Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/z_2rtoFCvPkDkADqibZPjoJmwkw.roa
File: z_2rtoFCvPkDkADqibZPjoJmwkw.roa (raw, json)
Hash identifier: q/SzHtsnHuDBpVkpEWhHESnMoXOnwPbEJuDNiDhbwHs=
Subject key identifier: CF:FD:AB:B6:81:42:BC:F9:03:90:00:EA:89:B6:4F:8E:82:66:C2:4C
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 019425222935FF2CE2C2DF9B0ACAA28D4906
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/z_2rtoFCvPkDkADqibZPjoJmwkw.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48303
IP address blocks: 91.216.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:29:35:ff:2c:e2:c2:df:9b:0a:ca:a2:8d:49:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cffdabb68142bcf9039000ea89b64f8e8266c24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e6:39:53:2d:d8:1a:0c:86:c2:c9:a8:f1:7c:
bc:7c:90:0b:57:e8:09:1d:80:1c:89:0b:a1:c1:a0:
f6:d2:bb:e0:03:70:88:a9:2a:72:91:44:da:de:40:
b0:5f:9b:5f:44:0b:ec:f8:a2:62:5b:f3:f5:7f:fd:
02:00:dc:a6:62:2f:9a:cc:73:18:08:06:7d:3e:4e:
c1:d6:31:fd:11:49:1e:94:7a:90:19:b0:7d:01:19:
14:c8:cd:9f:9f:61:35:dd:18:4e:0e:c5:70:be:79:
19:13:f4:f0:81:0b:3f:a1:21:ab:0e:c2:56:90:ff:
86:32:99:26:d8:5d:c7:85:13:89:09:f9:e7:53:2d:
ae:4d:b1:cf:58:34:53:df:f5:b2:7a:e8:3e:93:4c:
4c:0e:a6:80:aa:8e:7b:40:25:14:07:ab:c1:d3:61:
79:51:78:31:49:f3:a9:50:18:ff:04:a8:79:8a:0f:
13:4c:f2:31:aa:73:84:96:6a:7c:20:9a:0c:52:7a:
3c:eb:c6:ac:b4:e5:8b:8f:e5:cb:6c:ea:6c:b1:84:
ec:ec:31:6f:1f:0e:fb:3f:ca:66:40:b6:a1:e3:31:
af:ce:8d:16:5d:f2:7f:0f:a4:2d:9d:40:43:56:f0:
de:ce:73:a7:f8:d8:86:aa:4a:3f:90:e1:99:d4:32:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:AB:B6:81:42:BC:F9:03:90:00:EA:89:B6:4F:8E:82:66:C2:4C
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/z_2rtoFCvPkDkADqibZPjoJmwkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.44.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d0:8d:43:ea:ef:84:95:82:3d:4a:a4:72:42:8a:3f:57:5d:
56:6a:5f:6a:6f:69:d4:0b:16:9e:9d:58:fb:37:61:b7:40:0a:
da:d6:8e:46:9b:68:31:db:7c:ef:04:f2:01:df:30:48:ab:b5:
e3:dc:02:88:aa:d1:ab:b4:2f:1a:ef:7a:bd:63:9f:7d:df:4d:
0a:22:42:58:ee:66:4f:7b:eb:01:64:2e:37:9f:f8:76:74:72:
54:80:78:30:b1:29:07:fd:0c:27:33:73:e0:af:d5:67:14:c4:
56:94:16:32:42:1d:82:3f:03:4d:7c:c2:7d:4d:b6:b1:c9:07:
38:14:96:19:fe:c1:ea:c4:37:10:11:7b:18:f6:cf:c1:dc:7c:
dd:bb:b8:69:80:9f:5d:ac:af:0d:b1:15:68:18:a7:ab:3a:89:
c4:06:58:61:0d:7d:05:ae:b2:ed:18:3e:f2:82:32:4c:c6:45:
9b:1b:42:e0:ce:35:f6:4d:c4:bc:77:50:9c:61:9c:e4:92:ac:
f6:9c:6f:72:82:b1:f5:d7:bd:ef:6a:95:c4:a6:60:d0:95:33:
a5:fe:58:54:09:3a:44:d5:f2:ac:62:0e:7b:0b:d7:2c:25:3e:
ea:fc:a3:b6:c2:12:a3:d2:c7:8a:ae:91:28:a9:f4:65:05:5a:
47:dc:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:05:44 2025 by rpki-client