Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa
File: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (raw, json)
Hash identifier: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=
Subject key identifier: C5:1C:30:32:72:A7:7C:44:39:D7:75:50:01:6F:42:0F:60:1C:F2:C1
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 01942368D51B9D7AA1A5306EE4F909A26939
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa
Signing time: Wed 01 Jan 2025 19:47:40 +0000
ROA not before: Wed 01 Jan 2025 19:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199413
IP address blocks: 91.232.46.0/24 maxlen: 24
91.232.47.0/24 maxlen: 24
91.232.48.0/24 maxlen: 24
91.232.49.0/24 maxlen: 24
91.232.50.0/24 maxlen: 24
91.232.51.0/24 maxlen: 24
91.232.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d5:1b:9d:7a:a1:a5:30:6e:e4:f9:09:a2:69:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jan 1 19:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c51c303272a77c4439d77550016f420f601cf2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:b9:48:b3:b4:e4:85:bf:17:68:7b:67:ac:
8c:4e:fe:5d:fc:83:4b:c2:43:aa:7e:dd:53:61:59:
e2:aa:38:b7:4d:61:7c:12:c4:bf:11:9a:77:31:01:
ba:c8:11:9c:34:81:b2:af:79:ae:3f:7f:58:ab:56:
b0:48:d9:61:dc:01:66:5a:eb:bf:df:5e:6b:08:58:
99:01:6b:db:6d:b2:c5:7a:6d:03:1e:85:4b:d7:9d:
a3:44:23:73:a0:34:eb:45:0b:03:ca:d7:0f:e8:a9:
68:77:58:70:3a:4e:2f:03:f1:c4:8c:6e:fc:27:d2:
a4:a2:47:8b:00:f2:34:3d:c4:83:04:5d:9f:9f:6f:
d1:64:54:21:cb:e5:72:a8:bb:78:1d:ad:33:db:1a:
86:e0:f1:c2:96:89:c8:00:f0:8c:52:90:44:44:8c:
bc:ef:73:02:0b:47:e4:90:d6:bd:38:69:4a:62:8d:
d1:59:2d:99:cf:96:ce:e4:73:f8:08:4c:5b:fd:5c:
17:e8:97:a6:87:3d:17:a9:99:0e:96:db:bd:2f:30:
cf:3a:9a:8e:54:15:95:c2:49:db:40:36:23:f9:91:
b9:f8:f1:e9:0d:54:e9:82:77:91:35:cb:b8:68:8d:
fd:e4:0d:37:be:59:c4:e8:d4:5e:03:18:b8:25:ec:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:30:32:72:A7:7C:44:39:D7:75:50:01:6F:42:0F:60:1C:F2:C1
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.46.0-91.232.52.255
Signature Algorithm: sha256WithRSAEncryption
48:3e:79:bf:77:e1:1a:54:fc:f6:3d:b3:61:ba:e8:db:63:54:
25:df:92:d5:27:46:48:12:62:18:a4:65:76:f7:46:34:96:0d:
01:52:54:3b:e3:11:6c:6d:6b:e1:ec:1d:3a:a8:fb:fa:7f:de:
33:fe:f5:3a:bf:a8:37:da:15:cd:7b:f8:b7:c8:89:00:b9:4f:
ac:08:df:44:43:9f:cd:f6:d5:0e:40:c7:87:77:2c:5b:9e:41:
34:db:f8:73:4e:b2:74:1c:cf:7d:ce:ad:f5:09:6b:e9:6e:12:
9d:77:49:94:0c:25:85:18:eb:c5:b5:12:38:fb:9d:4f:ff:04:
26:5e:5e:9a:db:3c:f5:87:1e:a8:f0:d7:82:9a:ce:ac:03:2f:
fe:0b:13:e6:8d:37:96:96:2f:5f:da:03:c7:6b:03:e1:e4:1e:
4d:e4:1a:d3:de:7a:7d:37:9c:9e:0e:08:97:c9:6f:99:cc:76:
95:7f:78:02:7a:ef:79:01:d5:f7:67:b3:6b:02:a9:30:b6:e5:
da:7d:2f:ad:81:06:0d:fb:86:0f:af:c8:fd:2a:f0:14:3f:7a:
d2:71:dc:ad:f2:6b:a7:4b:33:ff:06:c2:e0:24:3b:26:7c:9c:
11:91:72:5c:ec:da:7e:90:63:8d:93:c3:2e:55:1c:48:fa:93:
e0:b7:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:12 2025 by rpki-client