Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/6soF94B982IoR0MOFM1SH9uV6Tg.roa
File: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (raw, json)
Hash identifier: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=
Subject key identifier: EA:CA:05:F7:80:7D:F3:62:28:47:43:0E:14:CD:52:1F:DB:95:E9:38
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 019427480D4D5C06ACABBB88A31004753672
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/6soF94B982IoR0MOFM1SH9uV6Tg.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51746
IP address blocks: 91.220.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0d:4d:5c:06:ac:ab:bb:88:a3:10:04:75:36:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaca05f7807df3622847430e14cd521fdb95e938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:a5:c8:ea:cd:c7:46:23:9d:45:54:43:6b:
46:53:bf:06:0a:fb:d8:35:b7:50:42:88:cf:35:2b:
d7:53:92:0c:1c:c4:d0:5b:7b:cc:e0:fe:4c:0c:6b:
e3:19:88:b7:88:e0:c9:c6:c3:17:8f:05:a8:3d:da:
3b:ad:51:59:8c:08:11:42:bc:d4:8b:b4:c9:aa:e7:
72:56:a9:11:32:48:41:d0:2a:ae:bf:91:98:42:5a:
26:05:e1:19:7d:cf:b4:46:36:95:3f:2a:01:1e:7a:
e5:e7:41:40:e2:ec:8a:b8:4b:b6:f5:4c:b1:1a:01:
43:cd:6e:79:17:4e:de:4d:57:8c:7c:4e:05:0d:3f:
20:48:31:53:15:37:78:43:ef:b8:81:83:8d:69:ee:
5c:d1:fd:ed:31:11:7b:12:cd:b2:66:af:5b:b1:0b:
b0:f4:05:87:01:d3:83:be:10:24:ea:1b:46:dc:1b:
db:98:76:00:00:e1:8a:39:8d:8d:b5:e6:75:50:56:
29:b0:85:95:85:7c:6f:7a:c5:40:e4:b3:0a:45:67:
3e:66:e7:77:d3:fb:30:1d:dd:9b:36:69:20:f4:a4:
fc:83:47:1a:da:15:f9:6b:fb:a1:ca:b2:8e:dd:0d:
b3:a3:a7:eb:cd:e8:f5:7c:93:44:5e:53:df:be:32:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:05:F7:80:7D:F3:62:28:47:43:0E:14:CD:52:1F:DB:95:E9:38
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/6soF94B982IoR0MOFM1SH9uV6Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:90:4d:7d:8d:1f:b0:61:ae:bc:05:a3:49:9b:26:c6:c1:4a:
4a:56:fa:33:ef:1c:3c:48:29:98:f4:cf:67:0d:ba:1c:b1:d1:
d5:94:39:a8:a3:63:02:c2:b4:da:36:9e:bc:9c:21:bf:18:b9:
2b:a2:a8:43:b6:c3:69:15:d4:65:06:7f:48:80:52:f6:cb:1d:
dd:0a:3a:10:5b:bb:1b:01:a3:2d:cd:43:a7:77:6f:25:03:cd:
f2:eb:25:ec:d6:a1:f9:c0:49:2d:aa:3a:e4:d0:fc:f4:b7:e3:
2a:1d:fe:bb:e6:7e:fd:2a:99:7d:01:56:19:52:74:7a:8e:2a:
bb:c0:bd:d8:35:24:1d:d8:2f:b4:41:ef:f4:ca:29:bb:54:0f:
bf:bf:8e:33:fd:c3:95:d5:2b:a7:06:89:af:a5:95:e0:59:51:
7e:b2:60:cd:10:15:3f:45:ac:40:8c:d4:d4:85:0a:97:3a:9e:
01:04:18:99:12:2c:10:64:c4:9b:ee:ef:f0:a4:7f:ac:2c:97:
7e:ed:79:a5:fb:a7:ca:62:d0:cc:b4:80:7e:d1:58:c8:4c:0b:
7a:c6:20:50:72:76:73:34:88:e8:5f:48:f7:9b:1f:ee:1a:04:
d0:b9:f3:dc:6f:b5:ee:7d:b8:48:70:3a:53:45:2b:46:4e:31:
48:52:c0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:33 2025 by rpki-client