Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa
File: Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa (raw, json)
Hash identifier: 2QUmH1Q4U8nkWLgbGItfFRsuYPfdbrlhi1xdBt64+Zw=
Subject key identifier: 1E:9C:BC:37:FF:B9:A9:B8:38:AF:95:2F:75:25:F3:57:37:62:5B:1E
Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial: 019423D7574D911F677DC930D35DF06D172B
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210060
IP address blocks: 91.223.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:57:4d:91:1f:67:7d:c9:30:d3:5d:f0:6d:17:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e9cbc37ffb9a9b838af952f7525f35737625b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:46:04:36:86:58:10:de:da:b7:62:c9:26:
4b:fe:2c:03:18:6a:91:81:41:c6:41:0a:8e:08:70:
bc:02:18:44:d0:01:ce:5d:97:55:e4:88:a2:71:ac:
93:09:e1:3b:9c:3a:31:0a:0c:2c:d9:38:2d:7b:76:
f3:1c:6a:9f:42:fd:b9:1e:a1:19:df:49:45:8b:49:
fe:ac:bf:0f:22:56:21:ec:9b:b5:ed:54:4b:c5:1a:
60:3f:99:4b:1c:86:c0:b8:a3:71:43:71:6a:2a:c6:
e8:b8:d2:0a:7a:94:25:15:15:10:59:7e:e0:c2:66:
6d:69:9c:a7:c1:e4:d4:ec:22:88:76:96:6a:f0:e9:
8f:78:0b:44:58:61:0c:14:4b:75:5e:b9:bc:59:2d:
31:d6:99:f0:6e:59:0d:68:83:10:7a:82:7c:1f:80:
66:29:00:65:33:0f:d6:a1:4b:89:17:8e:89:20:f7:
f6:f5:b1:fc:ef:83:94:c4:68:a4:ec:df:b4:03:04:
18:cf:50:04:5d:09:27:f8:2f:7c:74:43:90:76:bc:
be:5d:6a:64:da:d9:7f:b5:d7:25:3f:19:85:84:ca:
a1:b9:ad:62:1f:4a:7d:d7:4a:7b:60:e1:ca:9c:86:
9b:9f:bb:50:44:33:0c:93:b7:49:06:35:63:63:8c:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:BC:37:FF:B9:A9:B8:38:AF:95:2F:75:25:F3:57:37:62:5B:1E
X509v3 Authority Key Identifier:
keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Hpy8N_-5qbg4r5UvdSXzVzdiWx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e8:c6:54:8b:25:00:57:c6:6b:92:85:89:12:41:71:a2:0e:
3d:98:fc:d0:af:d9:74:ea:25:89:9f:1f:77:de:aa:04:2b:cc:
f5:30:c7:e2:e0:1a:e6:de:eb:73:7c:f3:4a:3d:58:58:d6:48:
c6:29:dd:f4:e3:47:5f:a1:8c:47:96:c1:3c:b1:9d:74:c9:41:
65:74:7c:63:4c:e2:09:7c:e4:26:c7:cb:f6:fc:f3:4d:a3:f7:
13:0c:32:81:c8:cd:97:a4:f8:61:09:e5:30:ad:26:22:42:c3:
1c:ee:8a:13:72:37:98:0c:23:a6:4a:0d:6d:8d:9b:a0:35:06:
28:93:c1:9f:6a:b3:4f:36:78:a8:b8:47:f3:cc:19:91:12:cb:
9f:c4:6b:eb:32:04:8b:ca:87:b9:d0:f6:2d:bd:53:58:1a:90:
6b:a4:fe:08:ef:b3:a8:d2:67:fd:82:02:5e:7d:dd:33:05:c8:
32:45:1f:2f:27:5e:11:e9:74:6d:f9:c0:cc:88:a5:d0:50:c9:
32:41:7b:b0:2d:70:04:6a:e1:fc:12:42:a3:6b:45:9c:73:6c:
9e:a2:a5:bc:f9:1f:a9:7a:04:1c:c9:81:9c:66:15:18:29:a2:
7a:cd:05:cf:c5:b1:32:14:8e:e5:0e:94:51:c6:16:19:8e:ed:
13:d7:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:05 2025 by rpki-client