Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa
File: 1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa (raw, json)
Hash identifier: Kdt5sjduBNPRdliFvzUojjEC7aaeGnPMG73opbmbK+Q=
Subject key identifier: FB:8B:B8:0F:0F:64:C3:D6:3D:08:48:BA:19:38:C0:F1:18:62:5F:29
Certificate issuer: /CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Certificate serial: 01941FFA1869C315EE567B06D412AEC67B28
Authority key identifier: 00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6798
IP address blocks: 91.199.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:69:c3:15:ee:56:7b:06:d4:12:ae:c6:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0011400d548fa21af819a0c6e23e77a6012eb5e9
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb8bb80f0f64c3d63d0848ba1938c0f118625f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:50:5f:66:10:fd:ad:88:30:f2:83:cb:e7:
51:fc:87:cb:84:5f:9d:c6:d2:30:02:0c:a7:e9:17:
aa:8d:1a:52:49:29:db:f0:dd:b3:9f:eb:e3:c8:67:
9c:ba:85:3b:1a:b0:74:d5:b9:61:95:d1:11:95:c8:
fe:ca:7f:8a:20:12:a7:50:6c:38:ec:fc:94:ee:bb:
53:06:19:da:0e:21:8c:0b:b5:b5:c0:46:a0:5b:f3:
61:c4:fd:27:2a:06:88:7a:fb:e8:ff:bf:bc:d2:57:
c4:6f:69:dc:fa:f2:4e:eb:04:81:1c:f7:d5:c2:e2:
8b:a4:02:76:6a:92:e0:d9:f9:96:0e:d0:bc:b4:a6:
3f:d9:ed:09:a3:08:ff:8e:34:20:e4:21:ca:e4:7a:
64:18:47:67:6e:5f:87:68:ef:72:14:bc:3e:4f:ba:
cb:6d:97:36:7c:68:e3:7b:2e:2a:e5:76:80:88:50:
b1:71:31:dd:ed:3a:7c:a9:e1:0f:d6:d1:e9:2f:62:
02:7c:bc:a2:a8:f7:2d:1b:e5:d1:27:fd:e6:bb:09:
f8:7f:cb:f6:23:84:62:a2:65:1c:88:44:9e:1e:26:
53:dd:09:94:96:c5:02:93:58:b5:6c:df:ad:11:60:
8c:e9:c1:ee:fa:aa:6f:b0:af:fd:e9:fa:2f:0c:f2:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8B:B8:0F:0F:64:C3:D6:3D:08:48:BA:19:38:C0:F1:18:62:5F:29
X509v3 Authority Key Identifier:
keyid:00:11:40:0D:54:8F:A2:1A:F8:19:A0:C6:E2:3E:77:A6:01:2E:B5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABFADVSPohr4GaDG4j53pgEutek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/1-4u4Dw9kw9Y9CEi6GTjA8RhiXyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52daab-6829-45fa-967e-01f4606c65ec/1/ABFADVSPohr4GaDG4j53pgEutek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.70.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a6:44:99:91:e8:6f:c7:29:64:c6:95:40:91:87:ac:94:76:
66:33:05:a0:c1:ed:35:35:99:ed:f9:8c:91:0e:a4:93:c8:ea:
c4:7f:5b:02:bf:9c:f2:f7:ab:27:3f:51:ed:0d:f7:4d:df:7c:
f1:da:2c:04:27:29:ee:da:2f:f3:3b:cb:55:55:c9:da:eb:2f:
85:23:49:6d:6e:4c:ae:71:87:ab:13:07:73:4b:cc:bc:23:0d:
e6:2b:aa:25:e4:46:5e:f3:24:89:0f:4e:9d:e5:c4:33:7d:45:
ee:86:4d:a2:b7:cf:8c:b3:71:09:6b:f0:54:5b:32:68:85:2d:
a2:ec:2a:84:c8:6e:b2:56:79:85:4b:89:33:37:43:1b:17:ba:
85:c9:45:b9:68:31:39:f1:4f:ec:86:18:bc:b6:55:e5:58:c5:
06:27:f6:dd:0e:f6:c7:7a:4f:2f:2a:56:83:cd:e7:b8:19:e3:
e1:27:68:e0:d9:c5:28:5a:12:99:d8:6b:b9:3b:ce:43:4f:61:
7f:4d:47:d1:7c:9a:fa:f1:6e:6e:40:4b:07:86:9f:cb:0b:c5:
1c:c8:b1:34:9f:cc:a5:5c:4c:77:c6:8d:13:30:80:6f:de:42:
bd:c4:d5:51:36:4c:5b:ab:46:67:e0:5b:dd:ee:bd:fd:26:59:
f7:96:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net