Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa
File: sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa (raw, json)
Hash identifier: OOj0tzcrni9iINX1RsORuXXY2J4W4MPomfi+iy0BJbQ=
Subject key identifier: B0:4D:62:2B:C0:46:02:B4:EE:7C:D6:00:D5:9B:7A:BF:F7:52:23:D6
Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial: 0194266ACB6C29C1BE3216D8D3BFD3DE670F
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa
Signing time: Thu 02 Jan 2025 09:48:40 +0000
ROA not before: Thu 02 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56835
IP address blocks: 91.227.180.0/22 maxlen: 22
176.113.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:cb:6c:29:c1:be:32:16:d8:d3:bf:d3:de:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Validity
Not Before: Jan 2 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b04d622bc04602b4ee7cd600d59b7abff75223d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:6f:37:63:db:16:de:23:4d:99:d7:51:56:
b6:9e:16:21:f4:75:33:30:d2:7f:d5:e1:a4:e8:dd:
c6:c4:b8:28:79:86:dc:51:f6:6d:7a:ab:bb:8d:39:
c0:84:9c:15:fb:a3:e0:69:2e:00:51:1c:e8:ec:17:
a9:ad:dd:ec:ba:48:1c:7b:d9:01:73:47:4b:85:98:
8f:68:ee:d5:fb:87:53:e8:bd:cd:cc:8d:35:8a:30:
46:00:1a:6b:5d:d2:24:c7:0e:90:8d:be:a0:fd:f7:
23:2c:44:8d:08:2f:6f:b3:dd:b9:c3:87:a6:b2:36:
97:2f:af:9d:04:7d:a0:38:5b:fa:04:ef:85:c5:78:
2e:15:4d:f6:f9:31:c3:cd:f8:74:b9:84:90:64:b0:
ba:b7:dc:07:9c:e8:4c:a9:cd:17:fe:de:22:69:ab:
03:49:a7:ff:e6:8c:63:a5:6f:3c:ed:ea:b2:3b:cf:
13:99:48:9f:45:5f:6d:51:ec:15:87:30:2f:ce:48:
a7:7f:d1:74:53:c2:7d:bd:34:ca:47:d7:95:8b:70:
4f:a0:ba:cd:ac:44:19:b5:04:b4:88:d4:cf:1a:69:
95:2b:78:d6:ed:89:76:16:3e:0c:d6:b9:cf:e7:75:
af:b2:50:5d:a7:50:cd:0a:0c:4f:eb:1e:2d:c0:18:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:62:2B:C0:46:02:B4:EE:7C:D6:00:D5:9B:7A:BF:F7:52:23:D6
X509v3 Authority Key Identifier:
keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/sE1iK8BGArTufNYA1Zt6v_dSI9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.180.0/22
176.113.164.0/22
Signature Algorithm: sha256WithRSAEncryption
43:27:4a:18:3d:f1:92:3c:ef:c1:6d:59:57:b7:eb:28:fc:93:
d4:a4:78:68:76:96:b5:75:5f:ca:e1:42:18:44:2a:f4:d2:87:
30:f4:b0:52:b1:38:d5:86:a6:b5:37:a6:03:c0:85:f6:bd:47:
52:db:1d:11:9e:63:81:6f:1c:b9:68:8c:b0:b2:5b:42:9c:5c:
ec:b6:d7:71:be:a4:58:00:4f:03:0c:9e:e6:6d:8e:f9:9c:3b:
f8:a1:f4:27:89:3d:62:1e:32:3c:79:6a:d0:d1:8d:0a:8e:b4:
63:14:a6:bb:6a:dd:c7:17:ef:61:47:7c:0d:6c:9e:85:59:a4:
6e:0a:30:aa:52:bf:94:24:24:5b:80:2b:a3:f3:75:01:d1:78:
f2:d0:f0:39:3b:6f:02:18:0e:54:1a:5f:ce:ac:e5:a8:de:17:
95:9e:cb:4c:d7:c2:d5:5b:01:48:0b:ca:17:3b:c4:3a:d3:5b:
0d:db:91:c0:15:36:e8:90:f7:ad:fc:9e:d4:f2:0e:84:02:cd:
38:09:82:9f:ec:cc:6a:66:5b:71:78:bc:97:5b:9d:04:b1:dc:
93:1b:3f:d2:1b:d7:6c:3b:e8:00:f1:0d:24:65:8b:47:73:bc:
78:97:72:11:fc:c0:b3:e3:9e:b3:d9:78:7e:0f:c6:a7:40:ca:
16:18:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:54 2025 by rpki-client