Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/rxFd7eqhMDq90CR2tb_lKkld3Lk.roa
File: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (raw, json)
Hash identifier: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=
Subject key identifier: AF:11:5D:ED:EA:A1:30:3A:BD:D0:24:76:B5:BF:E5:2A:49:5D:DC:B9
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 019425FC2913E30106277EEFEADD42282FA5
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/rxFd7eqhMDq90CR2tb_lKkld3Lk.roa
Signing time: Thu 02 Jan 2025 07:47:50 +0000
ROA not before: Thu 02 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64441
IP address blocks: 91.212.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:29:13:e3:01:06:27:7e:ef:ea:dd:42:28:2f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jan 2 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af115dedeaa1303abdd02476b5bfe52a495ddcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:18:b3:54:95:3a:dd:b3:11:ab:98:77:4f:
42:c3:d0:16:6e:1d:40:6e:6c:ce:e9:29:67:a0:88:
93:71:f6:4c:23:fd:85:4a:c9:49:5e:82:38:88:4b:
de:78:48:8f:cc:ba:30:4e:0c:7f:d3:4e:dd:64:ab:
4a:3a:ad:4f:0b:b3:c1:1e:c1:ad:30:79:6c:c6:e1:
de:74:31:68:26:fe:b8:f9:d1:a7:26:75:62:8c:9f:
34:75:8c:99:a4:61:e6:51:00:67:16:df:2a:9d:ea:
d2:0d:4a:3e:62:5d:bf:db:c8:95:d0:ca:0e:63:e2:
8d:2a:c2:c0:30:f3:24:0a:fb:ea:79:eb:c3:96:61:
27:9c:89:f3:e5:70:be:79:51:9f:68:cd:89:99:66:
29:ee:cc:dc:88:be:1c:49:44:c1:d6:13:92:a2:2e:
16:87:9c:c9:88:df:63:9e:78:eb:c5:39:bc:94:0d:
d9:51:87:a7:61:76:76:44:53:73:06:55:de:15:6f:
fc:ff:57:8d:e3:86:b7:e3:9f:96:ad:e6:03:b7:59:
8b:09:a2:4e:74:50:89:b0:dd:a0:35:ee:f4:6d:df:
20:4c:47:e0:f2:b6:25:42:e0:ec:1a:53:39:37:56:
0c:f4:72:1f:73:9e:89:4a:1b:54:ec:c0:b0:b8:c6:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:5D:ED:EA:A1:30:3A:BD:D0:24:76:B5:BF:E5:2A:49:5D:DC:B9
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/rxFd7eqhMDq90CR2tb_lKkld3Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.227.0/24
Signature Algorithm: sha256WithRSAEncryption
36:43:12:10:92:a0:97:fc:2d:27:7f:20:ee:a5:f4:8d:9f:80:
11:1c:ed:da:6c:e2:48:7f:fa:2d:93:d5:35:09:4f:f3:3b:7a:
d1:d2:31:f0:63:a1:a5:1a:e3:18:4c:c8:27:3f:1f:71:78:3a:
48:81:cb:d2:2b:a5:2a:82:af:ca:5e:c1:02:9d:f3:1a:a5:92:
13:5d:ad:64:7a:46:e6:01:63:37:68:75:49:f0:96:de:7b:98:
f7:91:c9:48:a4:15:96:3e:6e:62:65:90:0f:7e:5d:4e:8c:73:
ec:0b:bf:3e:a0:6b:ff:6b:56:9a:64:e0:c6:e4:9b:7c:6e:aa:
b7:85:eb:15:85:60:f9:f9:5f:1c:00:10:95:60:08:98:26:be:
37:d8:e8:23:98:94:46:9f:20:4b:0b:57:f5:9c:cb:a8:06:d1:
83:1e:a4:ec:05:86:4a:be:f0:4c:47:1d:1b:10:c4:53:04:19:
13:fe:8d:54:b8:fc:0b:86:fd:e0:fb:10:89:e1:df:8d:68:68:
04:9c:50:d3:53:4d:44:34:22:2e:12:0f:af:e6:fd:b8:43:1e:
15:bb:a5:66:8f:87:c3:7f:1f:63:86:ee:16:0a:1d:33:31:3f:
92:d8:77:30:76:18:37:20:47:ba:a6:10:f3:48:f7:c9:93:e0:
94:e7:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:04 2025 by rpki-client