Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa
File: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (raw, json)
Hash identifier: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=
Subject key identifier: 1E:19:5F:D9:33:1C:B0:16:CE:F0:50:DC:8E:FA:DB:12:36:8B:34:99
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019560B9E5A3042BBBCA60B180E709635158
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa
Signing time: Tue 04 Mar 2025 10:35:50 +0000
ROA not before: Tue 04 Mar 2025 10:35:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29107
IP address blocks: 91.216.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:b9:e5:a3:04:2b:bb:ca:60:b1:80:e7:09:63:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Mar 4 10:35:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e195fd9331cb016cef050dc8efadb12368b3499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:09:c6:bd:bc:b5:9b:c1:d3:d7:42:28:c3:
ee:7d:1f:f5:61:2a:18:07:bc:0e:86:b9:a2:2f:bb:
06:73:10:2a:65:e3:ba:96:83:40:d0:23:b1:a6:d9:
4f:66:e5:2f:8e:80:0e:5c:14:a2:04:54:f2:99:34:
57:e3:31:01:df:cc:50:21:65:18:64:78:59:9a:22:
36:cb:fe:f7:2d:dd:d9:60:a0:ab:33:b4:a0:2a:b2:
a0:28:11:c2:50:17:be:2f:7e:39:85:f7:3e:f0:4f:
c4:57:db:6b:56:26:5a:bb:7d:5b:34:01:d2:e7:d3:
4f:f7:5c:2d:b5:18:35:de:3c:d0:52:51:a2:2e:d0:
02:17:e2:01:80:2c:c3:27:73:57:73:8d:b6:32:5c:
4f:6c:22:1b:88:9d:af:de:00:98:da:be:d7:d4:37:
27:56:4e:a4:a9:88:90:a9:40:7c:0a:b9:0d:6f:1d:
00:e5:6f:e5:2e:7c:2c:70:05:b1:34:82:d5:a7:05:
a8:2d:b4:96:30:51:30:a3:09:5f:a8:43:09:e0:63:
85:5f:4e:b8:05:bf:ef:f9:d9:a5:94:e0:81:64:df:
d1:b5:9d:25:f9:7f:5a:d5:1a:97:09:64:a7:77:1d:
16:07:f4:e6:e6:b6:51:33:ba:59:48:43:ca:17:de:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:5F:D9:33:1C:B0:16:CE:F0:50:DC:8E:FA:DB:12:36:8B:34:99
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.176.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b7:a6:cf:ee:b1:bf:8b:80:e6:88:49:de:ea:45:c5:39:c3:
26:54:39:6c:30:ff:a3:fb:90:82:71:b4:66:50:ba:2e:75:13:
c7:6f:3a:c1:f5:c4:15:5e:24:c8:37:87:ce:ef:e7:57:81:c3:
ae:8d:66:00:fd:85:2c:94:a7:3a:6e:d2:f1:ff:2c:23:a2:c9:
ed:d3:70:77:b0:62:91:c2:ff:a4:2d:6f:82:0d:7d:63:1a:39:
91:50:fd:a3:f7:10:a2:6b:b4:31:a1:6a:d3:e7:be:90:75:ca:
e6:60:59:2e:a4:e8:cd:13:90:3a:a9:4e:01:8c:df:54:f3:a3:
d8:b6:02:8f:41:e4:08:4b:7a:98:d4:10:2e:fc:48:8a:75:59:
f6:2f:f4:90:2c:05:7b:a0:88:65:a8:d5:22:a4:84:2f:9e:43:
34:0d:d8:5a:9b:26:86:db:06:9d:c5:86:17:e7:c3:6c:64:63:
b2:17:1e:77:9c:55:fe:ab:5c:47:d6:19:6d:09:42:e7:f6:c8:
ec:33:3e:2b:c9:e6:9c:9c:03:57:3f:44:4e:37:54:80:d3:00:
60:de:dc:7a:41:3b:1f:8e:c9:5b:86:dd:09:d2:7b:73:8b:ef:
1f:6b:54:b5:30:81:f9:a9:5a:93:82:a7:25:00:34:53:73:4d:
b2:03:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net