Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/E3bOWVadiTMoov1haUFyRTwduJA.roa
File: E3bOWVadiTMoov1haUFyRTwduJA.roa (raw, json)
Hash identifier: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=
Subject key identifier: 13:76:CE:59:56:9D:89:33:28:A2:FD:61:69:41:72:45:3C:1D:B8:90
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019421B243A4BB93D4C4B801992AC6A36873
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/E3bOWVadiTMoov1haUFyRTwduJA.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48954
IP address blocks: 185.220.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:43:a4:bb:93:d4:c4:b8:01:99:2a:c6:a3:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1376ce59569d893328a2fd61694172453c1db890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:14:1f:2f:2e:ef:42:2a:8c:b4:bf:ec:28:
82:24:11:0a:24:56:7e:f7:09:e1:a2:4e:a5:a6:43:
83:48:ab:17:5a:45:3f:db:d8:b6:92:6a:09:00:28:
88:3d:0a:00:1f:1e:76:95:c8:60:3f:d1:49:63:72:
f0:cf:cc:16:0c:40:fe:f0:4f:d7:76:68:cc:b0:0a:
0d:82:96:b2:c3:4f:73:93:9b:7a:0a:7c:df:bf:59:
c8:a1:66:95:54:a1:5f:5b:46:ae:8a:ec:6a:fa:98:
da:f7:e7:8c:af:40:01:65:ca:51:37:b6:c1:36:3f:
4d:69:fc:f0:3a:cd:64:07:2e:1c:86:c3:de:a3:a1:
3c:35:19:e2:c0:c8:e6:fe:a9:13:21:fd:1d:6e:9a:
a7:82:5c:f5:76:5b:ee:e2:82:ec:dd:5b:f7:13:2e:
b6:a3:09:27:32:c9:2a:de:6e:e8:5b:0a:cd:c7:e0:
2b:6c:39:f1:1c:64:92:eb:db:86:62:47:13:c7:90:
a0:b6:d1:87:92:d1:ed:da:dd:82:cc:4c:31:b3:f3:
3a:93:16:a2:76:59:1a:b1:f7:03:a4:fa:84:dd:a3:
41:bd:6a:da:ba:82:a0:00:e8:bc:b5:fe:21:e6:38:
15:61:2b:34:01:df:3a:c9:a2:18:89:48:a9:16:24:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:CE:59:56:9D:89:33:28:A2:FD:61:69:41:72:45:3C:1D:B8:90
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/E3bOWVadiTMoov1haUFyRTwduJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.91.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3b:50:86:7b:61:aa:57:7e:c2:5b:60:5c:6f:24:1d:aa:7f:
52:7d:01:e0:32:52:d4:13:72:a4:57:05:8a:6e:d2:0b:52:c7:
59:54:a1:8c:4b:3d:34:cd:42:6d:07:8d:0f:9a:50:0b:e0:d5:
e7:88:f4:50:29:13:b7:f9:d5:65:00:29:a4:08:6f:04:76:ba:
3d:6f:78:b9:7a:f8:e2:76:91:2d:0d:57:8e:6e:e8:22:c6:56:
9a:88:ac:89:2d:4b:8d:2f:0f:d0:13:5e:97:75:b5:1f:85:b4:
46:a4:32:4f:94:25:41:7d:2e:8a:1c:cf:12:89:ed:6e:7c:16:
43:9e:3e:9d:ae:81:2a:32:de:58:4d:0f:3e:15:59:5a:1c:32:
6a:96:24:e2:0b:42:a3:67:d9:50:04:16:c3:88:94:86:ea:ef:
0a:5d:ab:74:7b:da:af:e7:18:81:2b:ae:84:fc:6c:05:71:28:
74:a5:be:2b:47:6e:e3:ad:5f:d9:b3:a6:d0:7f:31:c2:7e:b9:
73:a3:32:61:07:b7:0b:c9:95:30:81:8d:21:8a:63:94:9f:98:
0d:07:32:7f:a6:1d:ce:7c:55:01:22:e3:36:b5:04:15:bc:a9:
0d:ec:76:69:69:c6:36:dd:09:f0:5d:5e:72:a2:dd:08:e8:14:
d5:56:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net