Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/dDvbinURbnBhghcDsCWr8pNjL-Q.roa
File: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (raw, json)
Hash identifier: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=
Subject key identifier: 74:3B:DB:8A:75:11:6E:70:61:82:17:03:B0:25:AB:F2:93:63:2F:E4
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019427477E1FE53B5715D3ED5A21DF1FE48A
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/dDvbinURbnBhghcDsCWr8pNjL-Q.roa
Signing time: Thu 02 Jan 2025 13:49:44 +0000
ROA not before: Thu 02 Jan 2025 13:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197481
IP address blocks: 91.213.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7e:1f:e5:3b:57:15:d3:ed:5a:21:df:1f:e4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Jan 2 13:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=743bdb8a75116e7061821703b025abf293632fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:49:a4:29:7f:d2:89:56:a8:a3:51:45:22:
ef:27:c1:9b:e5:82:4b:3c:c7:32:50:18:ad:bb:68:
fc:e0:eb:89:c0:15:b2:5f:20:f5:ee:56:2d:a3:d2:
ee:3f:ae:e7:7c:84:e0:fc:d4:06:0c:c1:54:c6:f7:
0e:38:c6:a3:fb:8c:c6:22:08:9c:89:4f:78:09:43:
3a:e0:ee:e0:02:c6:7d:cb:ba:72:e5:13:7b:07:f3:
46:c4:a9:fd:5b:a0:e1:b9:2b:f5:b0:93:49:93:b3:
3a:42:9b:ea:04:03:41:6f:7c:42:54:74:42:02:65:
a1:b8:c2:33:93:f7:c3:8b:51:ab:18:fd:3b:88:47:
a3:bb:cd:28:9c:bf:56:54:5d:79:04:12:0e:db:63:
3d:bb:8f:65:36:24:a6:3b:cc:21:10:ec:fd:7c:35:
94:14:da:45:90:ff:02:7d:74:57:01:2d:53:e5:da:
f9:78:c2:9c:17:30:93:57:52:d2:0c:f8:45:14:7c:
2b:6d:a0:9f:98:a7:1a:b5:fb:af:04:84:51:69:c4:
30:a6:bb:c2:d8:ea:67:77:a0:5f:47:c7:74:c0:d3:
13:e1:e6:6a:7d:8c:be:f8:e9:96:6b:68:bc:7c:6d:
76:e6:08:04:a1:73:b4:6e:40:a6:f5:0c:2a:17:57:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:DB:8A:75:11:6E:70:61:82:17:03:B0:25:AB:F2:93:63:2F:E4
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/dDvbinURbnBhghcDsCWr8pNjL-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.33.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c7:00:4c:68:db:4e:31:84:4e:37:8c:99:1a:a2:c6:36:e9:
91:74:95:a9:b3:cd:7f:a6:8b:8c:f8:63:0d:40:5e:c6:8f:1c:
be:63:11:8c:c7:40:eb:97:8e:5d:47:db:49:eb:8c:f1:a9:e1:
52:1f:c7:03:ea:fe:50:54:1c:0d:1f:d6:7a:64:f9:e2:47:70:
48:02:f2:2e:3a:fc:9a:fb:fd:8c:3f:a3:22:96:47:ac:1b:6d:
8f:7a:07:f0:d0:4d:d4:0d:67:1a:32:41:f3:5d:ef:15:ff:68:
99:71:da:6f:92:b2:ad:46:02:ce:e7:f3:f2:c9:8d:2d:e2:6f:
e6:64:9c:44:67:1b:37:2f:74:8d:79:9d:0c:5e:0a:df:21:9e:
36:fb:14:9a:c6:ca:57:18:30:dd:d3:5b:91:23:9d:7d:df:76:
d8:4c:03:82:73:af:ed:d3:3b:cb:0f:7c:f2:3e:c6:2a:8d:ce:
b2:87:0d:41:1a:44:6e:09:b5:1e:60:1b:c8:ee:81:8a:97:09:
89:87:24:b3:2b:20:c7:ca:aa:08:9e:65:27:b4:ca:1e:4c:cb:
08:f0:9f:b4:cf:ac:ac:4a:d5:c3:f5:81:a9:ab:83:c0:77:d5:
d2:a0:ef:97:8a:dc:d3:ab:dd:98:c6:4c:00:5e:3e:04:d7:b8:
17:9d:ca:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net