Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9dzDheHmmU8Ey_Lj1w6QrTJ49FU.roa
File: 9dzDheHmmU8Ey_Lj1w6QrTJ49FU.roa (raw, json)
Hash identifier: YZCj69eqJcleaBMkvI3qN0C3tr2vEozu0byWIMOGkgY=
Subject key identifier: F5:DC:C3:85:E1:E6:99:4F:04:CB:F2:E3:D7:0E:90:AD:32:78:F4:55
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0194258F5158709031658621F271E1E9EC3B
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9dzDheHmmU8Ey_Lj1w6QrTJ49FU.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 91.209.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:51:58:70:90:31:65:86:21:f2:71:e1:e9:ec:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5dcc385e1e6994f04cbf2e3d70e90ad3278f455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:c3:bb:e3:22:90:e1:cc:39:91:cf:74:1a:
f6:f1:41:65:24:77:8d:a8:f5:23:92:91:17:9a:f5:
47:46:92:6d:fe:e7:34:18:5a:9a:8b:c3:e1:71:47:
e4:51:7c:2a:c6:20:a6:ab:10:a7:ff:97:56:0e:ee:
6b:4f:c9:66:0d:9f:5f:9d:c1:ec:c7:5a:95:a9:5b:
54:25:6e:cf:89:d4:d2:d4:60:37:7a:c1:eb:00:47:
cb:1c:6c:cc:a9:f9:b1:c6:28:51:89:82:52:aa:72:
42:3f:7d:95:b1:f5:d3:42:66:1c:49:97:21:8a:69:
b4:9a:ad:3c:bf:0b:b4:c8:46:75:4c:ee:35:c2:6d:
52:58:09:47:8a:47:34:b0:e2:66:49:a7:72:09:cf:
9d:54:54:9c:f5:34:c9:1d:ca:46:ed:13:aa:06:45:
d7:62:6a:55:eb:58:73:13:af:2c:97:32:ca:c9:61:
7b:5f:b1:89:54:96:99:26:b5:8a:41:07:fd:9d:16:
44:ed:ed:9b:92:dc:f5:71:9c:4f:44:1d:c8:ed:e4:
cf:89:f8:0b:4f:3c:f5:5d:93:27:67:b9:8f:60:88:
21:44:b6:77:5e:97:7d:6a:e9:5a:e9:ee:3c:a2:88:
a7:7d:b9:ca:53:9b:e4:b0:64:1e:66:9f:42:6f:a9:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:C3:85:E1:E6:99:4F:04:CB:F2:E3:D7:0E:90:AD:32:78:F4:55
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/9dzDheHmmU8Ey_Lj1w6QrTJ49FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.179.0/24
Signature Algorithm: sha256WithRSAEncryption
15:19:fc:a8:0d:c4:8d:72:a4:5b:78:4a:56:87:4c:59:9c:b6:
f4:66:ca:8f:e6:d3:26:61:50:95:a7:ae:2d:c3:a2:ff:c4:5a:
85:c6:54:b7:b1:e8:5b:14:da:39:63:56:39:44:6c:bb:8b:67:
27:3c:3f:23:68:d1:b1:11:57:b1:b1:5f:df:b8:ce:ee:f4:bc:
af:ed:c0:e9:a2:a3:11:8f:68:b2:51:ab:04:26:76:21:0e:0e:
35:f3:b4:f5:00:8c:2a:f5:33:c9:71:63:fa:a5:2b:2a:34:6c:
f0:c9:09:af:95:69:91:35:9b:08:9b:87:31:01:bc:35:bd:ac:
cb:5f:3b:d8:5b:84:ed:cd:74:cc:02:6a:32:0f:ed:7c:a3:1f:
4b:3f:be:33:18:bc:2e:73:78:65:98:30:b0:67:e4:1f:c2:62:
89:90:1a:51:c4:91:ee:d6:7e:72:83:9b:6f:fa:58:0f:51:84:
76:9e:a5:0d:47:fc:12:f8:7f:8e:59:27:1f:3a:e6:67:61:fd:
1b:29:23:88:48:48:cb:2f:88:e6:93:31:3f:1e:4b:14:02:97:
a1:61:3b:31:87:97:75:68:1f:47:38:0e:1b:13:29:7a:28:57:
59:ae:dc:ff:4f:0e:4f:b6:01:0b:03:0a:be:66:77:80:3c:bc:
da:2d:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:12:48 2025 by rpki-client