Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/C6G26s2_9rDhMVp1kQhNB3w99vU.roa
File: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (raw, json)
Hash identifier: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=
Subject key identifier: 0B:A1:B6:EA:CD:BF:F6:B0:E1:31:5A:75:91:08:4D:07:7C:3D:F6:F5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 01942521EAB3872AB943046DE615E4E261E0
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/C6G26s2_9rDhMVp1kQhNB3w99vU.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42595
IP address blocks: 91.192.252.0/22 maxlen: 24
91.223.51.0/24 maxlen: 24
91.224.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ea:b3:87:2a:b9:43:04:6d:e6:15:e4:e2:61:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ba1b6eacdbff6b0e1315a7591084d077c3df6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:de:42:4d:23:e5:2b:13:87:d9:fd:96:2e:
c0:ca:ef:c1:70:e8:c9:d4:53:ed:db:32:36:bb:af:
27:f4:7e:6b:65:81:ed:b9:4d:c5:ab:47:3a:de:94:
0f:63:67:97:3c:51:cb:32:01:52:d2:a6:fe:22:03:
db:4b:6f:1b:13:99:10:56:46:8b:99:fe:8c:70:e6:
90:30:64:9a:26:12:de:7d:a6:ab:63:8f:93:41:a7:
42:3d:f9:c9:cf:02:23:82:54:4e:0d:c5:38:d6:0c:
44:45:28:59:62:30:9e:a5:d7:e2:7f:82:0b:23:f6:
99:15:30:49:1c:cd:20:34:bf:8b:c8:1f:b4:e9:25:
75:71:5b:8f:af:20:92:25:5a:c1:90:d8:fc:2d:b9:
bb:83:4e:cc:9d:67:84:45:49:78:84:e2:e1:78:8d:
6a:9b:6b:f1:d5:d7:ac:53:6d:50:7e:ba:0b:27:8d:
a7:d4:ab:bf:48:98:b7:4f:60:0e:ee:40:59:20:44:
ee:ee:0a:8b:1b:15:6b:94:8a:23:cd:09:da:02:45:
e2:ec:2e:51:4e:39:e2:2b:c6:d2:b0:5e:d5:f7:02:
9d:c7:b4:79:c5:5f:a7:72:83:29:52:b6:e3:b1:82:
31:38:c9:0a:2e:18:df:de:68:d8:e4:36:a6:a6:a0:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:B6:EA:CD:BF:F6:B0:E1:31:5A:75:91:08:4D:07:7C:3D:F6:F5
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/C6G26s2_9rDhMVp1kQhNB3w99vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.252.0/22
91.223.51.0/24
91.224.36.0/23
Signature Algorithm: sha256WithRSAEncryption
34:45:55:39:38:eb:86:eb:e5:ba:06:4f:63:73:39:b4:7a:34:
9f:a1:1e:fa:79:6e:c4:b9:6b:f7:07:a7:6c:7d:18:f7:db:7d:
63:90:97:85:b5:49:58:99:ca:9f:89:ce:9d:82:3a:60:ea:e2:
34:8a:f9:5e:84:4d:44:c5:f0:c1:41:7d:83:88:9b:d5:b6:17:
4a:f1:81:85:29:d1:69:ba:c9:53:56:6f:94:0b:71:76:29:47:
7f:71:83:cf:25:3f:bc:4a:67:09:12:7b:af:10:59:86:28:d2:
ec:03:f5:2f:b8:6e:1c:7f:bc:4c:0c:ae:4d:17:6e:68:14:2d:
ca:14:68:ac:c9:c8:ed:e0:e4:b5:ca:b7:23:18:cb:8f:fa:b1:
78:3e:6c:11:c5:c0:b3:21:ac:0c:91:82:c3:d2:d7:4a:3f:57:
2a:be:85:41:30:01:f3:67:64:cf:23:de:d6:e2:8d:2b:34:69:
d8:c0:a7:ec:7b:6a:99:ed:fb:2e:29:7b:35:3c:f0:f5:04:94:
da:f5:8d:86:96:eb:c2:6e:36:7c:06:83:02:99:62:35:a5:76:
bf:cf:36:dc:48:ad:a2:52:78:f5:84:72:d4:a9:7c:83:9c:38:
a6:03:8d:b8:12:96:83:8e:63:77:3c:a3:a5:40:3f:4d:d1:01:
fc:82:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net