Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/j1MFNSh109TR4xhuIO7hEIzzLx0.roa
File: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (raw, json)
Hash identifier: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=
Subject key identifier: 8F:53:05:35:28:75:D3:D4:D1:E3:18:6E:20:EE:E1:10:8C:F3:2F:1D
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 0194266B984D7DD39F4CE50AF271F8069FA4
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/j1MFNSh109TR4xhuIO7hEIzzLx0.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212204
IP address blocks: 91.239.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:98:4d:7d:d3:9f:4c:e5:0a:f2:71:f8:06:9f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f5305352875d3d4d1e3186e20eee1108cf32f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:45:9f:44:94:9e:83:52:06:42:cd:8d:95:
a2:96:cf:45:09:44:54:81:ce:01:e4:80:17:3a:ed:
d4:2b:29:28:e0:4c:44:f6:74:29:6a:28:d6:14:98:
10:fa:23:ed:f8:7e:cb:d1:18:4b:ee:ea:78:63:28:
1a:bc:f5:6c:a6:66:6b:c0:a5:5c:b3:80:5f:23:43:
2e:d6:97:ab:b5:40:c0:70:3a:84:ac:3b:80:af:c2:
56:15:b1:18:9f:15:13:0b:7d:6b:88:10:88:12:be:
4f:89:5f:c3:74:5f:b0:21:81:ca:1e:0e:63:b3:d9:
69:6a:a8:11:c2:ab:73:ae:2b:d6:17:e1:52:9b:ef:
dd:d8:a0:bb:03:9b:c3:50:fc:10:d6:c0:19:5b:ba:
db:6d:b5:11:07:22:eb:31:1d:1e:08:e3:02:f5:ac:
a8:bf:a8:9e:38:9d:e2:98:9e:0f:ac:bf:fa:10:10:
97:dc:28:ec:be:8f:15:40:70:f8:65:c3:c2:a0:ba:
70:3d:86:91:94:99:07:8c:65:0b:b3:81:f1:71:37:
1c:e4:a8:7c:43:38:e2:a9:ba:f6:21:14:a6:23:11:
b9:27:b4:1c:dd:61:c2:33:9c:13:90:97:2e:1a:0c:
9e:9a:6e:0e:5c:d2:67:c8:f7:2e:af:57:f1:30:c5:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:05:35:28:75:D3:D4:D1:E3:18:6E:20:EE:E1:10:8C:F3:2F:1D
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/j1MFNSh109TR4xhuIO7hEIzzLx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.120.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d1:3b:7d:2c:95:04:b1:96:a8:f2:9b:e9:f4:6a:ab:b4:f5:
77:e6:45:fc:cb:f8:9d:30:b4:dd:9b:85:a8:d2:9b:cb:f4:aa:
3d:09:90:e5:a4:e0:36:53:49:f9:74:9c:ce:ca:88:45:ec:d4:
1c:f8:1f:d3:4c:55:5f:e5:ee:07:33:27:5e:6b:f6:b2:24:83:
57:2d:be:50:2e:81:f9:49:7b:82:71:0c:3b:8b:93:1b:6d:bf:
14:31:67:2d:58:5e:ef:b3:ce:21:e9:05:f8:a5:73:7c:3c:44:
57:22:d1:d5:93:77:07:0e:de:77:d1:b2:9a:91:74:51:63:9d:
75:3d:a8:c5:22:bf:3d:75:01:b9:ab:b7:82:89:e8:d7:df:5f:
ae:22:71:69:51:f7:f1:9e:f0:64:0e:a8:8b:5b:29:1a:be:62:
8b:87:40:b8:cf:1b:17:fc:b9:29:e2:b8:e3:13:d2:13:cb:65:
cd:eb:19:c9:27:7c:95:84:9a:c2:07:95:68:8b:73:7a:36:51:
7f:75:a1:5d:80:7a:94:57:ba:9b:e9:1c:40:7c:be:a7:28:39:
02:6f:61:2e:be:92:1a:65:d9:a3:40:97:d1:2e:98:e3:9e:44:
2c:44:48:64:ce:bb:22:b1:d8:64:5e:39:5e:54:be:28:28:7b:
c5:70:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:00 2025 by rpki-client