Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/onIKXkQooL-gKM4FNa_iPOCUh28.roa
File: onIKXkQooL-gKM4FNa_iPOCUh28.roa (raw, json)
Hash identifier: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=
Subject key identifier: A2:72:0A:5E:44:28:A0:BF:A0:28:CE:05:35:AF:E2:3C:E0:94:87:6F
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 0194228DF007D7BDC6E691CD1DA1EF74DC5A
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/onIKXkQooL-gKM4FNa_iPOCUh28.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58023
IP address blocks: 91.237.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f0:07:d7:bd:c6:e6:91:cd:1d:a1:ef:74:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2720a5e4428a0bfa028ce0535afe23ce094876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:23:d6:ff:29:cb:2e:65:e4:f6:02:63:7a:
47:92:11:24:68:af:a4:f9:e5:15:3e:47:c7:f5:d0:
b1:f3:d6:e4:e1:f4:cb:69:e7:25:ba:68:a7:ed:ee:
cc:73:ee:e9:87:cf:49:09:1f:b5:39:d7:2f:ef:d5:
36:58:c6:dc:91:8c:29:df:7b:cd:3e:ae:02:4a:2b:
6a:4a:68:3b:43:d5:5a:47:57:32:1f:ec:be:d7:aa:
2a:16:1c:ab:12:b4:19:0d:ec:e9:0d:a2:68:ca:8e:
a0:23:7a:dc:33:13:0f:57:b0:9f:11:67:37:8d:3d:
66:11:eb:ab:c8:89:d3:ec:8e:ba:fe:f3:46:a2:b2:
68:52:35:be:c6:b6:e9:cd:82:5d:13:fc:72:d5:00:
b4:d2:d0:cb:9f:58:a4:0d:3b:0d:be:ca:be:fb:7c:
dc:fc:92:28:3a:74:29:8a:37:8a:15:2a:de:ac:14:
b9:62:a1:f3:e6:ed:14:2c:93:95:d8:b9:f0:d5:8b:
04:51:5a:af:a5:5f:c3:ca:e4:0e:09:f3:1c:ec:dd:
64:28:48:7b:05:18:c5:16:a7:a3:22:63:e1:a6:e3:
48:52:16:d9:f0:e5:c6:9b:b1:45:a4:ca:fa:f3:0e:
35:5e:22:73:62:29:c1:92:34:a2:d4:2c:0c:55:b6:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:0A:5E:44:28:A0:BF:A0:28:CE:05:35:AF:E2:3C:E0:94:87:6F
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/onIKXkQooL-gKM4FNa_iPOCUh28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:16:7e:77:64:83:7e:f0:58:8d:53:6f:af:ca:9f:55:7e:9d:
ca:f1:d3:41:9f:06:f9:ce:ec:33:8c:da:43:fa:3c:af:9e:6d:
2a:1b:a5:44:05:4a:e4:bf:16:16:f4:d1:97:f9:5d:d6:bb:44:
21:a4:22:49:f6:9f:a4:21:39:01:40:7d:74:92:36:3a:f4:f9:
7e:f1:0a:ec:5e:fc:e8:88:17:08:91:b0:2a:94:ce:a8:1a:66:
b8:05:92:33:3e:09:cf:2d:1a:96:b8:3f:6f:4e:e1:2c:13:58:
74:a9:1f:27:94:63:d4:11:d2:dc:69:a1:1b:6d:42:16:79:dc:
51:6d:c2:78:00:f1:0c:cd:94:6d:a5:da:ef:8a:49:58:58:a7:
4e:8c:b6:e3:4d:98:0d:b5:b1:ab:c7:5c:57:d0:f1:79:cf:f4:
95:ce:a3:bc:15:c1:25:01:0b:b4:ab:e8:e0:f2:8a:5a:08:8c:
0a:78:59:41:8f:9b:5a:b1:b4:16:74:8f:f1:2b:7d:9d:9c:d4:
5a:f7:36:6b:1c:6d:14:95:04:a2:af:b3:69:0b:36:b9:6d:85:
7f:2b:e0:1f:20:85:ee:f7:d8:ee:b7:38:4b:67:c1:1e:cd:fc:
9c:18:43:f3:7f:6d:89:9e:fa:6a:99:53:09:09:6e:1a:3d:45:
d7:3d:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:19 2025 by rpki-client on console.sobornost.net