Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/9fXYfiecb8LKHLBc5hFULaPgfkc.roa
File: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (raw, json)
Hash identifier: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=
Subject key identifier: F5:F5:D8:7E:27:9C:6F:C2:CA:1C:B0:5C:E6:11:54:2D:A3:E0:7E:47
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019426D9C0A7826810A3FA22A8E5E0F70B25
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/9fXYfiecb8LKHLBc5hFULaPgfkc.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213206
IP address blocks: 91.239.145.0/24 maxlen: 24
2a07:e0c0::/30 maxlen: 30
2a07:e0c0:1::/48 maxlen: 48
2a07:e0c0:2::/48 maxlen: 48
2a07:e0c0:3::/48 maxlen: 48
2a07:e0c0:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c0:a7:82:68:10:a3:fa:22:a8:e5:e0:f7:0b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5f5d87e279c6fc2ca1cb05ce611542da3e07e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:78:5c:35:a2:76:eb:98:75:07:3a:25:dc:
16:9c:20:93:09:fc:32:9e:f7:54:32:da:1b:f9:fd:
82:7b:3a:58:4b:a0:2c:ba:eb:bb:57:c1:06:19:7e:
8c:d1:e6:2e:0c:dd:45:e7:a3:28:43:05:6f:b5:d7:
4a:fa:ec:11:a1:d5:1a:28:5a:26:5c:9e:d1:32:d9:
08:4d:e7:d3:ee:4b:a6:4b:28:e2:ad:1c:6c:e5:7d:
82:aa:79:bc:97:37:d6:42:fb:45:21:3d:9a:60:8d:
6f:64:35:ae:b6:df:df:ed:bc:85:9c:6d:18:e0:a7:
c3:53:fe:23:f3:42:f1:25:f5:3d:40:ef:bd:39:f1:
a8:31:66:a8:0e:b3:1a:81:29:23:d6:94:70:00:8a:
09:dc:06:e2:a2:72:4b:05:21:f7:2d:28:b7:85:9e:
a8:e2:52:33:db:aa:26:a1:9e:c2:96:ca:6c:31:6a:
7b:48:4d:c9:c1:50:34:25:70:ec:ec:f6:18:b3:7c:
b6:a5:d6:f2:75:01:20:19:5e:2f:b1:2c:64:50:73:
6d:90:2c:6a:e9:59:76:b3:cd:38:e5:a7:25:b5:36:
a7:30:37:46:fa:4e:f8:dc:e2:46:39:ad:4f:1b:32:
df:24:6d:b2:6c:79:1c:71:39:ff:4b:60:20:ca:0f:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:D8:7E:27:9C:6F:C2:CA:1C:B0:5C:E6:11:54:2D:A3:E0:7E:47
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/9fXYfiecb8LKHLBc5hFULaPgfkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.145.0/24
IPv6:
2a07:e0c0::/30
Signature Algorithm: sha256WithRSAEncryption
97:e5:70:ce:a0:0f:24:fa:86:1d:e9:fe:81:d4:dc:5e:53:8d:
e9:79:47:62:68:5f:42:a1:60:36:f6:fe:f6:9a:3f:d8:23:0e:
7e:60:49:ec:e7:9f:12:7d:32:43:27:f3:d6:e5:f9:7f:3e:d7:
20:37:ce:d0:e1:f4:69:c0:35:c4:d9:3a:e8:79:cb:39:1b:3b:
98:5a:70:85:f7:41:07:c3:fc:0b:87:72:ea:7a:8d:5f:0c:bb:
5f:c7:c4:92:e3:69:cd:57:89:48:b1:ab:7c:e7:3e:6b:cd:65:
5f:0a:b6:49:fb:62:0f:32:3d:fd:39:18:8e:a1:e5:45:38:42:
b2:f1:48:d9:f9:83:22:7a:a4:13:b5:99:ef:9d:f2:9f:c4:de:
8f:ff:b6:e8:21:af:82:b0:19:bb:05:85:a4:bb:8e:13:55:4a:
5a:13:89:67:00:32:b3:8c:b4:c9:f8:bd:44:00:cf:a0:94:a7:
5b:5b:44:9a:76:43:42:ba:56:c7:12:a7:e1:a1:e4:60:b2:2c:
bc:1e:aa:36:9b:27:b3:c8:0e:be:71:de:84:c6:5b:e9:fe:06:
4c:01:a2:bb:73:af:05:d5:e7:6b:aa:12:e7:a0:1b:f5:e4:12:
a4:c7:60:d4:b0:fc:12:dd:53:3d:54:25:c7:fc:2f:cd:3b:93:
37:9b:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:09 2025 by rpki-client