Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/Rdx8XfheQK9SaYz_CldryphH9T8.roa
File: Rdx8XfheQK9SaYz_CldryphH9T8.roa (raw, json)
Hash identifier: y/tJ0RmbT3dmGd7x3jwaVo6j1E4t/44CEGiNjsjlces=
Subject key identifier: 45:DC:7C:5D:F8:5E:40:AF:52:69:8C:FF:0A:57:6B:CA:98:47:F5:3F
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 019424B3392FA29BC1EDE6ECBBA717875DD7
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/Rdx8XfheQK9SaYz_CldryphH9T8.roa
Signing time: Thu 02 Jan 2025 01:48:32 +0000
ROA not before: Thu 02 Jan 2025 01:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205132
IP address blocks: 91.216.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:39:2f:a2:9b:c1:ed:e6:ec:bb:a7:17:87:5d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Jan 2 01:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45dc7c5df85e40af52698cff0a576bca9847f53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:cc:98:c5:76:5d:dc:3f:6e:94:9e:49:68:
8f:33:88:df:09:3c:d2:29:64:7d:b0:52:a9:40:79:
e0:2b:ac:b8:0b:91:fd:07:9b:5b:fe:c7:a8:c6:ba:
29:26:ef:d7:15:73:cc:5c:4d:0c:5d:f8:7b:76:b0:
c3:43:0f:99:c6:78:29:c8:87:8d:85:78:21:8a:0a:
53:4d:6b:a9:2f:a7:af:fe:7e:78:40:07:f5:a4:74:
8a:b3:48:d7:4b:d7:5e:ad:28:9c:3b:14:40:89:1a:
c7:fa:fe:92:48:99:c7:48:01:c2:5d:44:66:2e:f7:
e8:f1:2c:2a:1a:f5:2e:e1:96:d5:f9:a0:43:88:b4:
55:40:57:f1:1a:ae:b7:1b:37:ec:51:77:e5:92:65:
88:50:25:4f:ea:35:31:8a:43:4f:72:7f:a5:f6:29:
e5:d3:47:46:42:8c:08:e8:75:4a:9c:73:40:45:3d:
e9:f3:ca:01:17:15:e0:52:b9:a0:0e:ba:84:30:42:
50:2b:28:da:fd:1b:f8:98:26:98:a2:71:55:b2:11:
dc:62:76:c1:97:61:86:34:c4:ba:39:f6:c4:b7:45:
6e:2f:e3:73:ec:0b:6d:98:00:56:06:32:ff:de:e1:
89:39:ef:66:fc:f3:97:22:f7:49:16:29:53:a0:b6:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:7C:5D:F8:5E:40:AF:52:69:8C:FF:0A:57:6B:CA:98:47:F5:3F
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/Rdx8XfheQK9SaYz_CldryphH9T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1f:d8:74:d2:b1:ba:a8:ad:f0:81:e1:aa:38:12:99:18:ba:
11:14:d8:e7:6c:7d:6c:9a:1e:ac:04:c4:67:f7:9c:37:c8:23:
72:54:99:1e:35:5f:eb:35:6b:9a:18:c5:77:b2:11:4b:27:82:
45:bc:48:f5:60:88:5c:4c:3d:a9:79:85:11:c3:d2:53:1a:80:
53:e8:63:76:5d:0b:fa:6b:ea:08:dc:ef:b5:6e:4b:9c:3a:a0:
8d:da:c7:fa:64:e4:83:21:b7:c4:ed:3b:53:56:74:f6:6b:43:
b1:04:df:4d:d6:4e:d9:65:e5:67:38:ca:6e:03:80:79:7c:b7:
23:13:7f:4b:cb:1b:08:a7:c8:39:dc:26:26:26:a7:48:3c:98:
8c:fd:cc:56:db:54:4b:a5:c9:ed:e4:7d:85:f8:d8:9f:c9:ac:
19:fa:f0:0f:ca:86:85:6a:47:47:62:fa:57:53:aa:37:ca:f4:
1a:bf:f4:3d:06:96:b2:b1:48:b8:a9:ae:3a:22:e6:c0:8a:7b:
af:ce:42:71:a2:8e:86:43:f0:91:9d:03:5b:fa:d0:2a:c4:1d:
9d:49:c0:e9:80:89:a4:41:f2:af:69:12:07:97:b7:11:71:d4:
0b:c0:7c:ab:37:3a:76:eb:f8:88:c1:55:85:61:c8:d7:59:76:
0a:55:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:45 2025 by rpki-client