Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/8OOoLJDz_FI_NX92WvwejRS7DhA.roa
File: 8OOoLJDz_FI_NX92WvwejRS7DhA.roa (raw, json)
Hash identifier: +qvS9QKZwMOlAg8I6Vrzt2whC56wBRZ4LOEjIO7SoII=
Subject key identifier: F0:E3:A8:2C:90:F3:FC:52:3F:35:7F:76:5A:FC:1E:8D:14:BB:0E:10
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 019427473C22E6B6269E4CDA99EC7FD07495
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/8OOoLJDz_FI_NX92WvwejRS7DhA.roa
Signing time: Thu 02 Jan 2025 13:49:27 +0000
ROA not before: Thu 02 Jan 2025 13:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44201
IP address blocks: 91.209.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:3c:22:e6:b6:26:9e:4c:da:99:ec:7f:d0:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Jan 2 13:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0e3a82c90f3fc523f357f765afc1e8d14bb0e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:9c:f2:f6:fc:74:73:ab:68:e2:c0:04:07:
98:40:c5:7e:55:be:c2:00:18:ff:45:b2:c6:59:a3:
ca:6c:78:ad:eb:70:ca:20:3f:01:f6:ae:93:fb:5e:
11:f9:6d:5d:3b:15:38:f7:d6:69:41:d8:74:36:d7:
b8:0e:0a:20:05:66:35:46:71:2d:0a:d5:39:ba:6f:
de:f6:6c:25:00:88:d5:d0:fa:4c:0b:24:6f:f2:f4:
e0:41:16:80:c3:af:e6:0e:ef:2c:ac:c3:08:c1:ce:
60:3c:b7:14:82:1c:9e:bf:f2:f7:16:79:a5:7a:1a:
9d:89:5f:bc:f2:df:a6:17:ec:f1:fd:f4:46:d4:0a:
cd:60:e7:5b:b5:ed:24:09:ea:78:f9:8f:fe:d6:d5:
5a:e7:99:a3:62:65:cc:0f:9d:cd:42:3d:ba:99:d0:
e7:10:09:38:17:17:b6:d6:73:bf:82:52:76:c6:fd:
b4:9e:f3:51:54:b9:cc:5f:25:7a:8b:44:49:b7:13:
86:be:0b:63:cd:ca:fe:a3:8c:c2:7c:b9:b6:4e:32:
ac:11:d4:29:8b:d9:81:61:9a:26:22:db:74:93:fa:
a3:34:6f:be:c5:60:d6:6d:91:01:89:a6:9d:9c:ed:
90:94:49:38:8c:9a:5e:8b:54:82:4b:66:67:e6:b0:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E3:A8:2C:90:F3:FC:52:3F:35:7F:76:5A:FC:1E:8D:14:BB:0E:10
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/8OOoLJDz_FI_NX92WvwejRS7DhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:43:f8:9e:26:cf:db:14:a5:39:46:ab:b0:74:12:6e:85:f3:
eb:c5:01:35:b8:03:29:da:0a:68:74:09:d7:1d:b2:21:cd:a5:
d4:9f:cc:10:34:6c:11:d8:f5:fb:22:87:20:df:39:eb:b3:b3:
e3:86:cd:df:f0:5a:46:17:e2:4d:43:53:b9:74:8c:03:68:e1:
9b:2e:5a:bc:87:5f:e4:b5:77:ae:6d:c2:dc:36:fc:36:7a:bc:
76:3e:3c:cc:2d:51:45:e3:3e:3f:5f:1d:58:f4:f8:89:1c:b3:
b1:65:2d:f2:3d:1c:02:4d:28:70:4f:4d:aa:2c:91:14:14:51:
7f:1b:67:ed:c7:d0:b8:5a:65:28:78:b5:60:8b:4f:77:10:01:
3a:eb:7e:c6:ee:ab:71:86:91:8b:fa:ca:2c:ba:b5:71:b3:27:
94:2a:65:8b:26:78:53:f0:7b:13:d6:be:29:65:ab:ac:b3:a0:
83:05:f5:a1:05:3a:b9:1f:0c:e6:40:1e:b1:4b:ef:68:fd:9d:
dd:e0:c7:0f:0f:1c:14:a3:83:8f:0b:02:8d:73:61:c1:1e:88:
31:5c:b5:2b:f8:2a:fb:ae:5e:d7:43:2c:ea:ed:53:42:3b:19:
f4:14:5b:f2:3f:f1:bd:74:c7:65:b8:6c:19:53:59:c3:80:26:
53:a1:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:39 2025 by rpki-client