Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/rczaP9LTvMdCWFhSuJS68LMo07w.roa
File: rczaP9LTvMdCWFhSuJS68LMo07w.roa (raw, json)
Hash identifier: sQzVo7OVIJVEVCzdhJjUAGI9F/0+IxOCNUaxnRm3OZg=
Subject key identifier: AD:CC:DA:3F:D2:D3:BC:C7:42:58:58:52:B8:94:BA:F0:B3:28:D3:BC
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 019427B47781BDA07B63C595FE9E0F5C3C04
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/rczaP9LTvMdCWFhSuJS68LMo07w.roa
Signing time: Thu 02 Jan 2025 15:48:46 +0000
ROA not before: Thu 02 Jan 2025 15:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198348
IP address blocks: 91.233.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:77:81:bd:a0:7b:63:c5:95:fe:9e:0f:5c:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Jan 2 15:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adccda3fd2d3bcc742585852b894baf0b328d3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:ae:bf:67:d1:d9:25:57:ba:97:00:85:8e:
00:72:51:dd:58:bb:d9:75:5b:8c:ad:7a:d9:57:29:
41:dd:98:b3:88:80:5d:e3:b9:de:6b:b5:96:15:ff:
65:3b:98:9b:26:43:64:f7:02:a1:76:f1:e0:98:7a:
fe:30:1e:db:5b:68:67:6f:2c:c3:df:70:f7:6a:88:
dc:b6:d1:c8:2c:5e:c9:ac:55:2a:2d:72:0b:a9:c0:
8f:ea:d9:73:39:73:a4:70:95:48:b3:f5:e4:14:6c:
37:d7:f6:8e:bc:c3:10:dc:57:76:96:83:db:23:b1:
fe:9c:72:42:1b:15:fa:97:47:ff:83:19:c0:32:b6:
00:39:6e:d2:b1:a8:ec:ca:f5:11:70:63:7c:1b:20:
a5:04:80:cc:59:9b:59:ce:86:47:11:08:fd:51:6b:
19:54:7a:2a:40:52:2c:db:76:7b:26:3c:57:19:ee:
78:94:dd:bf:e7:2b:96:01:fd:4a:bb:e2:9c:35:36:
ae:22:c1:2e:3c:cb:c8:da:5a:02:d2:42:4d:cf:1d:
2f:24:46:bd:96:1e:7b:84:0f:03:a6:29:12:e5:d4:
4d:66:27:a6:22:5e:48:3f:82:8b:78:4a:9c:f1:c3:
be:bb:2d:91:b4:26:b3:d5:46:4a:b0:09:24:e3:ac:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:DA:3F:D2:D3:BC:C7:42:58:58:52:B8:94:BA:F0:B3:28:D3:BC
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/rczaP9LTvMdCWFhSuJS68LMo07w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.230.0/23
Signature Algorithm: sha256WithRSAEncryption
69:a5:ad:a1:95:57:94:a7:78:0c:6e:5e:fc:f9:d8:05:98:80:
18:50:07:bb:17:1a:e2:7f:ac:b3:9f:bc:83:3f:75:57:38:3d:
54:92:73:9a:bd:3e:72:c9:73:97:ef:42:0b:35:c5:b4:9c:10:
3c:53:41:99:d9:d4:8a:48:8d:a4:ac:44:fc:ee:51:60:3d:ba:
54:bc:be:29:11:a4:81:15:17:ef:30:6e:42:0e:c6:e4:bb:9c:
22:dc:53:0b:97:f8:d0:a6:fc:a7:4b:b1:c3:15:17:64:49:f1:
92:5a:59:fb:48:8f:3f:13:5c:2e:b5:d1:8f:00:8d:02:aa:ea:
ec:29:76:c2:3b:5e:66:3d:0f:9d:4d:39:70:8f:a0:85:d5:57:
64:a5:91:c3:c3:35:72:63:9b:aa:8b:d1:ff:18:35:0a:fe:79:
d1:a7:ac:27:1d:6e:26:1a:ff:0d:e2:58:49:5b:36:17:7f:4d:
44:22:cc:f5:cd:e9:0d:5a:b2:69:69:29:81:b0:06:2e:76:b0:
a2:6e:75:01:af:49:6a:d8:10:14:8e:46:9b:3c:3f:e5:b7:0a:
c8:3b:ea:b2:18:db:1b:ef:81:a2:e8:c9:f3:62:0a:c3:fa:76:
42:fd:9e:10:79:7c:56:bc:e0:4c:cc:2d:2a:c4:e2:81:40:90:
06:c1:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net