Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/ntEteGeDZu85wNJOAqgjTrUSx54.roa
File: ntEteGeDZu85wNJOAqgjTrUSx54.roa (raw, json)
Hash identifier: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=
Subject key identifier: 9E:D1:2D:78:67:83:66:EF:39:C0:D2:4E:02:A8:23:4E:B5:12:C7:9E
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019420D648B5D7B4C3BD7F724E48C76DE706
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/ntEteGeDZu85wNJOAqgjTrUSx54.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21208
IP address blocks: 91.228.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:48:b5:d7:b4:c3:bd:7f:72:4e:48:c7:6d:e7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed12d78678366ef39c0d24e02a8234eb512c79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:20:51:fc:40:42:4e:c7:36:c5:59:42:b7:
29:ec:1f:be:2d:77:9c:38:6d:30:b7:d6:dd:e3:d6:
3b:4f:ed:28:4c:f8:a6:c7:82:d9:ad:70:4a:71:c0:
1a:15:97:d9:18:73:9d:cf:c1:12:36:db:11:46:d9:
73:5c:a9:fc:04:65:9c:02:b8:4e:4f:ef:6c:7c:1f:
e8:8e:4b:cb:c5:ce:84:48:f2:6a:01:17:5f:8c:79:
88:9d:fc:94:4a:8c:f4:53:34:c3:7c:4a:d5:0e:12:
2e:3f:3a:77:f9:f1:b1:93:f3:45:d2:96:c3:fe:37:
5b:e2:f3:ef:b8:35:80:cf:f2:63:89:c7:8a:cb:fc:
95:de:45:2d:9e:5b:8f:05:e9:9f:99:d3:82:f2:87:
b1:d5:46:95:a0:49:17:f8:83:64:6b:b0:5e:33:f9:
ca:4c:53:26:1e:4e:77:4c:ff:c3:e3:83:e8:db:22:
58:ae:ea:9a:65:a4:76:e3:5f:f4:18:ed:80:b3:ae:
0c:21:f9:34:c6:88:5f:83:3e:c4:20:e6:69:eb:bf:
b5:86:0a:29:fd:7b:02:04:f3:7a:c2:28:a6:13:9e:
51:f4:91:c2:52:33:d3:ab:42:e0:5f:1a:3a:3f:36:
10:dc:ba:0f:72:c3:51:30:d8:7f:df:99:db:08:c7:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:2D:78:67:83:66:EF:39:C0:D2:4E:02:A8:23:4E:B5:12:C7:9E
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/ntEteGeDZu85wNJOAqgjTrUSx54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.188.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e4:2a:3d:8d:72:e7:2e:23:53:69:4a:fb:6a:4b:20:4b:be:
71:d0:5c:cb:29:d6:98:66:ac:cd:de:58:6e:6a:e8:b1:2e:79:
2e:49:61:60:00:5f:72:36:1a:dc:18:b0:45:aa:24:f0:13:b7:
5a:3b:c2:f1:3b:f5:c4:8a:e3:e5:f3:d6:0c:99:3e:4f:28:e1:
91:a0:fd:2a:44:e5:fc:5c:4c:7d:54:46:b0:c6:20:b2:6c:51:
ea:fe:99:1a:42:97:7d:c5:f8:0d:ec:e4:13:31:cc:60:90:c6:
90:5b:79:aa:f5:6a:59:aa:e5:b4:8c:4b:9f:23:f6:e7:78:89:
52:70:5d:e3:7f:90:d8:a6:3d:8c:01:da:af:8a:6f:df:53:94:
b2:3c:6c:fb:b6:f9:b8:51:40:f6:07:2d:58:f3:16:8a:54:8f:
cc:69:73:30:67:47:e6:ef:31:62:05:de:9e:a9:d6:48:b4:cf:
70:56:ea:a6:76:b3:fe:d2:f8:0d:9a:5d:c2:74:ab:84:f1:ff:
ca:bd:fc:24:5b:aa:1c:08:67:1c:3f:0c:26:9e:c4:0f:e2:72:
07:7f:a1:05:f2:2f:ff:f1:99:5d:1e:e1:f4:03:20:00:4c:0b:
65:a4:ea:44:6c:2b:82:9c:95:7f:3f:26:b4:59:07:7f:d4:85:
35:82:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:47:52 2025 by rpki-client