Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/jRO1e3hTXAd70fc6Qsmrq_xKPoU.roa
File: jRO1e3hTXAd70fc6Qsmrq_xKPoU.roa (raw, json)
Hash identifier: AAZqmZaGTY2ISP2pOvnDomZPlwhbW/iD6slS5k2a/FQ=
Subject key identifier: 8D:13:B5:7B:78:53:5C:07:7B:D1:F7:3A:42:C9:AB:AB:FC:4A:3E:85
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 019626F4CDEECFDC20C36CA67B8C42ECBE1E
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/jRO1e3hTXAd70fc6Qsmrq_xKPoU.roa
Signing time: Fri 11 Apr 2025 22:24:59 +0000
ROA not before: Fri 11 Apr 2025 22:24:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208684
IP address blocks: 91.230.168.0/24 maxlen: 24
91.230.188.0/24 maxlen: 24
91.231.47.0/24 maxlen: 24
91.231.89.0/24 maxlen: 24
2a0b:2640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:f4:cd:ee:cf:dc:20:c3:6c:a6:7b:8c:42:ec:be:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Apr 11 22:24:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d13b57b78535c077bd1f73a42c9ababfc4a3e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:1b:3e:23:59:a5:bc:3e:b0:9e:44:33:32:
e5:10:75:33:ac:b8:8e:9d:ce:a5:ec:20:07:04:6b:
0a:9f:3b:23:df:23:c7:e6:fd:43:8a:aa:4b:b9:65:
aa:34:c7:89:b0:ba:8e:98:d8:1f:7e:7e:4a:80:7d:
89:5f:ff:81:41:f6:b8:1e:2b:7a:d6:bb:7a:02:69:
63:42:d4:38:c9:2f:6e:25:41:aa:51:e5:65:c3:b7:
7d:2c:41:38:95:87:82:03:87:3e:66:c6:fc:32:ce:
d7:15:9f:df:6b:e4:3c:e2:d7:37:6c:37:df:11:ac:
6b:ba:61:fb:b6:ce:b3:b1:3a:50:a9:70:c3:68:cf:
e6:92:9c:41:91:06:94:d0:b3:88:69:be:15:8e:28:
00:c8:c0:c9:82:4b:cc:27:9c:c5:f1:08:e4:b1:24:
b6:be:5a:da:b0:b5:46:21:7d:7b:10:1b:88:a8:b2:
15:14:da:f8:be:c3:c9:5b:40:17:1e:2d:73:c5:21:
eb:0c:0b:47:6e:e4:e3:99:ea:01:1c:34:ae:bf:05:
70:92:2e:31:71:21:6a:11:32:86:c6:20:42:3b:a7:
a5:0f:c6:12:63:cb:fb:c4:e5:c2:4c:c3:14:25:61:
5c:64:7e:a7:a5:18:bb:12:17:46:f7:ce:95:ba:14:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:B5:7B:78:53:5C:07:7B:D1:F7:3A:42:C9:AB:AB:FC:4A:3E:85
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/jRO1e3hTXAd70fc6Qsmrq_xKPoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.168.0/24
91.230.188.0/24
91.231.47.0/24
91.231.89.0/24
IPv6:
2a0b:2640::/29
Signature Algorithm: sha256WithRSAEncryption
1b:a7:46:65:e1:57:bf:12:b5:df:ba:22:61:cc:9e:c4:0d:8c:
c0:ac:cb:ca:bf:87:7e:08:bf:97:03:6f:d7:3a:ff:77:2c:de:
68:9b:0c:b7:c2:31:e6:7a:e4:f0:69:18:1e:f6:2d:b7:7a:94:
c0:45:f8:12:14:99:94:c2:64:06:11:7b:48:b2:d3:e4:38:e4:
85:25:02:c2:a2:15:21:4e:13:58:6f:25:ec:ad:6c:a7:b6:cb:
18:79:d0:da:f9:2a:ba:04:97:bb:ef:5e:1e:f1:30:3f:47:e4:
a5:9d:ab:d5:57:52:8f:22:bc:8a:60:b7:67:24:d6:4c:f7:69:
7d:f9:a6:3a:d9:9a:53:81:8d:07:e4:50:e1:7e:80:c7:1c:df:
a8:7f:b5:38:3e:61:a6:04:af:8c:f2:b3:17:ab:5e:e5:90:7d:
91:11:46:e8:20:93:23:39:3c:83:0a:25:48:51:c2:fa:87:3a:
e4:f1:65:ca:96:56:04:06:84:58:cd:3d:80:61:5b:31:68:04:
c1:42:78:c8:c0:0d:25:4b:1c:af:e0:be:d1:f3:d5:2d:3b:c0:
41:75:71:90:4e:55:82:d0:60:26:a1:81:ab:45:5e:ca:1c:6c:
65:cf:36:8e:43:ee:40:1f:ba:90:7a:50:c7:3a:c4:27:af:ae:
9c:8f:87:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:09 2025 by rpki-client on console.sobornost.net