Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa
File: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (raw, json)
Hash identifier: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=
Subject key identifier: 99:25:2E:68:D6:3A:51:D9:18:9B:49:43:BF:0B:47:AA:FD:CD:BC:B5
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 01941FFA8253EACFECD3736BBDAF9453012F
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213025
IP address blocks: 91.200.179.0/24 maxlen: 24
2a0a:d700::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:82:53:ea:cf:ec:d3:73:6b:bd:af:94:53:01:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99252e68d63a51d9189b4943bf0b47aafdcdbcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:f5:fb:b4:69:03:a6:5c:b7:ed:f9:23:b1:
31:a6:b5:71:d2:50:a2:d6:44:e4:28:89:c0:3f:b0:
78:8f:88:1d:49:45:9e:bd:16:d6:2d:93:8f:e8:de:
07:37:5f:3c:ef:46:f7:68:a7:ce:62:b3:00:3c:d7:
81:83:b5:67:61:d9:8c:29:d3:b2:15:cd:ce:1c:dd:
94:db:ac:9e:8f:85:d7:5c:9b:d7:b9:b5:5f:c7:b5:
81:2e:66:96:1f:ab:ca:95:35:e2:30:68:70:9a:bf:
9f:2d:93:4e:6f:52:6e:64:4f:be:86:f9:a4:e5:77:
b4:8a:13:bc:a0:2b:da:2e:de:38:26:15:a3:a4:58:
cd:5c:dd:dd:4e:46:b2:01:74:3f:0b:4a:32:d8:c6:
22:ca:e4:73:16:ce:5f:bf:f0:a0:51:eb:57:81:d6:
91:25:ed:d9:fa:d7:fe:e1:f0:e7:a6:e9:34:4b:87:
76:97:7d:13:b6:d8:47:fe:51:84:cf:99:63:11:9c:
6a:e2:8f:fb:af:70:37:be:9d:4f:6f:d7:a1:9b:b2:
68:a0:ee:f1:81:37:e0:f9:6f:80:34:57:8d:6b:5a:
f0:02:18:50:12:58:72:8c:70:f4:73:0f:bf:65:4f:
0e:bb:06:79:72:25:f3:3c:1e:e9:47:61:ab:8e:19:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:25:2E:68:D6:3A:51:D9:18:9B:49:43:BF:0B:47:AA:FD:CD:BC:B5
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.179.0/24
IPv6:
2a0a:d700::/32
Signature Algorithm: sha256WithRSAEncryption
1e:cd:93:a7:10:2a:ce:a6:73:14:05:fc:fe:fa:58:56:5f:1d:
f5:e5:20:8d:87:b5:e5:8f:7b:1d:eb:7a:3e:47:86:da:57:8a:
94:6a:cd:89:e5:32:14:66:a3:42:fa:6f:aa:1a:ec:27:47:d6:
49:34:69:17:e4:d8:02:a4:69:f5:06:5d:0f:ff:4d:a0:20:a0:
56:aa:d1:e0:ee:14:69:69:22:37:72:73:09:68:30:8b:b7:28:
ae:0e:08:cd:21:9b:49:49:ea:be:7d:0f:a8:43:46:27:53:4a:
1e:71:3b:0f:d9:65:78:fa:82:73:2b:9a:45:ed:36:d7:13:8c:
76:ff:7a:fd:72:9a:7e:db:4f:71:cc:55:6d:ff:19:88:30:c0:
8c:5d:4b:fd:2a:71:b5:4f:9d:fa:dd:50:ab:81:2b:73:0d:13:
fb:60:0b:46:83:2b:89:0a:2d:ed:10:26:39:c1:60:2a:4b:ee:
31:ec:35:25:9d:d1:56:b2:e8:c5:d7:88:87:e3:25:b3:89:a2:
63:12:c2:01:62:dd:b4:9b:70:6b:45:62:20:ef:35:d3:ba:2b:
04:2c:a5:2e:fe:93:69:2a:30:48:75:c5:a0:89:29:f1:f8:02:
c5:1a:be:b0:ca:ca:b0:33:18:3b:0d:b3:f3:b3:0e:9b:8d:7c:
26:4f:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:47 2025 by rpki-client