Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/uUsYYdThPpGgjymK3Ultz58Gf_Q.roa
File: uUsYYdThPpGgjymK3Ultz58Gf_Q.roa (raw, json)
Hash identifier: kzn/M2n+sxLUH2VEd8vrpqyKNhTOto1w+Nu3LrsxmjA=
Subject key identifier: B9:4B:18:61:D4:E1:3E:91:A0:8F:29:8A:DD:49:6D:CF:9F:06:7F:F4
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 019427B544C46DAC6BFC69627B546263F5F8
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/uUsYYdThPpGgjymK3Ultz58Gf_Q.roa
Signing time: Thu 02 Jan 2025 15:49:38 +0000
ROA not before: Thu 02 Jan 2025 15:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42927
IP address blocks: 91.217.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:44:c4:6d:ac:6b:fc:69:62:7b:54:62:63:f5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Jan 2 15:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b94b1861d4e13e91a08f298add496dcf9f067ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3f:77:d5:10:eb:7a:1a:66:76:2c:61:89:56:
12:07:62:93:17:3a:f2:06:e5:02:09:49:c9:7c:00:
2d:59:04:29:2a:7b:e6:8d:3c:7d:9d:81:b4:34:ea:
8d:9b:55:0e:d6:fd:b5:44:c0:8b:b0:65:7c:ac:05:
92:c2:cb:ec:15:69:64:a7:0a:1f:fc:4e:9f:d4:64:
58:0e:64:45:e1:bf:d5:0b:35:19:33:77:01:11:98:
f4:ac:0c:45:81:ba:a4:bd:5a:e0:b3:09:66:ae:8f:
2c:3b:d1:5f:0d:6b:e7:e3:61:4a:dd:c4:1b:8e:06:
e0:33:f7:d8:aa:bd:6e:74:11:d7:6d:43:ef:e1:30:
0c:01:3a:75:fe:88:4d:80:36:64:87:e1:94:55:27:
8a:c3:e2:08:98:19:f0:3c:10:99:28:76:18:4d:af:
12:dc:24:97:d3:95:dd:d6:79:b3:63:ca:fb:4b:15:
8c:c5:be:b9:b4:b1:ed:65:00:ea:7b:58:1b:72:6a:
53:ff:17:a4:b8:c9:2c:8c:1b:4d:81:94:64:9e:d5:
83:5f:d7:77:43:74:00:2d:58:75:85:34:28:d1:42:
89:1c:f9:65:55:93:4e:3e:4b:58:a6:bc:85:9e:bd:
97:26:c7:ce:16:e8:17:6e:f4:09:a3:d3:82:f2:48:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4B:18:61:D4:E1:3E:91:A0:8F:29:8A:DD:49:6D:CF:9F:06:7F:F4
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/uUsYYdThPpGgjymK3Ultz58Gf_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4a:0b:e7:42:06:63:e2:12:1f:cd:ef:ef:17:2f:2c:04:3a:
f9:9d:cb:aa:b5:e0:76:2c:b8:d9:af:b6:93:1f:8b:c2:c0:1c:
33:7f:09:1a:4c:a5:f3:45:3c:4f:56:c0:aa:1c:48:33:ed:81:
8f:24:d8:92:24:2f:25:c0:41:72:2f:fa:09:b9:f1:f5:87:1b:
a6:4d:b6:c8:2b:0a:94:1b:e3:ed:e0:4d:dd:11:83:1f:5c:50:
d8:58:9e:46:c4:71:75:27:31:63:46:d0:5f:6e:45:ef:3b:b8:
bb:79:ba:9b:57:44:27:3d:5a:68:1f:98:15:2e:61:2d:49:83:
4f:7e:8d:11:a4:57:f4:c0:0d:58:29:3d:20:a5:83:4d:3c:85:
c3:3b:69:09:4d:5e:a9:89:80:40:2b:4a:65:3f:18:07:28:73:
38:91:3a:1e:fa:09:be:c8:6c:97:5b:4f:b3:d4:d4:38:4d:1f:
fc:18:bb:ec:0d:38:0e:4c:74:ad:a0:a2:21:a6:64:dc:e1:f4:
b6:f5:4c:6a:09:27:22:fe:cc:dd:e7:50:f1:55:fa:8a:5d:18:
b6:c1:26:1d:d0:3b:7d:e5:68:89:c0:b5:96:f0:cd:04:ee:e2:
12:40:58:cc:40:14:23:13:25:41:e8:b6:0d:1d:22:4f:93:58:
88:ac:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:46 2025 by rpki-client