Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/HeDUncvNrC9DXvqHmX3LCuEEQFk.roa
File: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (raw, json)
Hash identifier: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=
Subject key identifier: 1D:E0:D4:9D:CB:CD:AC:2F:43:5E:FA:87:99:7D:CB:0A:E1:04:40:59
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 01941FFAAFCF6E8C9540D1F4A59D8731E18A
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/HeDUncvNrC9DXvqHmX3LCuEEQFk.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51094
IP address blocks: 91.216.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:af:cf:6e:8c:95:40:d1:f4:a5:9d:87:31:e1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de0d49dcbcdac2f435efa87997dcb0ae1044059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:a9:28:9b:27:39:92:bc:5e:ff:d3:79:f1:
db:cd:6f:25:c3:c3:02:c8:98:62:7c:d2:8f:14:ba:
6a:4e:a0:89:50:5a:9a:06:98:fe:8e:98:92:aa:d9:
4d:6d:46:94:ad:86:62:e5:3e:4e:c7:40:5f:a8:b5:
0f:34:f8:24:d1:9a:0e:9b:69:92:f4:1b:a6:91:5f:
6d:fd:d7:78:50:66:1d:1d:21:7b:85:34:91:b9:c2:
75:a4:1f:55:b2:78:15:20:ca:fc:35:57:29:64:aa:
b1:9c:0e:f5:1e:4d:bd:fe:c1:1e:0a:56:5f:6f:a3:
5e:30:95:04:03:12:31:c0:b1:e7:87:b5:1c:7e:0a:
26:da:ae:5a:41:f9:2b:37:0b:5f:57:67:c6:67:9a:
30:0b:52:8c:6f:e8:be:23:a0:34:e7:28:d1:f3:32:
d0:2d:d9:9a:c2:90:3e:7e:8c:9a:53:ed:11:90:34:
7d:6e:6a:3f:ab:b5:f7:e0:58:a7:26:90:b6:68:b9:
3a:8e:58:ce:30:eb:23:cc:bb:5c:cc:ca:b9:1f:d4:
bd:86:d0:1d:e3:18:69:36:50:b3:8b:4e:73:de:bd:
a5:dd:25:57:4b:86:32:4e:02:98:16:19:f3:be:1f:
c1:76:95:01:5a:05:0f:63:11:d2:27:79:64:46:17:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E0:D4:9D:CB:CD:AC:2F:43:5E:FA:87:99:7D:CB:0A:E1:04:40:59
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/HeDUncvNrC9DXvqHmX3LCuEEQFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:67:ae:2c:05:ba:02:89:39:ae:d6:12:a7:c6:b8:0b:d1:d2:
14:3e:4c:cf:08:a7:22:9d:1f:b7:fc:15:d5:20:5d:1b:a8:b0:
67:af:57:3c:e4:35:b7:58:64:df:ce:a9:dd:f2:74:87:75:ef:
01:8b:c1:f1:79:be:be:be:cf:f8:d8:ff:ce:03:92:7d:97:5e:
00:a9:15:80:01:1c:d6:0f:b8:07:8b:72:9c:10:9f:90:4c:f0:
39:43:a3:e9:9e:f2:63:3e:39:75:85:d3:fe:2b:82:14:1b:cb:
47:03:b5:74:75:b2:09:f0:b9:d3:83:73:4c:dc:96:97:84:27:
bb:24:39:df:ae:da:86:93:49:b9:eb:1b:30:bb:2c:b2:1a:b6:
87:d4:09:00:9f:e1:dd:a4:dd:e4:c6:be:97:92:87:20:40:15:
b8:78:d5:b5:32:6a:3a:4d:58:6b:1d:84:f0:c4:62:79:af:57:
7f:df:d6:d2:3d:06:78:8a:a1:93:0a:6d:e7:92:70:03:e5:14:
e0:a2:73:a7:34:6f:9b:f9:7c:1f:5a:39:d9:35:37:30:01:da:
95:2f:76:4b:1f:5c:25:c1:c6:1a:01:1e:3f:a7:db:90:db:53:
cb:f4:7a:64:0b:81:37:61:28:02:10:49:32:fc:83:a8:bc:20:
93:f8:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:10 2025 by rpki-client on console.sobornost.net