:9e:87:40:a8:1c:e9:33:56:44:c3:cc:0c:9d:6e:63:d3:ed:
1d:e7:bb:7e:4a:81:0b:36:e3:ff:ae:01:0c:2c:03:34:63:b8:
c9:66:d8:8c:dd:f4:61:3b:b3:48:92:b3:54:d8:35:04:fb:23:
62:3e:40:82:66:92:e0:eb:fe:4b:b1:d1:04:bf:f9:44:bf:e0:
03:ad:e0:09:07:03:15:09:9f:d9:5c:98:6d:43:f9:87:3f:10:
86:76:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net