Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/IAlG_JZnxdKZaAbKbMqU0apa1zM.roa
File: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (raw, json)
Hash identifier: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=
Subject key identifier: 20:09:46:FC:96:67:C5:D2:99:68:06:CA:6C:CA:94:D1:AA:5A:D7:33
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 01941FFA85B5B23A6B19233641B89FFD342E
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/IAlG_JZnxdKZaAbKbMqU0apa1zM.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215852
IP address blocks: 91.203.31.0/24 maxlen: 24
2001:67c:10bc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:85:b5:b2:3a:6b:19:23:36:41:b8:9f:fd:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=200946fc9667c5d2996806ca6cca94d1aa5ad733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:f3:da:de:b3:cf:1a:85:60:8f:c0:ea:c8:
c7:e6:0b:45:2b:a7:bd:86:85:63:1e:5a:d3:ca:72:
78:5a:50:e9:62:b0:17:7f:10:cc:35:c9:37:df:14:
78:b5:47:39:4c:f2:26:39:e7:b9:ae:3e:36:6f:b8:
81:87:c2:31:a8:0d:2d:3f:84:9d:6a:46:e3:83:7d:
02:2b:6f:7d:01:59:bc:5b:e6:40:01:a5:62:2c:6c:
fb:d6:a0:14:94:e8:93:fc:f6:16:55:28:8e:9a:23:
40:81:78:89:2a:d6:37:45:58:f2:55:9e:3f:53:90:
a6:12:2c:46:fa:9d:bc:67:b9:ef:f5:35:80:06:63:
09:7a:3f:51:f6:dd:a0:4f:0f:c2:1c:9a:e9:42:4d:
43:05:41:ad:e3:3b:99:99:ef:2b:63:02:ee:52:5e:
ac:7e:72:80:33:31:b2:6d:64:a1:4a:24:12:6d:23:
ad:93:da:90:f5:af:b0:9f:c4:be:b1:f4:a6:e6:ec:
a6:18:9a:5f:0f:57:37:ad:4e:aa:97:ec:14:02:5b:
ef:af:5c:ce:a2:e1:bd:56:08:e1:27:17:84:c6:45:
a6:ff:af:83:7f:ad:b2:f8:c9:10:6f:02:ed:99:80:
05:df:9d:24:51:e6:ab:74:35:23:d6:5f:b7:39:7b:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:46:FC:96:67:C5:D2:99:68:06:CA:6C:CA:94:D1:AA:5A:D7:33
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/IAlG_JZnxdKZaAbKbMqU0apa1zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.31.0/24
IPv6:
2001:67c:10bc::/48
Signature Algorithm: sha256WithRSAEncryption
12:58:7f:9e:6d:97:14:5a:00:9d:96:f4:67:49:6b:f9:f2:9a:
d2:be:81:48:cb:e1:a8:29:3b:d9:96:cc:62:de:6b:ea:2f:d7:
93:91:31:19:ab:d6:f9:96:d7:03:e1:74:00:f3:11:a6:a3:9b:
93:89:3d:03:bb:9a:02:b1:2e:a3:04:39:83:14:f7:d2:dd:01:
68:d4:8f:78:bf:5b:af:24:ed:62:cb:f5:9d:d7:9a:4a:a8:88:
11:71:21:e3:62:1b:5c:76:c3:14:a5:5c:d9:b6:85:63:4c:17:
a1:71:f7:e9:18:5e:88:2d:f1:13:95:94:cd:1b:17:34:c4:86:
fc:1f:6c:e1:11:36:85:49:1a:91:1e:5a:57:ab:e4:46:0e:d1:
1b:ea:89:b0:ee:4e:c1:03:a3:3d:59:1d:89:67:44:83:77:ac:
36:16:5f:28:0a:eb:6a:3e:c9:16:a9:2b:54:33:37:c3:a2:d4:
22:07:dd:02:4b:73:fd:70:b8:61:5f:a4:5b:fa:da:30:39:a7:
1f:e6:ae:6e:d2:50:44:b4:13:79:9b:e0:38:e4:82:c5:b1:71:
9a:1c:14:0b:ac:b7:8d:2f:63:05:b5:97:0a:a2:3d:2c:e0:2f:
ec:8f:ef:d9:a5:2e:73:6c:26:26:97:df:46:66:98:0c:11:b9:
b6:5f:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:12:10 2025 by rpki-client