Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/F1m4ItJzd-e1pj7aIf2HCC8j59k.roa
File: F1m4ItJzd-e1pj7aIf2HCC8j59k.roa (raw, json)
Hash identifier: 9mt8xPLKl7xW4ptMPyOkwbZXhHAWeX39Lhx9gbts5O4=
Subject key identifier: 17:59:B8:22:D2:73:77:E7:B5:A6:3E:DA:21:FD:87:08:2F:23:E7:D9
Certificate issuer: /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial: 01942825A562A136E3C8C39B84301A2AEB8B
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/F1m4ItJzd-e1pj7aIf2HCC8j59k.roa
Signing time: Thu 02 Jan 2025 17:52:23 +0000
ROA not before: Thu 02 Jan 2025 17:52:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 91.209.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a5:62:a1:36:e3:c8:c3:9b:84:30:1a:2a:eb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Validity
Not Before: Jan 2 17:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1759b822d27377e7b5a63eda21fd87082f23e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:99:46:6b:b1:65:78:0b:64:dd:43:20:f3:
7e:aa:3e:3a:93:51:2e:0e:d5:57:6a:4c:cc:76:0a:
55:05:c5:de:58:2e:22:8f:3e:3e:8a:92:37:41:2c:
75:22:90:ac:84:f1:bc:e5:6e:59:09:8e:7c:e9:61:
7b:b4:fb:b5:a0:90:06:a2:1e:78:66:7b:64:e3:de:
c0:50:e2:c6:84:2a:0f:5c:38:1d:5c:13:45:ac:ea:
be:1e:12:f3:bc:8d:07:fb:ab:c9:90:fd:6f:48:30:
06:cf:57:bb:01:15:30:b0:b3:e6:2b:21:43:7a:58:
e1:31:29:c6:cd:45:22:c3:a8:3b:8d:9a:48:cc:c6:
1f:27:20:3b:9d:3b:18:70:2e:c9:d1:ac:3d:4c:35:
f8:36:af:06:b7:86:7b:44:a6:bf:da:30:e3:bf:0c:
b2:e1:df:72:27:ad:db:d6:b9:3e:c6:d5:43:6b:36:
69:05:dc:7a:05:f5:37:fe:7d:9c:43:9e:2e:98:c6:
51:95:e6:38:d7:42:00:b5:a2:64:ac:00:69:58:d5:
3e:1a:4a:a9:4d:11:8e:84:75:a7:9f:6a:da:b1:90:
ac:b6:a3:ff:5a:f6:70:6c:1b:52:9e:6b:c3:20:37:
43:6e:a4:b2:be:32:1a:c3:34:0c:82:ff:50:25:bb:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:B8:22:D2:73:77:E7:B5:A6:3E:DA:21:FD:87:08:2F:23:E7:D9
X509v3 Authority Key Identifier:
keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/F1m4ItJzd-e1pj7aIf2HCC8j59k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
74:39:59:65:2f:66:88:69:85:44:92:9f:b7:9a:76:39:f9:ce:
91:96:93:4b:a4:c1:b8:79:c7:be:c9:49:a7:11:a1:66:84:4f:
51:73:56:5b:9a:c0:b6:1a:db:d0:eb:15:b6:60:91:94:3a:95:
5d:c0:7e:8d:2d:28:e8:07:fa:8d:eb:fc:0a:a7:d4:ce:87:29:
22:fa:d3:2a:68:69:0b:ee:88:b3:e3:98:86:3a:15:85:05:d4:
b7:f7:2b:b2:80:9d:76:a0:66:68:49:af:4a:97:d8:cd:6f:0f:
52:58:37:78:93:99:e3:0c:45:4c:ad:33:50:58:17:0d:ba:bf:
27:59:54:4c:0a:db:99:7b:93:30:0e:7d:7d:53:74:68:3f:5d:
22:6c:71:92:f7:62:19:12:d8:87:a4:9d:e9:b7:9f:e3:2a:ae:
0b:ba:90:64:3b:1c:3f:b8:ee:06:01:69:0e:27:ab:f1:f8:c1:
fb:e2:54:8c:54:50:54:34:cd:7a:d6:76:20:a3:56:7b:2f:e5:
81:e3:b6:6f:05:bd:ac:1e:c5:64:ed:fd:ac:ca:8f:d0:84:9a:
13:4d:85:81:72:7d:43:5a:70:c5:0b:c2:31:c0:c7:d9:d1:26:
c0:2c:c5:47:5e:77:00:66:16:2d:cf:86:c2:65:1a:12:54:a1:
d6:25:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:55 2025 by rpki-client