Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/6ignIb5OCDRZa9htQBKWaTGmU9o.roa
File: 6ignIb5OCDRZa9htQBKWaTGmU9o.roa (raw, json)
Hash identifier: zSgV1vtphKXfQn8b1eScbKSqpXfajJgXTewaQSsjXpw=
Subject key identifier: EA:28:27:21:BE:4E:08:34:59:6B:D8:6D:40:12:96:69:31:A6:53:DA
Certificate issuer: /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Certificate serial: 0194266A3A312935F6A76DCE5D69624867BF
Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/6ignIb5OCDRZa9htQBKWaTGmU9o.roa
Signing time: Thu 02 Jan 2025 09:48:03 +0000
ROA not before: Thu 02 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21173
IP address blocks: 80.91.96.0/20 maxlen: 20
80.91.96.0/21 maxlen: 21
80.91.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:3a:31:29:35:f6:a7:6d:ce:5d:69:62:48:67:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Validity
Not Before: Jan 2 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea282721be4e0834596bd86d4012966931a653da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:f4:49:4e:9c:15:ec:9e:4a:f5:f4:bc:dd:
aa:dd:c4:11:e8:90:ce:f0:c0:0b:5e:80:96:8f:86:
03:ef:44:4e:41:e8:59:03:94:87:8e:84:a6:b8:c7:
a7:7a:14:34:bc:ae:f4:b0:10:bd:19:c8:f4:dc:08:
f6:46:6e:36:a0:a3:43:70:00:26:57:89:2f:40:fe:
b6:72:15:f5:70:47:ce:78:e8:c6:94:c6:71:56:10:
e9:c7:76:7f:b8:af:58:4b:da:cc:15:e6:70:28:40:
36:4f:67:f8:2a:2e:a8:56:f7:b3:4f:6e:00:a8:e3:
6a:7a:b6:47:15:37:dd:f3:04:12:01:97:f3:9d:b7:
28:8a:59:ee:24:e7:ec:5a:c0:78:38:19:c5:fb:aa:
44:0d:90:3e:30:65:f9:40:58:21:20:71:db:10:d2:
7e:31:19:da:24:cd:59:b2:81:63:72:19:8a:86:89:
b9:08:f3:e9:7f:22:9d:5e:1d:68:5f:98:c8:8b:15:
38:19:3e:0f:15:49:90:f0:2c:09:1f:80:f4:9f:94:
e9:f2:6a:bb:2e:37:bb:a1:e1:7f:07:63:55:ea:76:
fa:25:7f:95:12:7f:55:8b:14:d2:c1:3f:be:49:16:
01:8b:29:a3:3b:48:9f:31:cf:ef:9a:c1:e4:d5:d8:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:27:21:BE:4E:08:34:59:6B:D8:6D:40:12:96:69:31:A6:53:DA
X509v3 Authority Key Identifier:
keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/6ignIb5OCDRZa9htQBKWaTGmU9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.96.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:3c:68:0e:1a:38:e2:cf:fb:04:ac:28:54:5c:86:cd:f3:4f:
29:71:6c:b4:da:5a:f2:2c:12:0c:1a:9b:df:d1:ee:be:05:49:
d8:a5:8b:34:b4:2d:18:d5:ae:a2:3c:6a:36:ec:c3:61:0f:39:
b5:83:ce:2b:39:26:94:6c:f0:49:42:bc:66:98:8b:b2:5d:20:
3e:50:3e:6b:b8:d7:f9:21:1f:07:61:fe:e1:98:7b:54:21:f8:
10:f3:4d:4e:70:44:33:78:df:bc:19:de:ba:d1:f0:d3:95:0f:
41:98:30:6e:cf:d6:48:de:82:89:2e:ba:d2:7e:de:5c:2b:0e:
fd:7d:52:16:41:9d:1d:a0:17:31:ca:77:c0:b8:3c:7b:54:e8:
dc:5e:55:88:17:2c:8b:1c:73:2d:d6:0c:03:3a:b4:0e:ac:3f:
07:41:5d:0b:3b:f4:8f:12:b1:0b:be:98:96:e0:25:0c:f4:00:
ea:11:0e:a2:55:97:59:67:b5:d8:82:b7:54:dd:02:ba:24:fe:
24:a5:0d:db:46:9a:6c:45:da:15:4d:f9:13:1e:a8:ff:f4:d1:
66:f7:4d:18:f7:eb:62:2d:94:7c:ef:34:70:16:8a:02:69:d7:
20:26:e3:49:c8:a0:88:15:01:7c:8a:e5:92:72:2c:3e:5b:21:
6e:7a:c5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net