Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/iinwbjaCpK6V8_stsXvEKtBkl8w.roa
File: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (raw, json)
Hash identifier: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=
Subject key identifier: 8A:29:F0:6E:36:82:A4:AE:95:F3:FB:2D:B1:7B:C4:2A:D0:64:97:CC
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 019427B548C5630714F06B9DD11547919B28
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/iinwbjaCpK6V8_stsXvEKtBkl8w.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6881
IP address blocks: 91.207.230.0/23 maxlen: 23
91.207.234.0/23 maxlen: 23
91.210.16.0/22 maxlen: 32
93.190.128.0/21 maxlen: 32
185.1.34.0/24 maxlen: 32
194.30.187.0/24 maxlen: 32
194.50.100.0/24 maxlen: 32
195.47.235.0/24 maxlen: 32
2001:7f8:14::/48 maxlen: 128
2001:7f8:91::/48 maxlen: 128
2a02:38::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:48:c5:63:07:14:f0:6b:9d:d1:15:47:91:9b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a29f06e3682a4ae95f3fb2db17bc42ad06497cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:a5:1a:a7:10:69:53:ba:2a:17:cb:34:26:
0e:ec:2e:e6:b2:56:33:16:1b:51:a1:11:9b:32:93:
49:5d:fb:ac:a0:d7:c8:99:aa:6d:ea:32:22:e1:8f:
de:fd:ce:cb:64:d6:f7:dd:67:cb:c1:b7:2c:2b:11:
9d:80:a4:d5:28:60:ea:63:21:f0:3e:ab:25:cd:af:
2e:80:4a:0f:b2:db:ad:51:f1:c0:da:ff:95:14:b0:
40:79:d4:19:ff:6c:58:7b:42:7f:f1:a8:2d:8c:e0:
0a:ba:53:60:9c:17:85:ee:a6:75:23:be:67:5d:0d:
31:08:97:f1:33:5f:79:73:e8:a3:59:83:e5:8f:3c:
f0:c6:c4:c8:66:9f:f6:1c:e6:56:a8:2e:27:f1:a9:
7b:b8:8b:27:89:29:9b:b8:10:2e:70:51:a6:f5:5d:
69:45:45:c0:ef:7b:86:c0:90:af:7d:d1:80:71:1c:
8c:e6:9a:ff:01:33:c1:67:74:94:4a:15:ba:85:09:
da:2e:50:87:00:c9:34:51:08:5a:24:61:72:f5:53:
f6:83:3e:0e:95:af:ca:3f:cb:5f:c7:fd:22:46:63:
f8:81:7c:4b:90:c7:84:d7:6b:9a:9e:f4:93:21:f4:
c6:45:10:2d:4b:c3:d9:df:1f:a4:ac:95:e7:4a:5c:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:29:F0:6E:36:82:A4:AE:95:F3:FB:2D:B1:7B:C4:2A:D0:64:97:CC
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/iinwbjaCpK6V8_stsXvEKtBkl8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.230.0/23
91.207.234.0/23
91.210.16.0/22
93.190.128.0/21
185.1.34.0/24
194.30.187.0/24
194.50.100.0/24
195.47.235.0/24
IPv6:
2001:7f8:14::/48
2001:7f8:91::/48
2a02:38::/32
Signature Algorithm: sha256WithRSAEncryption
46:b2:78:27:b0:0f:59:04:13:08:50:c7:bb:24:d5:33:8e:f9:
27:9b:6b:91:54:35:5a:91:9c:49:86:84:ff:a3:de:7c:6b:db:
5b:41:88:b4:39:40:05:50:13:e0:b8:82:d9:2c:26:80:a1:f9:
ce:73:ff:34:13:44:be:12:66:d7:42:46:9b:97:c9:02:d0:61:
74:d5:a3:08:cf:0a:36:de:b0:12:d3:03:c0:8d:75:b5:d6:58:
ff:80:77:ed:d9:ea:2f:a9:b4:25:89:69:dc:a2:28:50:43:b0:
f3:a9:18:1a:20:d0:b3:8f:ec:34:b5:4a:6d:a3:f0:66:8c:35:
be:c5:41:03:1b:90:24:7a:ed:25:95:f0:ea:34:5e:76:98:33:
97:68:b9:14:fa:cf:3b:f7:22:31:56:00:e7:cc:91:a6:31:6c:
34:b0:16:04:a8:39:19:63:e4:96:2b:f3:76:a4:7b:a5:46:62:
42:2e:8a:8e:44:a7:89:6c:63:ea:65:b6:60:b8:7a:aa:01:b0:
92:ab:31:fa:6c:f3:20:77:f8:4b:c3:d5:62:87:5c:27:a8:7d:
3d:f9:77:ad:ea:42:a0:72:e4:48:8d:23:dd:e6:ab:c7:c7:60:
03:44:fa:0e:61:de:1c:6c:f6:bb:b5:f7:0e:95:3c:bf:75:7b:
27:97:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net