Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/JnfPzURw0o3uQEVpLXDzJLYPYKM.roa
File: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (raw, json)
Hash identifier: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=
Subject key identifier: 26:77:CF:CD:44:70:D2:8D:EE:40:45:69:2D:70:F3:24:B6:0F:60:A3
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 0194236990116B7CBD99990A740122053DA5
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/JnfPzURw0o3uQEVpLXDzJLYPYKM.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43966
IP address blocks: 91.227.44.0/22 maxlen: 22
193.111.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:90:11:6b:7c:bd:99:99:0a:74:01:22:05:3d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2677cfcd4470d28dee4045692d70f324b60f60a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:95:af:04:93:83:c3:6f:87:69:d2:8c:13:fe:
25:a3:4d:7e:40:62:17:3c:89:2b:b3:80:be:bd:e9:
f4:b7:14:e2:f1:51:85:43:04:cb:d4:34:5d:9a:28:
b5:ca:c7:94:af:ce:99:1a:0f:cc:42:43:31:8d:7c:
14:59:76:f9:89:bc:b6:df:e4:a9:f4:70:7a:64:6e:
9e:b6:d9:e1:16:44:2c:e0:bb:d0:4d:07:bf:f2:c6:
42:4b:7a:a5:58:8b:fe:2b:0a:06:1d:03:ae:7f:31:
13:c2:26:4e:93:7e:30:86:58:4e:3d:a0:cd:9c:85:
03:45:1e:79:01:4c:1f:2b:75:eb:d8:1b:51:91:65:
d3:7a:52:d2:64:5d:be:42:75:b2:46:5d:9c:2c:80:
3d:b6:71:52:8b:e5:85:c2:46:b2:c9:61:06:bb:a0:
b9:3c:f1:6c:b6:f0:c4:ce:ad:53:63:60:a6:90:6f:
af:80:14:87:99:ee:73:5b:ff:31:74:8d:06:99:f9:
3f:49:14:2e:df:f1:8b:6a:de:6b:7e:6a:fb:07:7c:
b6:99:58:19:3d:2d:d2:69:2f:7a:82:59:dd:1a:0b:
ab:6c:5f:71:09:53:3e:a2:2c:81:0c:20:ba:02:ab:
68:d0:f6:c4:c5:05:f2:96:e7:a4:5f:ad:d9:a1:04:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:CF:CD:44:70:D2:8D:EE:40:45:69:2D:70:F3:24:B6:0F:60:A3
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/JnfPzURw0o3uQEVpLXDzJLYPYKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.44.0/22
193.111.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:e6:0a:c5:dd:b8:83:c2:97:c7:73:c2:9f:f0:7b:29:a4:00:
9e:c4:1d:93:e8:f2:43:d5:a8:0b:cd:60:52:b0:bf:8f:71:60:
dd:e8:e7:0c:5b:09:a2:06:a1:71:fc:ca:17:0a:b4:c6:e5:e0:
98:d6:73:da:d6:92:e8:19:0b:12:29:02:2c:64:b8:f6:55:01:
80:7f:58:6d:db:60:e0:6b:db:0b:ea:46:01:46:4f:2a:cc:c0:
8f:c2:1d:f3:26:6c:9d:08:86:94:3e:c9:9a:89:74:7d:45:94:
6d:f6:05:48:c7:96:c9:1a:f6:23:99:43:49:39:cd:9f:ae:99:
33:df:c9:96:a3:0d:d7:2b:25:40:64:8b:f7:95:f4:d1:2f:bc:
10:27:d4:6a:16:3f:d4:77:4e:d0:a5:39:af:e4:43:58:73:6d:
e7:d4:77:d7:8c:9f:1e:95:be:f8:07:68:58:35:27:44:5c:e8:
d7:94:a6:b2:77:c4:fd:24:b5:ba:a1:f9:31:6a:6e:3a:3d:d8:
bd:1c:35:60:66:b2:05:d2:70:50:fd:4a:0a:f0:9b:28:df:32:
09:1a:fe:1e:61:7c:38:f8:1d:c2:31:d9:84:57:f2:f6:bf:ce:
b3:46:5b:7a:22:c2:76:7b:ef:cc:1f:d5:03:27:80:d3:aa:fb:
e1:9a:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net