Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/DhjYDqFh0bJ0ahOskAj1anzqI6w.roa
File: DhjYDqFh0bJ0ahOskAj1anzqI6w.roa (raw, json)
Hash identifier: RNG7775zDlOp39DvE7NotaTpQE9FqIt9HCitWTlqk0A=
Subject key identifier: 0E:18:D8:0E:A1:61:D1:B2:74:6A:13:AC:90:08:F5:6A:7C:EA:23:AC
Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial: 0194266AE7BE88ADC7ADCCBA3F66BBD92133
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/DhjYDqFh0bJ0ahOskAj1anzqI6w.roa
Signing time: Thu 02 Jan 2025 09:48:47 +0000
ROA not before: Thu 02 Jan 2025 09:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214379
IP address blocks: 91.231.182.0/24 maxlen: 24
2a01:f500::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e7:be:88:ad:c7:ad:cc:ba:3f:66:bb:d9:21:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e847e88749704294552fef54886111ed0586ec24
Validity
Not Before: Jan 2 09:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e18d80ea161d1b2746a13ac9008f56a7cea23ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:ae:fa:de:73:c7:cb:0f:1a:6c:00:e4:a3:
c7:57:f5:8e:23:47:23:02:d4:5e:06:15:83:37:a2:
0e:b1:70:ec:5d:ff:fe:89:f8:42:8f:1d:52:cb:4d:
77:47:c9:29:4a:0c:7d:83:f7:ba:17:3c:76:0e:9b:
16:e7:74:a1:f1:34:d7:6f:81:4b:73:3a:e2:c1:fe:
80:75:13:7b:16:46:3a:19:71:ee:dd:63:24:99:aa:
68:b8:d2:9e:f3:1c:0f:15:8b:2a:61:f0:eb:ae:d4:
80:01:ad:ec:e7:30:ba:80:7f:71:d3:f7:d9:54:41:
63:58:57:c1:8b:0e:4b:23:db:b3:f2:35:2c:90:fc:
07:0b:07:0e:0a:6d:6a:fe:d7:eb:11:7e:36:aa:a7:
60:c2:4b:66:eb:e5:b9:ea:0b:22:17:d9:a9:95:4b:
cf:56:a1:f9:ab:a3:3b:40:e4:78:ff:f3:93:9f:6d:
a8:af:c8:45:27:e7:5c:74:f4:78:8f:03:bf:7b:7e:
ea:ea:1a:bd:8b:4c:2a:a7:bd:ab:ab:af:b1:84:9c:
f8:80:b5:b3:db:92:4a:6c:b3:3f:b5:bf:73:01:db:
78:80:1d:7e:33:9d:24:a7:75:88:a6:c8:e2:6f:fb:
75:f1:50:4c:cc:d7:a1:54:83:4b:2c:74:36:66:66:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:18:D8:0E:A1:61:D1:B2:74:6A:13:AC:90:08:F5:6A:7C:EA:23:AC
X509v3 Authority Key Identifier:
keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/DhjYDqFh0bJ0ahOskAj1anzqI6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.182.0/24
IPv6:
2a01:f500::/29
Signature Algorithm: sha256WithRSAEncryption
0d:5e:67:85:c7:7d:f5:99:5d:2c:7c:77:86:b7:ea:b2:7d:8d:
76:71:05:3a:f8:76:88:17:91:3a:2c:94:e5:99:c9:c9:e6:f1:
de:50:c8:12:64:b7:2e:91:c2:2c:d7:06:3a:6f:cb:79:f9:13:
3a:46:61:e2:4f:a1:38:e9:53:e4:8c:32:c5:94:be:c1:5f:cb:
b1:22:c1:67:cc:46:f5:3b:32:50:17:72:8b:0f:b2:85:8c:64:
89:b6:71:13:86:8b:5e:f7:b8:10:44:76:70:c1:dc:00:11:a9:
51:9c:fe:43:3e:f8:d1:b4:bd:3e:00:51:23:00:64:67:d4:d8:
75:0a:19:cc:94:d1:ca:30:c8:66:47:3a:0f:75:86:88:f1:82:
08:4c:fe:04:b2:99:0e:a5:1c:5b:33:02:9f:90:9f:73:a6:8a:
2b:9e:38:0a:98:03:e6:d1:b7:97:ff:e3:ec:1b:8c:86:eb:6c:
6d:09:4c:14:02:a9:89:25:ab:c6:a8:bc:91:10:b4:c3:f3:23:
8f:54:38:42:8f:26:ea:fd:e4:2a:57:42:56:71:e3:3a:f0:f9:
f8:e6:ab:57:72:03:9e:aa:0d:3e:dc:ba:0f:88:a1:67:9d:5d:
e7:f8:5f:87:7b:97:eb:ff:4b:0d:5e:15:2e:5d:11:21:a9:e3:
c7:b4:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:50 2025 by rpki-client