Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/rbzHYHanwggYI2O2PyN_ccDQ8To.roa
File: rbzHYHanwggYI2O2PyN_ccDQ8To.roa (raw, json)
Hash identifier: ZzfYYIwcl7wz/PiBDA2nkdbr3LCq3ECUyDagAbAOmJA=
Subject key identifier: AD:BC:C7:60:76:A7:C2:08:18:23:63:B6:3F:23:7F:71:C0:D0:F1:3A
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 0194214402FFDEAEC7887183AC9D9181E0D0
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/rbzHYHanwggYI2O2PyN_ccDQ8To.roa
Signing time: Wed 01 Jan 2025 09:48:12 +0000
ROA not before: Wed 01 Jan 2025 09:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207558
IP address blocks: 91.196.228.0/24 maxlen: 24
91.196.229.0/24 maxlen: 24
91.196.230.0/24 maxlen: 24
91.196.231.0/24 maxlen: 24
91.224.171.0/24 maxlen: 24
2a0f:d840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:02:ff:de:ae:c7:88:71:83:ac:9d:91:81:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: Jan 1 09:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adbcc76076a7c208182363b63f237f71c0d0f13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:b6:77:a6:ba:fb:22:66:35:f9:9c:31:46:
21:5d:b4:8a:13:d9:e6:9c:e4:f4:d2:3a:3d:6f:bc:
c8:f1:37:70:47:0d:7e:8b:3a:da:f8:ac:ca:75:d1:
a5:28:30:5f:fa:3c:6b:4b:02:c2:3d:d5:04:56:77:
bb:d0:53:0e:15:f1:f1:0e:b3:ad:4f:5b:84:dc:2a:
5e:d4:59:53:80:a0:1b:8c:75:07:72:11:fa:11:d1:
7d:00:6d:10:f9:5e:51:3b:e5:cb:69:30:dc:0f:b3:
b2:77:3b:1a:5e:fc:85:17:6a:cd:81:1a:47:0d:8c:
4b:37:d6:ef:29:3e:fa:a8:4f:7c:97:71:2e:10:bf:
e7:cd:99:8a:7c:1b:ee:d3:04:7c:68:91:41:bd:6b:
bb:c9:8b:2a:ce:9c:62:6c:60:30:ce:81:bd:86:06:
c3:52:30:51:d7:74:8d:91:bd:5d:be:45:6a:15:11:
7b:a3:84:01:79:f1:e0:d3:c0:51:35:2d:c7:de:21:
e1:ea:18:f1:31:6a:35:f8:f0:66:27:7e:e1:dd:0b:
e6:8d:2d:57:b5:79:b4:d2:52:8b:d3:a3:82:cf:69:
e8:08:59:b1:0d:e9:ee:6a:d2:a4:fb:84:96:3d:0e:
9d:db:98:90:22:7d:cb:41:b8:f2:2e:59:3a:11:59:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:C7:60:76:A7:C2:08:18:23:63:B6:3F:23:7F:71:C0:D0:F1:3A
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/rbzHYHanwggYI2O2PyN_ccDQ8To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.228.0/22
91.224.171.0/24
IPv6:
2a0f:d840::/29
Signature Algorithm: sha256WithRSAEncryption
74:00:bc:dc:62:60:d3:5a:68:4a:65:e3:dd:ba:ee:08:ef:9a:
9a:3f:33:29:7b:c9:4f:bd:25:6d:97:c4:81:9f:c2:ed:2b:5b:
75:14:54:c8:ed:64:ba:4c:c2:a4:59:e0:bf:4a:2e:04:ce:a5:
d0:a1:46:8d:0e:89:e8:18:f6:d1:40:d4:1d:cb:4f:7f:49:b1:
78:f9:20:cd:18:0b:65:d6:68:4b:72:8b:33:a5:58:84:56:1c:
85:72:9e:ea:61:48:0d:3a:60:c4:4d:20:9c:f0:d7:a4:e6:10:
60:63:26:8c:14:86:29:72:b2:ab:f7:3f:47:99:e7:ad:09:80:
6c:44:44:fa:a5:46:5d:f9:c8:61:45:4b:12:fd:c5:ce:19:69:
93:8f:ba:b5:2c:5f:14:a1:a6:76:d0:e5:52:a4:97:8a:56:10:
27:28:52:18:99:59:1a:61:f6:c6:7f:01:66:e4:62:71:89:2d:
ed:ab:16:f0:ea:d7:1a:c1:51:df:1b:f1:f0:8b:ba:60:e4:54:
33:5a:02:06:08:09:cf:ca:23:95:a9:55:ba:c5:87:a9:64:5e:
fe:bf:a7:7b:e9:77:12:cb:79:df:1c:b6:cf:e9:64:9b:8f:79:
6c:22:1e:54:ad:40:06:9b:a4:61:9b:7f:ec:00:66:12:4c:65:
db:f0:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net