Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa
File: v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa (raw, json)
Hash identifier: yHjYFG2kFwOSEQcA6CVX+o9if+OsdxgeiHLnGMf3Fqg=
Subject key identifier: BF:78:0F:4F:D8:A1:09:12:F4:65:E3:48:A2:E8:63:41:B4:F1:B5:DD
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 019421444F06AB84DDADF0C2C681439C0C37
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42475
IP address blocks: 91.207.34.0/24 maxlen: 24
91.207.35.0/24 maxlen: 24
185.82.52.0/24 maxlen: 24
185.82.53.0/24 maxlen: 24
185.82.54.0/24 maxlen: 24
185.82.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4f:06:ab:84:dd:ad:f0:c2:c6:81:43:9c:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf780f4fd8a10912f465e348a2e86341b4f1b5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:c0:ee:b6:9d:68:1a:9b:f9:aa:1b:4c:27:
87:05:6f:1d:58:7c:64:73:3e:3a:e4:5c:9a:05:78:
da:8c:f7:92:92:1e:1c:dc:42:31:d3:ba:e9:85:07:
5d:28:04:80:02:ed:00:f1:f6:f0:64:3a:30:d6:3f:
a6:d8:d7:72:05:bd:4f:31:bd:a6:44:68:6a:9a:d0:
fe:6c:0f:99:38:19:16:9f:24:36:f8:97:3c:0c:34:
bb:c2:2a:39:c0:35:96:03:c4:e2:d3:7c:82:73:33:
4d:a0:13:25:ae:bb:97:66:87:61:fe:da:5b:49:4f:
c1:48:76:6e:01:a1:3d:dd:e4:44:03:a7:62:a1:f5:
8d:d1:dc:d8:ad:e0:c4:64:20:45:0d:b1:11:4a:ab:
e3:ba:05:9c:42:64:0f:f4:53:90:62:64:19:8c:f6:
a3:4f:1e:fd:37:ee:b6:81:a5:b5:a1:ae:6c:4a:4b:
b2:2e:a1:77:81:08:70:70:e6:08:8d:13:cb:db:d3:
6b:3a:d3:c5:cf:33:55:81:a5:3b:18:d8:ba:3f:d3:
2d:96:4a:d4:d5:da:78:36:12:a4:6a:f6:84:d6:76:
60:4b:e4:7e:26:aa:0e:b5:f9:ed:61:c4:84:65:c1:
8b:35:d8:f9:77:d8:33:11:46:48:a8:5b:38:28:2e:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:0F:4F:D8:A1:09:12:F4:65:E3:48:A2:E8:63:41:B4:F1:B5:DD
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/v3gPT9ihCRL0ZeNIouhjQbTxtd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.34.0/23
185.82.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:ea:0f:a4:4f:62:9a:10:75:aa:51:6b:88:2b:fc:35:0a:bd:
d9:a5:23:e1:f3:8f:97:88:be:db:1d:09:40:9c:8c:81:19:c1:
81:70:72:cd:ed:dc:d9:1a:d5:cd:b1:4c:36:4b:b2:e8:1f:f9:
18:60:dd:20:ba:26:66:dd:e6:63:6c:bd:64:2e:96:69:f5:d8:
da:41:b9:88:d4:a0:9e:0b:49:f1:e0:dd:bd:f8:82:ac:19:a4:
3f:f9:b3:b5:a8:34:4f:e4:ba:da:5a:ab:e6:5a:14:b3:e9:39:
8d:23:a9:e0:42:7d:41:7c:32:d5:59:c0:2a:88:d2:63:47:d1:
32:3d:6c:4d:b3:e6:67:d3:f8:4d:b4:36:58:3b:61:46:83:fa:
1e:6c:da:c7:74:1c:9d:4a:6c:04:5e:f8:41:07:32:bd:0c:3c:
c5:6e:c8:11:69:cc:67:1e:18:8e:87:23:ed:36:66:62:fc:e4:
62:58:60:e7:25:90:9f:21:bf:41:f7:3f:6c:b7:75:7c:10:15:
7c:a7:cc:cb:ad:5f:9e:10:7b:f1:9d:7b:05:72:1b:d4:dd:d8:
a5:e3:d4:e6:32:27:7f:24:ca:c8:28:ed:3d:82:b9:c6:88:f9:
90:47:c9:59:ae:52:e7:68:55:6e:26:96:d1:81:85:3f:22:2c:
b9:44:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:09 2025 by rpki-client