Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa
File: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (raw, json)
Hash identifier: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=
Subject key identifier: 4A:1B:89:0B:34:C4:4E:3B:83:E0:86:72:A7:98:93:CB:5C:3A:52:DF
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 0194266AE12D2DAA5421E22AFF2B43697082
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa
Signing time: Thu 02 Jan 2025 09:48:46 +0000
ROA not before: Thu 02 Jan 2025 09:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201213
IP address blocks: 91.199.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e1:2d:2d:aa:54:21:e2:2a:ff:2b:43:69:70:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Jan 2 09:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a1b890b34c44e3b83e08672a79893cb5c3a52df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:bf:0b:52:21:1f:c9:15:01:c4:3e:02:e0:
47:6d:e2:38:76:91:5b:56:17:3d:59:3c:2c:7e:3e:
3d:62:23:ad:f6:d4:67:0a:5a:8a:f2:bc:99:25:97:
b3:ed:34:08:f8:38:27:dd:ab:4f:69:27:07:92:a8:
89:56:86:a7:3c:ec:e2:f6:ca:ac:c9:6a:8b:5a:fa:
a4:3a:24:f1:a6:e8:89:27:1d:a9:a0:39:4f:2f:5e:
19:80:cb:52:0e:e8:57:07:8c:0c:1e:0c:c5:ae:91:
6c:28:c7:d2:26:56:0c:a4:79:6c:3e:c6:86:aa:77:
af:e4:f4:39:d9:8d:fb:13:7e:2d:ce:64:52:93:29:
64:dd:c9:f0:6f:11:77:7d:6e:24:59:89:83:1a:80:
aa:29:17:bd:26:d3:bb:db:20:11:5d:3b:83:2f:25:
9e:06:ab:60:32:8f:54:12:eb:cc:7f:58:f1:e3:1d:
36:a7:a6:1c:16:44:eb:1c:ad:d5:10:f1:84:8c:7f:
4c:44:00:9e:ed:ff:eb:0c:b8:20:68:eb:13:d3:ff:
eb:3f:35:70:c8:81:d5:cc:64:5d:43:0d:3f:b3:31:
13:13:06:b4:b1:91:41:98:b6:52:e1:c9:43:00:c2:
93:d2:f5:db:19:16:26:96:6b:b4:51:ef:09:e9:17:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:89:0B:34:C4:4E:3B:83:E0:86:72:A7:98:93:CB:5C:3A:52:DF
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.75.0/24
Signature Algorithm: sha256WithRSAEncryption
11:76:c8:27:13:0c:e0:53:b0:a1:a6:ea:23:c0:d1:24:36:5d:
d8:e7:f3:b5:20:50:d0:ed:1b:80:28:b0:a2:1e:51:7a:d5:23:
d9:d6:96:ca:4e:41:48:cd:1c:4d:51:59:88:06:d4:30:86:86:
1b:a2:65:33:29:c3:fe:ac:9d:87:29:e4:15:9b:72:25:be:75:
27:97:d2:fe:b9:03:73:90:6a:45:67:a8:0c:75:18:96:2d:f0:
3e:ee:83:56:cb:f0:8c:c9:41:dc:66:28:16:e6:ed:00:0f:c1:
d3:b3:ac:96:94:9d:e2:a1:d5:ea:3c:3a:c3:f3:8b:4b:8f:47:
61:ac:d6:7d:7b:3c:e2:6b:d1:cb:99:f8:c2:97:09:cc:91:31:
ef:36:f5:a5:8f:a5:34:cb:6d:62:4a:f8:3e:5c:35:bb:34:81:
02:41:e6:69:52:cd:91:af:84:80:2e:37:34:e5:4e:08:02:6f:
d8:c8:7a:04:3a:36:c0:5d:e8:26:a9:71:9c:97:ad:17:33:07:
ba:36:ee:92:af:d2:25:52:b9:2e:4e:6f:2d:2b:7a:18:f7:af:
6d:83:38:b7:fc:c1:67:33:7c:32:5f:01:5b:e2:a5:d3:25:1a:
d4:54:30:da:fb:e8:78:fe:2d:00:0c:0a:16:1e:95:af:d7:be:
b7:4b:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net