Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/ILif_MzGUamLzgNNI5GoDGn8YTs.roa
File: ILif_MzGUamLzgNNI5GoDGn8YTs.roa (raw, json)
Hash identifier: PeK9E6lDCay2vjRkURb56mEk6OT9QZkhQAZl2FRYIWc=
Subject key identifier: 20:B8:9F:FC:CC:C6:51:A9:8B:CE:03:4D:23:91:A8:0C:69:FC:61:3B
Certificate issuer: /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial: 019428253AE2F9A294CF2BAA11BCEBA15C07
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/ILif_MzGUamLzgNNI5GoDGn8YTs.roa
Signing time: Thu 02 Jan 2025 17:51:56 +0000
ROA not before: Thu 02 Jan 2025 17:51:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215402
IP address blocks: 91.211.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:3a:e2:f9:a2:94:cf:2b:aa:11:bc:eb:a1:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Validity
Not Before: Jan 2 17:51:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b89ffcccc651a98bce034d2391a80c69fc613b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:9e:9d:5e:22:8d:fe:32:ae:d7:cd:9a:4d:
71:13:60:dd:a0:4d:a5:e3:d4:d0:04:78:58:b0:aa:
8d:01:6a:3a:db:fd:35:e2:65:b8:33:c2:f1:16:7c:
be:3d:70:23:25:bc:bf:ee:a6:a2:3a:0e:83:1b:10:
11:78:c2:fd:49:f9:7f:11:0b:82:3e:39:2e:d6:02:
3a:ea:4a:66:b7:1e:ef:65:0e:9d:9c:23:b4:c4:0a:
3a:ce:d2:d2:f6:e2:be:d1:16:55:4f:b8:a5:0c:b7:
6c:0c:c2:2b:a2:ef:67:91:c4:8f:fd:b4:39:71:03:
60:5a:74:ac:b6:1c:b9:a9:dc:74:15:8f:1c:6f:18:
bb:ab:ef:7f:7c:94:02:37:9c:6d:b0:c1:85:16:23:
8b:2c:1d:ee:81:de:37:6f:ef:5c:7a:d0:c3:5a:7b:
74:d3:72:97:06:2d:ac:a2:46:ad:4e:b2:84:6e:ec:
96:b8:a7:bd:43:04:78:38:b2:77:53:37:a7:1e:ca:
90:ac:22:c8:84:59:a1:56:61:d9:3b:73:a8:b7:d9:
4f:ae:43:2d:fc:1d:e7:7c:c9:ae:b0:fd:db:c6:d3:
d5:da:d7:1e:98:48:31:4b:42:b7:fc:0f:16:8b:e7:
fc:96:ad:98:f7:2c:16:58:47:d6:62:7e:36:f6:8e:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:9F:FC:CC:C6:51:A9:8B:CE:03:4D:23:91:A8:0C:69:FC:61:3B
X509v3 Authority Key Identifier:
keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/ILif_MzGUamLzgNNI5GoDGn8YTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:68:8e:38:e1:c0:98:d5:d4:0d:7d:8a:00:75:3d:ce:bb:f4:
eb:28:1a:3e:69:2d:9e:7f:49:26:6a:2f:9d:16:ab:50:39:f6:
6f:74:92:4d:46:e3:6b:95:2f:84:36:26:0c:ef:9b:f5:31:50:
84:d5:7f:2d:76:16:42:81:ba:62:59:de:49:09:07:22:9f:87:
e9:2d:cd:46:de:4c:8d:ef:ed:33:c5:89:de:31:4d:d0:38:20:
94:f9:23:78:24:86:a9:08:da:a9:f4:b6:36:da:73:be:fd:d2:
ae:6c:1e:18:5e:39:ae:df:f8:01:9f:11:b4:d5:f3:23:cc:b8:
45:50:7a:7d:a8:c8:0b:54:5a:a1:cb:8b:b9:6b:a6:2e:ec:22:
62:b8:8d:b0:ac:bd:cd:03:dd:92:1b:24:f6:32:97:c5:2e:84:
bf:a2:c1:d9:f0:bc:34:e0:2b:11:2c:1a:fb:68:f8:42:18:61:
71:62:d2:84:e6:3d:ae:6e:d7:ae:96:c7:00:69:cd:9d:50:7a:
29:de:fc:35:4b:02:4d:df:3a:99:19:a6:a1:b6:ac:15:37:c5:
01:30:b5:16:4f:fa:ae:22:a5:13:ac:e0:c7:2a:e4:ab:6f:13:
48:1a:17:45:f6:43:dd:c5:de:71:b6:ab:c6:ce:6c:c6:21:06:
26:3d:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:37:10 2025 by rpki-client on console.sobornost.net