Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/IrnZpWugwiVaDWE0Y8y2HTk6myM.roa
File: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (raw, json)
Hash identifier: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=
Subject key identifier: 22:B9:D9:A5:6B:A0:C2:25:5A:0D:61:34:63:CC:B6:1D:39:3A:9B:23
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0194DA8E4DBA8FEB5F4E949DDEE279957701
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/IrnZpWugwiVaDWE0Y8y2HTk6myM.roa
Signing time: Thu 06 Feb 2025 09:19:06 +0000
ROA not before: Thu 06 Feb 2025 09:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207771
IP address blocks: 91.210.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:8e:4d:ba:8f:eb:5f:4e:94:9d:de:e2:79:95:77:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Feb 6 09:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b9d9a56ba0c2255a0d613463ccb61d393a9b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:69:71:12:51:ee:41:f0:f1:30:b5:c3:cc:
fc:78:f0:ef:38:87:64:17:bc:c4:35:f1:e6:d7:ed:
e7:de:79:b6:42:a3:99:b7:5c:dc:c1:8c:df:00:8c:
6b:6c:34:a7:bc:76:c4:7c:68:ab:0e:6f:c6:3c:0d:
23:6c:9e:94:8f:11:cb:3e:ca:36:4d:e3:00:e3:a3:
c6:eb:d1:b7:e5:1d:46:ad:14:45:95:33:31:8e:15:
91:f1:2f:8c:90:0f:c9:c6:6e:de:fe:6d:13:4c:e0:
d3:ad:b2:ab:39:0a:6a:6d:ee:64:25:17:8e:45:8b:
5b:2f:9f:2d:9b:39:d4:50:85:fe:d6:49:b0:fe:cc:
c1:16:89:8b:a8:7c:b5:8b:1f:fa:4f:3b:6b:26:72:
c6:a9:2f:3f:67:69:19:b6:b1:aa:38:87:bd:fb:18:
d5:ee:55:9c:f4:47:c1:15:53:c7:29:6c:a3:65:50:
df:af:98:86:81:44:cf:b6:06:90:49:c3:88:fb:cf:
ec:39:b2:ad:e2:3f:ad:90:4c:bf:1c:27:39:fb:ee:
4b:ff:e0:df:4d:c4:33:cf:a2:87:3c:30:17:19:75:
ec:9f:02:9b:38:fb:36:52:6e:e7:a7:34:87:dc:a2:
3e:cb:a8:56:1d:aa:2b:57:51:5c:5b:e0:d5:d7:93:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:D9:A5:6B:A0:C2:25:5A:0D:61:34:63:CC:B6:1D:39:3A:9B:23
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/IrnZpWugwiVaDWE0Y8y2HTk6myM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c1:99:b0:6e:21:d9:66:d6:66:c7:95:7b:fb:00:cf:27:69:
ce:56:9e:a7:55:d7:12:38:38:f8:c6:52:1c:2b:8b:1f:f7:69:
d6:8b:a3:35:91:e4:62:1d:51:94:56:cf:eb:1b:81:d6:d0:0f:
cd:d0:e6:dd:05:73:5f:8a:fa:64:eb:22:b6:52:37:03:18:37:
85:f8:92:27:e6:a1:0a:0f:05:af:b0:0d:03:7e:30:dd:b5:26:
d3:e2:1e:1f:d6:43:56:9f:5e:d0:b2:ef:14:86:f0:fd:0e:3a:
6b:20:5a:5e:25:67:f5:9c:de:96:4b:c4:c6:da:4f:7e:b4:fd:
29:4b:04:80:bc:a6:59:99:f2:03:eb:b4:b4:4f:18:83:59:c4:
e0:99:12:d9:6a:1e:12:4a:bb:6f:99:d5:f5:2f:e9:60:a9:a4:
bd:b5:bd:31:e4:aa:f8:82:84:df:fd:ad:7d:34:02:4b:1e:90:
6c:3a:e2:ca:5e:54:c3:62:62:fe:2e:89:9e:14:1e:a7:d7:1f:
7e:93:c6:2d:91:06:16:1b:cb:02:b8:00:e9:44:7b:99:ec:af:
d8:2d:02:b6:b7:d8:7d:f2:5a:b1:5a:46:1a:7c:6e:e2:38:35:
25:0a:57:8a:6d:64:4a:da:26:4f:ff:56:2c:c7:00:12:df:cd:
e0:50:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net