Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/arYUP1gbgyJFh2KnJse2NHTC8nY.roa
File: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (raw, json)
Hash identifier: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=
Subject key identifier: 6A:B6:14:3F:58:1B:83:22:45:87:62:A7:26:C7:B6:34:74:C2:F2:76
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 019426D96180DDFEE14B10F79747DE988AEF
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/arYUP1gbgyJFh2KnJse2NHTC8nY.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 91.140.128.0/17 maxlen: 24
194.54.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:61:80:dd:fe:e1:4b:10:f7:97:47:de:98:8a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ab6143f581b8322458762a726c7b63474c2f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:f8:ad:10:58:76:33:d0:97:b2:31:dd:32:
95:c1:29:cc:5d:72:c1:27:36:74:4a:ca:d2:e3:f1:
ad:a7:4e:03:bb:e0:11:a0:d5:76:25:5d:af:2b:7c:
83:cb:2a:bf:14:a1:b3:99:3f:f2:f5:b7:aa:48:85:
3f:95:d9:6c:8c:ff:ef:24:a4:0b:d2:85:a9:5a:6d:
c6:2d:53:c8:8b:6a:45:ce:e6:7a:23:87:ab:aa:f3:
a4:a6:03:fd:cd:13:92:2e:5b:3f:d4:b1:53:f1:31:
30:b7:ff:5d:68:32:d7:e3:41:6d:e6:0f:60:ca:8c:
3a:68:3d:a9:0f:48:c2:b7:89:11:ac:25:a4:87:64:
02:86:40:9b:32:24:74:d1:a5:02:90:11:84:bd:9f:
fd:0c:d6:72:a2:bf:66:cd:1c:4c:89:6c:92:1d:bd:
e1:0a:e9:ec:50:43:24:99:3f:7c:6a:46:70:c2:dc:
ae:38:e7:24:a3:a6:31:cc:fa:e9:b1:7e:94:d3:ad:
cc:95:88:32:a6:64:f8:0a:1a:75:93:8a:f8:7a:40:
34:ee:69:51:24:c3:5a:fe:9a:5f:58:0e:9b:b9:1e:
31:07:49:b1:72:43:54:d0:da:96:cd:59:41:a0:77:
c9:68:83:5c:83:82:29:c4:e8:03:e1:ed:bf:e1:4d:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B6:14:3F:58:1B:83:22:45:87:62:A7:26:C7:B6:34:74:C2:F2:76
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/arYUP1gbgyJFh2KnJse2NHTC8nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
82:c4:4b:2d:20:8b:0f:81:58:fa:68:38:97:b2:b4:e3:2f:b2:
1a:48:86:32:e4:b7:ba:a8:d9:65:c5:4a:17:a0:6d:6d:26:ee:
0b:4f:f3:44:c4:ed:a5:85:a6:38:f8:df:b9:6d:a9:e0:93:96:
48:b0:e0:d3:26:d2:52:f5:30:45:0b:4a:80:15:38:d6:91:5f:
f7:66:f3:3b:54:39:32:90:23:e4:e6:5c:68:90:ea:64:b0:e0:
2d:8f:6e:33:7a:82:e2:f5:92:b4:28:c2:f6:10:72:51:b2:e2:
c0:ae:78:5b:ef:62:53:e2:2f:53:5a:25:fb:4a:c5:74:54:3f:
46:d4:4f:1c:3d:e0:74:87:42:9c:86:ee:0b:bf:51:82:d1:85:
68:29:6c:d0:03:8a:f4:36:1d:a8:89:7d:e9:a0:eb:b6:96:ae:
3a:ca:79:71:58:5b:96:ed:ec:a7:73:63:93:e7:9b:ee:12:a4:
bf:3f:62:75:5e:01:b9:99:98:52:70:98:e5:f0:3e:f1:9f:35:
19:70:63:cc:53:1e:91:56:24:46:2d:e8:67:2d:bd:6c:7a:49:
0c:35:20:a6:9e:f4:b2:0f:42:7d:14:b9:92:d8:e9:61:9f:c8:
38:42:54:72:a4:ef:16:1d:fb:6d:0a:b8:5c:c1:bd:41:8e:66:
07:2a:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:54 2025 by rpki-client