Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa
File: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (raw, json)
Hash identifier: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=
Subject key identifier: 8D:7A:B1:08:F9:39:48:9C:88:9B:E7:04:10:57:31:A9:08:25:F4:75
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 0194228E2E1D91C2926DF99471B335F8DE33
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3330
IP address blocks: 91.209.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2e:1d:91:c2:92:6d:f9:94:71:b3:35:f8:de:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d7ab108f939489c889be704105731a90825f475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:91:91:ea:29:7a:d6:6d:7f:2d:89:76:ef:
d2:4d:53:2b:0b:a0:70:1e:6b:d2:56:e9:93:99:7c:
28:82:36:e2:65:a3:a4:96:86:f8:57:3e:7e:a7:a9:
56:3c:90:c5:af:2e:7f:19:85:16:88:b3:5d:64:d3:
01:ec:29:c9:26:d9:26:8a:94:aa:99:63:d8:4a:47:
e1:c0:21:67:7b:d1:93:d0:2b:1e:fa:79:6a:d1:10:
6e:6e:c6:e2:8c:0f:4c:c9:e2:10:3a:3a:f5:c1:00:
23:94:35:87:53:c5:46:73:d6:81:50:f0:09:b2:4b:
a4:83:42:43:c0:ee:b8:2d:7a:31:76:87:7e:4f:9c:
d1:71:50:3e:c1:6f:4f:df:e9:66:39:be:5b:5c:08:
7d:7b:46:66:8e:76:a1:0d:23:36:5f:61:9c:73:5f:
3a:e8:52:3b:48:0b:c8:99:7f:38:45:30:ff:e7:00:
50:27:eb:cd:d8:cb:b3:d6:e5:73:02:03:86:91:cb:
a3:71:40:e6:22:ac:21:02:de:5f:a1:8c:84:3a:4d:
19:fc:fb:74:60:b5:10:e3:a2:cd:6a:f6:79:2c:80:
f8:6f:d8:c2:89:89:e2:10:ef:cf:ef:77:25:de:fe:
3f:df:2c:5b:57:8f:af:3c:6d:9e:b9:fe:cf:36:2b:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7A:B1:08:F9:39:48:9C:88:9B:E7:04:10:57:31:A9:08:25:F4:75
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.33.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b9:3d:d5:91:59:a9:94:29:19:ab:93:3d:c6:17:0d:a2:71:
9a:16:76:eb:0f:b8:37:9e:68:c2:50:3f:3c:7b:62:91:a1:ff:
a3:01:75:4f:f4:d7:fb:42:50:20:de:9a:98:de:68:2d:e5:09:
d7:a1:5f:5d:05:4e:f2:c9:eb:96:9c:7c:70:2b:48:35:e9:67:
3f:81:bc:6c:2b:36:c4:04:09:08:fe:5e:0d:f3:bd:31:4a:3b:
8f:da:63:ab:6c:95:4e:cd:19:ec:dc:c6:f2:8a:78:04:08:81:
2a:a2:73:bc:1a:da:a1:3a:88:2b:c1:62:66:0a:9c:69:bf:99:
4c:df:d4:83:f2:7d:72:4c:15:24:9d:63:71:47:34:94:5b:65:
62:66:4f:b7:f3:10:93:83:a5:6c:fd:63:21:08:7f:7a:78:68:
dd:d9:4b:a0:c3:62:54:48:e8:9d:a4:da:7e:60:d3:83:d7:44:
c3:26:b2:06:2f:2a:41:fd:d3:79:01:01:bb:58:1d:df:05:01:
ae:e7:3f:5d:53:56:10:f1:74:b0:a1:95:1e:30:bc:99:a4:c2:
21:40:4c:ce:10:72:68:3a:79:dd:12:57:08:01:c4:1b:ac:54:
9a:38:a6:08:d3:cd:6d:2f:fb:a3:c8:a3:55:57:a6:df:43:85:
9d:ce:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:10:21 2025 by rpki-client