Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/oiBFy3pkObmB-SUVyi8mjUeggCE.roa
File: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (raw, json)
Hash identifier: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=
Subject key identifier: A2:20:45:CB:7A:64:39:B9:81:F9:25:15:CA:2F:26:8D:47:A0:80:21
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 0194266BBE744775552550B4E60404F53491
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/oiBFy3pkObmB-SUVyi8mjUeggCE.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44929
IP address blocks: 91.203.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:be:74:47:75:55:25:50:b4:e6:04:04:f5:34:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a22045cb7a6439b981f92515ca2f268d47a08021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:03:aa:ca:42:0d:3b:14:4c:5f:9a:8a:19:
c0:60:4f:3b:e3:23:41:48:08:fa:0c:c3:6b:7d:8f:
73:2d:76:b8:70:4e:cf:73:cb:54:7e:4a:be:0e:5d:
a9:1b:9f:2c:51:cf:11:72:25:68:64:86:0f:a0:77:
3f:06:90:29:bd:d5:ee:fb:f4:61:31:e8:95:b0:7a:
db:32:f7:65:4a:fd:80:44:dc:0c:4c:f3:1a:08:03:
da:48:fd:17:3f:e6:14:b5:80:3a:fd:58:a8:ea:f9:
a9:11:1e:a2:7e:6b:0d:4e:e4:bd:e0:78:f5:61:7d:
c7:b5:bc:b6:24:e4:4a:af:c8:fc:00:d5:b4:72:62:
af:12:ba:59:47:20:c1:cd:de:11:7d:13:e6:4f:4e:
49:d2:df:cc:ec:ea:af:ba:8d:e1:93:6e:ee:fb:65:
dd:0f:69:b6:f8:07:18:98:ed:8c:30:27:aa:0b:01:
06:e0:61:c1:95:f8:95:14:e9:92:b2:35:15:3d:b2:
ef:b1:ad:b2:59:d5:83:1c:b5:6f:f0:8c:2d:d2:57:
f1:23:48:9c:bb:ac:29:e5:b9:8a:ce:22:16:31:51:
70:ba:ac:cb:91:dd:38:3f:36:10:09:0f:22:a5:56:
e5:d9:16:b0:5a:55:cd:c0:7f:1d:bc:3a:b9:00:46:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:20:45:CB:7A:64:39:B9:81:F9:25:15:CA:2F:26:8D:47:A0:80:21
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/oiBFy3pkObmB-SUVyi8mjUeggCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:d3:54:75:c3:aa:e3:ab:80:70:c6:46:f5:44:78:35:42:31:
1d:e1:45:fb:5f:59:06:8b:58:79:5a:88:59:e7:83:f4:7b:ae:
db:55:86:aa:8e:b0:34:bf:4d:63:7d:be:ac:ec:28:5c:d3:8f:
81:f2:cd:35:b4:a7:6c:90:6b:a4:c1:f6:c2:ca:bf:e8:0d:eb:
84:e2:a1:17:9e:3c:dc:99:12:bf:e5:c0:c8:d8:71:0c:53:ea:
0f:04:40:52:b4:79:e0:4a:1b:e9:d1:30:f2:af:ec:04:d5:13:
99:6d:41:fd:2e:1a:13:2f:24:e4:b0:41:ca:87:84:4d:a1:24:
ef:c6:ea:35:20:6f:9a:75:e2:35:60:ae:c0:e0:52:54:4c:18:
24:8f:b6:64:8f:0e:96:bd:0b:b7:aa:cc:ce:71:d1:d3:bd:4c:
eb:ac:2d:68:71:8a:97:8f:17:5c:c4:a9:5d:28:5b:41:2d:60:
4a:48:a1:55:0d:42:02:d1:84:b0:b4:e9:44:56:a2:b2:38:0b:
74:25:81:0a:cc:4e:0a:5f:91:2a:39:45:79:be:b3:94:8a:70:
b5:3e:f7:37:62:06:22:72:5b:f9:b4:28:53:a6:db:ef:e4:46:
01:9a:82:f8:20:f2:71:36:f7:a6:ef:ab:8a:c0:3b:09:dd:9d:
32:3c:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net