Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa
File: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (raw, json)
Hash identifier: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=
Subject key identifier: CF:48:F2:F5:8D:0B:0A:8D:D9:20:E5:F4:8B:E6:0D:FB:EA:A4:E5:CF
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 0194282345869B5864E51ED2AD752FE64DE3
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa
Signing time: Thu 02 Jan 2025 17:49:47 +0000
ROA not before: Thu 02 Jan 2025 17:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197042
IP address blocks: 91.216.148.0/24 maxlen: 24
194.164.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:45:86:9b:58:64:e5:1e:d2:ad:75:2f:e6:4d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Jan 2 17:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf48f2f58d0b0a8dd920e5f48be60dfbeaa4e5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:c0:fc:72:0e:da:c5:d5:6c:f6:f3:4b:54:
2b:df:64:93:0b:84:92:2e:9c:ed:50:26:de:a0:5c:
a0:a1:4e:77:2d:21:91:29:52:4f:ff:60:49:02:26:
ed:91:a3:65:cb:f2:17:31:b0:c4:c9:33:59:53:0a:
51:93:9f:20:ca:95:b4:18:ae:2e:7d:e5:bb:e4:28:
0e:b4:2c:94:da:b1:35:3d:26:82:58:ad:9b:1c:7f:
f7:7e:5c:5a:0f:5c:02:2b:49:60:8d:41:2a:24:8c:
92:19:8d:15:b2:7e:d0:4d:97:72:59:74:1b:e9:29:
7e:7c:30:f7:ca:fb:c9:76:31:bb:be:d0:9c:2c:b8:
04:2b:4f:c6:b8:ff:bb:95:04:cc:2a:51:d8:0a:8f:
fd:f1:98:11:e5:15:8c:cf:39:95:3c:9a:2a:67:0d:
24:6e:f6:ab:62:64:15:c3:b0:73:db:62:1d:65:fa:
a8:39:ba:41:01:2c:f7:e2:a9:01:49:93:20:15:f8:
b7:9b:f6:d5:87:98:ac:48:4d:2e:36:9e:39:94:1b:
fd:c9:bd:cf:fb:fb:92:71:a0:7d:f0:86:6b:81:57:
64:db:c9:d4:09:82:16:20:95:96:88:5f:d8:31:0b:
8e:e7:e7:c8:56:cc:0b:54:6f:a8:4c:ff:ba:48:91:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:F2:F5:8D:0B:0A:8D:D9:20:E5:F4:8B:E6:0D:FB:EA:A4:E5:CF
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.148.0/24
194.164.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0c:66:b3:58:c1:72:f1:bb:42:02:18:75:f5:73:f5:e9:40:
8f:c3:63:72:48:e2:30:7c:20:92:61:f7:97:33:c9:4b:ea:8c:
59:2c:08:49:f2:f3:a7:f7:fe:dc:f0:8e:de:b6:79:56:1a:b0:
fe:4a:0f:f9:7b:2b:8a:f9:22:92:50:ee:97:9f:ad:af:37:ca:
fe:9c:62:0a:6d:63:13:f9:d6:d2:29:e7:66:17:e8:d4:ab:1a:
95:44:8d:b3:01:a9:77:4f:9c:44:d6:55:1d:dc:bc:03:26:28:
8b:f5:d1:72:92:d6:48:7f:2c:85:f1:24:63:77:80:3d:a7:a3:
2d:55:78:40:48:2c:18:dd:bf:c3:bd:ee:38:90:cf:39:77:9d:
8a:b3:97:e9:fa:b5:b6:b8:be:b4:7b:a4:d9:75:49:47:af:63:
a1:8c:4d:d9:55:7d:2e:af:03:df:b8:bd:dd:a5:95:c2:65:75:
28:09:60:b8:d7:00:61:ca:57:aa:bd:6a:34:80:c1:00:b3:8c:
03:c4:97:24:0f:f3:78:dc:0e:3f:d9:37:f0:60:25:f0:20:06:
34:19:c7:ba:d7:29:46:1a:cc:12:3c:eb:8d:76:bd:97:4a:44:
ee:77:61:0c:3d:84:4b:8f:5c:4e:11:4d:d8:80:08:f4:57:92:
43:9c:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:16 2025 by rpki-client