Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/aW-VGVGdm0-L-FbjniUArFBGQOM.roa
File: aW-VGVGdm0-L-FbjniUArFBGQOM.roa (raw, json)
Hash identifier: AOid/jkmGTmxdydP8OpZ8P1YZL2W+vkkEZ5iL+JUH2s=
Subject key identifier: 69:6F:95:19:51:9D:9B:4F:8B:F8:56:E3:9E:25:00:AC:50:46:40:E3
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 019424B3D5062643049AC1465F8D6924F94F
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/aW-VGVGdm0-L-FbjniUArFBGQOM.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48609
IP address blocks: 91.209.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d5:06:26:43:04:9a:c1:46:5f:8d:69:24:f9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=696f9519519d9b4f8bf856e39e2500ac504640e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:80:75:41:d2:29:fa:d0:d2:e5:f4:ec:cc:
03:3b:eb:c0:7d:5c:18:c2:2f:46:ba:71:77:8d:db:
34:82:6f:95:05:69:9e:9c:15:6c:2d:f0:b6:ad:d7:
03:57:d7:e0:49:a8:30:ee:5f:88:b0:a7:c0:0b:28:
e5:76:62:f9:8c:52:76:8c:09:85:88:88:3d:61:45:
56:89:cc:71:cf:16:de:c9:7b:1f:b5:c7:e6:cc:dc:
dc:1b:ba:ab:37:10:ac:3d:f5:5e:7b:34:66:b1:72:
bf:65:fb:5a:7c:c0:31:75:30:b4:5c:15:5f:81:df:
1a:16:30:55:d1:a8:2b:b3:dd:c8:aa:84:44:6a:69:
90:15:20:a6:1d:95:9e:0c:91:f5:d0:23:e9:2c:e6:
fb:8a:47:2b:34:03:1a:8f:f1:a0:44:2d:9a:bc:25:
53:6e:d8:f3:c3:a0:a0:27:1d:94:7e:50:91:36:b9:
b7:29:c3:b5:2f:a0:fe:e6:3a:9b:5d:d7:bf:77:ee:
f6:68:56:72:a9:24:2a:4c:ae:96:f0:f1:61:48:fd:
21:25:99:d7:9c:4b:72:a2:8e:28:3b:1d:a3:6a:6f:
fe:a5:58:82:27:53:14:96:89:df:db:89:5b:22:3e:
9c:7f:f5:62:14:32:ad:e7:f8:cc:97:2f:02:2a:53:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:95:19:51:9D:9B:4F:8B:F8:56:E3:9E:25:00:AC:50:46:40:E3
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/aW-VGVGdm0-L-FbjniUArFBGQOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f4:01:78:31:de:0c:cb:b1:ae:05:c3:20:c9:b0:d2:99:d5:
29:13:0a:1c:62:3e:f0:cf:27:ec:0d:f8:85:4a:9f:86:f6:e6:
fe:bf:51:bb:cf:d5:78:1a:12:32:31:99:b7:70:42:5e:e8:f7:
21:b0:da:02:d2:05:4a:e4:43:96:f6:23:5c:d8:de:83:5c:5d:
e2:7e:ee:2f:02:f0:ae:13:37:4d:1f:a7:ce:d3:24:e5:a4:a6:
31:2f:0d:ce:5c:0a:61:19:d4:64:be:03:38:27:f4:f8:f5:e7:
00:79:4d:75:a5:eb:a1:cc:db:77:f4:30:f4:66:3a:0c:3f:ff:
e6:72:1d:88:c0:89:f0:41:77:1f:df:7c:0f:77:44:8f:ce:32:
52:14:4c:a0:1a:e7:2a:72:81:61:ef:dc:4c:5b:56:c0:e1:d0:
e7:fa:c4:8c:81:81:93:bf:31:a9:b2:0c:13:f7:c7:08:2a:64:
2d:f8:49:cc:b1:5f:61:ef:d0:15:8e:8c:3d:88:bb:7b:5b:41:
2a:77:ff:bc:17:c3:6c:b9:00:0e:ff:1a:3e:4a:1e:f4:fc:ae:
be:60:8d:01:80:9a:42:e2:63:7d:4e:ad:2b:aa:29:2b:8a:94:
c2:5b:c6:98:d0:a0:e5:ba:c2:9e:8a:a4:0d:0c:34:41:32:1f:
37:20:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net