Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/9zQJ9SLHpZOxGpN8gASmtQ726qQ.roa
File: 9zQJ9SLHpZOxGpN8gASmtQ726qQ.roa (raw, json)
Hash identifier: Ia4hTbFd7OEUZaWYiFux0V0J9ALCLVr3OB4Kc2zAJQY=
Subject key identifier: F7:34:09:F5:22:C7:A5:93:B1:1A:93:7C:80:04:A6:B5:0E:F6:EA:A4
Certificate issuer: /CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Certificate serial: 019423696F0FFB73B1EFC89387D485FD0FCC
Authority key identifier: 0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/9zQJ9SLHpZOxGpN8gASmtQ726qQ.roa
Signing time: Wed 01 Jan 2025 19:48:19 +0000
ROA not before: Wed 01 Jan 2025 19:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20900
IP address blocks: 91.238.150.0/23 maxlen: 24
195.78.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:6f:0f:fb:73:b1:ef:c8:93:87:d4:85:fd:0f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecc8ca4bed1955b5155bc090c560efba3f5a9ad
Validity
Not Before: Jan 1 19:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f73409f522c7a593b11a937c8004a6b50ef6eaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:c0:54:ac:31:84:6d:75:8f:d7:40:e5:98:
0d:92:d5:c7:5e:8a:79:78:b7:b0:17:93:93:10:65:
ff:5d:74:79:fb:da:8a:b8:3a:90:13:ce:0a:a7:d0:
b1:43:4e:a2:7d:2f:9a:cc:04:8f:e2:85:19:c8:1a:
7e:4c:ca:f6:13:01:ab:83:b7:95:0d:d0:63:07:0d:
9d:84:18:6e:62:c9:d4:76:7b:ee:d3:36:27:70:98:
03:b4:d8:c6:03:e3:50:47:1b:6a:8b:3c:49:d9:c3:
c8:7f:b3:77:eb:bc:10:b5:b8:4b:33:d7:eb:4c:49:
6f:c8:0f:40:9e:7e:10:3e:6b:e5:0f:91:64:4e:1f:
2e:b5:42:cd:ab:e5:36:a2:cc:d0:93:f5:cb:4a:72:
0d:06:1c:7c:36:40:ce:7d:27:7a:e9:6f:ae:23:22:
21:4f:c6:f2:fa:39:83:5a:64:b5:f2:5b:15:ec:47:
83:4d:1f:13:a1:d7:06:d0:d3:c0:42:6f:6b:63:7a:
cd:a0:10:d0:ef:69:93:67:d3:66:28:20:60:ac:07:
de:1f:1d:5d:7c:b4:dd:3c:1d:2c:b2:c9:72:ad:e8:
67:43:dc:6b:ce:c6:bd:28:7c:89:c9:7d:a8:f6:78:
ec:6b:dd:3f:23:5d:3e:fe:63:5e:00:31:16:48:6e:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:34:09:F5:22:C7:A5:93:B1:1A:93:7C:80:04:A6:B5:0E:F6:EA:A4
X509v3 Authority Key Identifier:
keyid:0E:CC:8C:A4:BE:D1:95:5B:51:55:BC:09:0C:56:0E:FB:A3:F5:A9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsyMpL7RlVtRVbwJDFYO-6P1qa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/9zQJ9SLHpZOxGpN8gASmtQ726qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/810ceb-dc1f-43bd-a6a6-77d0b23ef36e/1/DsyMpL7RlVtRVbwJDFYO-6P1qa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.150.0/23
195.78.82.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e9:56:40:09:cc:de:52:37:eb:5f:b7:9c:21:60:a0:e0:5d:
4d:cc:aa:38:48:6a:4d:f8:46:88:f6:d3:59:ff:41:d8:86:a8:
63:11:37:58:5e:f8:aa:2c:ee:aa:21:3c:79:55:f0:1e:45:02:
af:89:92:44:b2:87:ee:f5:aa:99:c9:80:a5:e8:b2:3e:31:42:
8a:5b:63:78:03:9c:4e:86:a8:55:e3:68:e6:ac:1d:29:50:2d:
97:32:b3:6b:37:d9:b8:c1:b6:15:f7:ed:ff:61:6f:ba:ef:9c:
06:5a:65:79:f8:76:8c:c0:60:57:6c:e7:6e:ad:2d:4c:a7:00:
a8:c5:fa:5a:83:95:59:8c:ce:89:97:22:fb:43:83:49:4d:65:
52:16:84:c2:ca:5a:71:12:b2:ad:53:84:fb:87:b7:0b:c4:0a:
78:30:44:2b:e4:2e:8c:39:20:ce:f6:15:31:b4:db:a8:15:df:
62:f9:8f:dd:d6:d8:66:e7:d0:d4:0e:0a:b9:81:b3:8a:cb:73:
32:5d:18:a5:ea:18:8b:df:e7:16:d6:14:8c:7c:6a:b1:d6:f7:
57:e8:81:cb:e3:73:df:00:46:4f:df:5a:ca:4f:8a:c1:95:d1:
71:21:92:80:b1:16:8b:52:3a:55:ab:c0:64:b5:51:46:a9:1c:
48:8f:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:15 2025 by rpki-client