Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/ygERJqcQ4QTw-4htxExNNa3ryrY.roa
File: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (raw, json)
Hash identifier: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=
Subject key identifier: CA:01:11:26:A7:10:E1:04:F0:FB:88:6D:C4:4C:4D:35:AD:EB:CA:B6
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 0194274821635B2176622EC0173D9F3130F6
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/ygERJqcQ4QTw-4htxExNNa3ryrY.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208664
IP address blocks: 91.201.10.0/24 maxlen: 24
91.207.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:21:63:5b:21:76:62:2e:c0:17:3d:9f:31:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca011126a710e104f0fb886dc44c4d35adebcab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1a:ed:0b:75:d6:8a:b0:34:79:98:f1:3c:26:
d9:af:9e:ef:c5:9c:87:25:cd:a9:1d:59:0f:93:5e:
55:45:c5:c6:d2:70:d5:ea:d9:99:29:d2:9b:e0:fd:
26:f2:82:43:d5:24:11:d9:e5:3d:71:36:78:d9:46:
d4:fc:ee:4f:ca:54:1f:92:b8:18:4d:fb:0c:cb:4c:
83:f8:4f:90:e5:c8:45:82:d4:d9:11:52:f4:94:66:
98:51:cc:21:7d:6e:98:9e:e7:ac:45:35:ec:09:5e:
36:72:2d:58:ff:3f:20:d7:5f:ca:c5:79:43:90:b2:
2d:a1:e4:14:4d:40:f5:4c:cd:45:a3:d0:78:7b:70:
b8:ca:f5:54:ef:35:1b:2a:15:c4:03:1b:e5:53:15:
0e:e7:61:54:a2:dc:ab:e4:e3:36:f3:85:92:cc:60:
26:0b:20:28:67:0b:87:1e:3e:fd:7c:b3:92:4d:5a:
36:d9:7a:8b:94:44:5f:c4:57:39:20:cd:2c:1c:1e:
1b:9a:02:78:8c:91:18:c3:19:63:19:c1:2d:41:de:
9b:fb:6c:c4:b4:09:c1:5f:f2:f7:40:f3:d9:7d:66:
76:ea:e9:66:52:18:34:c2:29:e4:db:50:03:1c:4e:
1f:39:f6:46:cc:cb:9a:98:28:71:84:7e:16:bb:1e:
e9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:11:26:A7:10:E1:04:F0:FB:88:6D:C4:4C:4D:35:AD:EB:CA:B6
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/ygERJqcQ4QTw-4htxExNNa3ryrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.10.0/24
91.207.8.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f5:c7:cc:b3:24:70:3e:2a:01:e2:ff:85:33:6c:32:19:9f:
7d:1d:9b:87:05:bf:50:fa:ab:28:90:49:d9:9f:28:5f:9f:4e:
6c:89:bc:0f:7d:42:44:55:32:fb:37:a8:c4:e8:4a:3d:24:6b:
dc:8c:32:ee:2f:8e:fd:63:a2:9c:86:39:88:45:82:93:a0:ae:
23:f1:e5:b3:fc:6f:f5:38:0d:4e:5f:0f:6f:86:36:c1:aa:de:
31:ed:b0:a6:7c:e8:4d:39:bc:55:ed:21:2d:3a:8b:3c:a0:06:
4f:e2:d7:63:66:86:67:5f:a3:d2:83:9c:32:02:46:8d:e2:e0:
9f:d5:a5:7b:d6:97:4c:41:3d:b5:95:73:a9:3a:3a:8d:8a:92:
d7:4b:43:22:b5:dc:6c:5c:e9:ee:06:40:71:e6:b3:7f:17:a6:
99:3a:62:a9:f1:e2:f6:aa:e4:2c:ac:03:58:dc:c2:e8:4d:8e:
7f:06:13:a6:9d:0c:11:11:af:99:a7:81:53:d2:0e:11:15:15:
34:ca:e9:4b:7b:db:b6:b8:b5:39:d8:0d:b2:28:4f:16:00:81:
ae:02:5e:3e:91:dd:b5:89:8e:54:9a:2d:47:98:9a:11:65:e9:
28:c0:5d:8a:6e:f0:5d:98:a2:d5:65:7b:77:7f:ee:cc:11:02:
1c:74:4c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net