Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/16kn1Yui-A_EBGj4QWkGxZZcGwg.roa
File: 16kn1Yui-A_EBGj4QWkGxZZcGwg.roa (raw, json)
Hash identifier: i1VuKfGGE7dB/E5cr7UTL1VmRkbv0jvZukhFgJcLQKs=
Subject key identifier: D7:A9:27:D5:8B:A2:F8:0F:C4:04:68:F8:41:69:06:C5:96:5C:1B:08
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 0194282375C92C9C4DE989615CAA7AD0AC88
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/16kn1Yui-A_EBGj4QWkGxZZcGwg.roa
Signing time: Thu 02 Jan 2025 17:50:00 +0000
ROA not before: Thu 02 Jan 2025 17:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42074
IP address blocks: 91.218.194.0/24 maxlen: 24
91.218.195.0/24 maxlen: 24
193.108.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:75:c9:2c:9c:4d:e9:89:61:5c:aa:7a:d0:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Jan 2 17:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7a927d58ba2f80fc40468f8416906c5965c1b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:b4:69:b6:fe:aa:48:cd:8e:04:24:e8:ef:
3d:f8:39:f0:ab:6e:43:cb:96:79:ba:1a:e6:73:04:
8a:39:79:c2:d1:06:a0:dd:6d:6e:1d:8e:08:24:d0:
c4:e0:5d:68:56:0b:43:f7:6a:b7:ef:5e:59:38:c4:
61:1e:cc:20:bb:a2:cf:b7:b3:fe:78:a7:60:d4:cd:
a1:03:e8:b7:70:5e:52:5c:19:98:6e:86:01:9f:65:
9d:59:7c:c9:c2:2f:82:8e:3c:ae:e4:2c:91:27:f4:
d8:1b:be:19:ed:31:72:c5:3c:35:ad:f6:ff:64:c4:
5b:b6:eb:1a:cf:c2:dd:1a:0a:bf:0b:90:91:3c:66:
01:9b:ba:47:f1:37:57:29:ce:fe:dd:6f:44:5a:6a:
12:74:65:ab:a8:ac:9f:79:06:2c:b5:f8:3e:2a:5b:
d9:7e:11:c4:1a:51:7d:d4:9c:f5:8f:b8:7e:9f:e2:
00:9b:60:81:28:e2:be:65:26:28:d1:28:0e:a0:b1:
9c:7c:87:8e:5d:a1:e9:a6:3f:07:73:92:e3:74:0c:
08:e7:10:10:aa:81:ca:fb:b0:99:65:a5:1d:4f:e7:
9a:61:32:66:6e:c3:a3:0d:6d:88:72:d0:19:75:dc:
60:08:48:d9:b5:93:07:89:b9:0f:7d:aa:a0:c7:2c:
7a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A9:27:D5:8B:A2:F8:0F:C4:04:68:F8:41:69:06:C5:96:5C:1B:08
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/16kn1Yui-A_EBGj4QWkGxZZcGwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.194.0/23
193.108.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e3:45:31:33:0e:bf:a3:87:d4:9b:46:f9:eb:89:d2:9f:09:
5b:22:8f:4c:6d:55:df:7d:78:f1:99:45:4f:80:f1:ab:91:94:
95:02:49:60:c8:d5:2d:9e:97:a6:3b:17:9c:c6:04:d4:ff:82:
be:bc:cc:2b:d5:f3:62:a3:78:e9:8e:70:ef:f3:59:ed:a9:bd:
f1:70:d6:f4:7f:b1:79:fb:eb:4a:21:1b:78:ac:44:5f:30:77:
c1:9e:ec:b2:a0:44:44:8e:33:bf:58:25:e1:7d:a1:79:f6:d2:
ca:9c:1a:36:32:d4:93:dc:2e:4b:f0:70:b7:8f:f7:74:4a:f4:
2f:51:4a:e2:b9:39:9d:ae:b4:7e:ac:5f:e7:e4:4a:57:c9:88:
5a:6d:b5:78:89:73:87:77:04:11:bb:c0:16:c4:82:1e:05:28:
c3:c6:ef:f4:b5:8b:fc:24:ab:af:cb:12:44:53:5d:d6:c9:86:
b6:3b:9d:ca:b8:e2:19:ed:71:df:8a:d5:8e:8d:dc:5f:14:36:
20:19:12:c5:89:93:db:93:b5:37:b2:de:8f:b9:73:73:d2:4a:
d9:d2:25:e2:a4:08:fa:b8:9e:59:df:ad:3b:00:f4:ac:10:e1:
85:56:c5:2a:6c:e8:0b:17:df:cc:ea:8c:8b:cf:5a:dd:88:0a:
fb:46:6e:ae
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI3XJLJxN6YlhXKp60KyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NmE3YWFlMTVmZjNlODMxZTM4MDNmZDk4YzEwNjNjY2M0
YmYzZWMwHhcNMjUwMTAyMTc1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2E5MjdkNThiYTJmODBmYzQwNDY4Zjg0MTY5MDZjNTk2NWMxYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ju0abb+qkjNjgQk6O89+Dnwq25D
y5Z5uhrmcwSKOXnC0Qag3W1uHY4IJNDE4F1oVgtD92q3715ZOMRhHswgu6LPt7P+
eKdg1M2hA+i3cF5SXBmYboYBn2WdWXzJwi+Cjjyu5CyRJ/TYG74Z7TFyxTw1rfb/
ZMRbtusaz8LdGgq/C5CRPGYBm7pH8TdXKc7+3W9EWmoSdGWrqKyfeQYstfg+KlvZ
fhHEGlF91Jz1j7h+n+IAm2CBKOK+ZSYo0SgOoLGcfIeOXaHppj8Hc5LjdAwI5xAQ
qoHK+7CZZaUdT+eaYTJmbsOjDW2IctAZddxgCEjZtZMHibkPfaqgxyx6EQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNepJ9WLovgPxARo+EFpBsWWXBsIMB8GA1UdIwQY
MBaAFJRqeq4V/z6DHjgD/ZjBBjzMS/PsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdwNnJoWF9Qb01lT0FQOW1NRUdQTXhMOC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85ZTYxYjgtNjIyMy00ZGNlLTkxZDUt
YzZkNWYyYTAyYzZmLzEvMTZrbjFZdWktQV9FQkdqNFFXa0d4WlpjR3dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS85ZTYxYjgtNjIyMy00ZGNlLTkxZDUtYzZkNWYyYTAyYzZm
LzEvbEdwNnJoWF9Qb01lT0FQOW1NRUdQTXhMOC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9rCAwQA
wWzxMA0GCSqGSIb3DQEBCwUAA4IBAQBM40UxMw6/o4fUm0b564nSnwlbIo9MbVXf
fXjxmUVPgPGrkZSVAklgyNUtnpemOxecxgTU/4K+vMwr1fNio3jpjnDv81ntqb3x
cNb0f7F5++tKIRt4rERfMHfBnuyyoEREjjO/WCXhfaF59tLKnBo2MtST3C5L8HC3
j/d0SvQvUUriuTmdrrR+rF/n5EpXyYhabbV4iXOHdwQRu8AWxIIeBSjDxu/0tYv8
JKuvyxJEU13WyYa2O53KuOIZ7XHfitWOjdxfFDYgGRLFiZPbk7U3st6PuXNz0krZ
0iXipAj6uJ5Z3607APSsEOGFVsUqbOgLF9/M6oyLz1rdiAr7Rm6u
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net