Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa
File: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (raw, json)
Hash identifier: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=
Subject key identifier: 82:A6:09:D5:09:71:66:9D:AC:7D:BB:F1:17:9C:95:3E:20:D9:DC:39
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019423D76B8311000BBF352848601BEA6B0F
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa
Signing time: Wed 01 Jan 2025 21:48:27 +0000
ROA not before: Wed 01 Jan 2025 21:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210301
IP address blocks: 91.213.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6b:83:11:00:0b:bf:35:28:48:60:1b:ea:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 1 21:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82a609d50971669dac7dbbf1179c953e20d9dc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:41:61:9c:91:07:9e:b7:d5:15:84:09:54:
8e:00:d2:b1:31:6c:31:5e:a0:40:71:1d:f1:d2:5b:
32:46:1b:71:d7:72:3e:4f:03:4d:d8:e1:f7:30:e4:
b2:fe:c6:c2:23:71:cb:0d:1b:cf:e6:45:46:a8:40:
96:9d:de:44:28:a8:e1:aa:0e:2f:af:33:3f:ae:10:
f1:c7:f4:5b:c6:63:de:fe:01:f0:a5:57:82:3c:80:
45:14:92:3f:63:ee:9b:80:c3:ad:43:b4:dc:14:16:
13:f7:32:e1:e4:d7:4b:69:18:7d:b7:41:f1:71:30:
c6:b5:54:a6:6e:ca:5c:e2:29:ed:95:df:ff:05:21:
8c:d4:e7:77:3b:c0:0b:8b:88:29:3d:a5:c7:c1:25:
da:fc:af:90:2a:65:34:78:66:8f:2b:fb:06:d8:76:
0a:b1:fa:83:a6:a6:3e:19:55:dd:e8:c3:7f:08:cd:
87:8d:28:b2:b3:af:ab:25:9a:2b:c8:4b:22:1a:2b:
50:94:8a:59:48:a7:73:08:a0:02:54:c4:56:5d:d8:
52:b3:1b:e0:af:3b:bf:e6:8f:06:72:45:ae:0b:4c:
f4:aa:ba:21:20:c7:59:b1:59:4e:8e:df:cb:3e:2f:
6c:bd:17:d9:60:82:73:3e:7d:5c:94:1b:75:52:d2:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:09:D5:09:71:66:9D:AC:7D:BB:F1:17:9C:95:3E:20:D9:DC:39
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:8a:d4:51:e2:35:33:66:24:dc:b2:1c:60:72:ed:9c:ec:49:
3b:9f:e6:d0:a4:21:36:e8:33:6d:45:fc:52:23:c7:60:75:ee:
88:9a:13:9a:af:42:06:85:ed:45:42:dc:b4:7d:14:31:ad:cc:
d9:af:ef:99:6e:f1:c2:18:57:db:f3:a8:68:d1:31:70:36:87:
2d:35:20:d9:d4:38:12:cf:e5:3d:f5:df:24:2a:8e:24:a4:d4:
8f:a8:a8:8a:42:43:b4:d8:e1:d8:ac:96:35:f4:f2:9d:7b:e3:
20:fb:2b:ae:b2:f2:1e:70:44:1f:8a:1e:26:91:65:f3:21:75:
a3:1d:1d:0d:3a:96:9b:b4:80:74:f5:40:d5:96:51:3f:f9:0d:
7f:f1:44:55:cd:b7:f0:bb:ec:77:39:52:59:f8:f7:7f:0d:78:
68:7b:58:a8:30:a4:b8:eb:42:6f:9d:5c:91:bf:3f:e7:12:9b:
09:c4:47:32:49:88:3b:e2:08:eb:3d:ca:b6:0e:20:cb:52:5c:
f4:a1:5f:89:16:79:36:b3:6f:9d:ba:74:de:b2:f9:fc:8a:d2:
84:22:68:58:ce:20:f7:00:91:31:a2:ed:49:52:c3:bd:3b:fe:
61:a4:fa:f4:70:31:b4:b6:02:7d:e2:ba:e8:ab:4e:6f:e6:a9:
24:67:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net