Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa
File: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (raw, json)
Hash identifier: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=
Subject key identifier: A3:D9:15:49:7D:E0:8F:71:FD:64:DF:1C:5B:46:26:F8:85:5C:57:8E
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 019421443F3214F9FCB0772918894577E042
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51724
IP address blocks: 91.221.36.0/24 maxlen: 24
91.221.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3f:32:14:f9:fc:b0:77:29:18:89:45:77:e0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3d915497de08f71fd64df1c5b4626f8855c578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:41:b2:0f:93:e4:c2:2f:e6:4d:16:6e:d6:
8b:56:5f:32:45:4e:e8:8f:64:0d:6c:59:7d:1c:a0:
ab:78:c4:f6:3b:2f:d3:ee:4e:aa:9c:8c:c1:44:65:
10:10:6e:12:32:aa:ff:d7:f9:3f:39:b3:da:3f:f5:
55:91:45:8d:b9:f7:83:62:85:7f:17:d6:4d:02:b1:
a1:72:0e:e9:06:9d:36:a1:62:c2:2b:52:c7:2b:c2:
81:44:c8:df:1c:77:4f:12:b1:98:d7:28:e3:64:0d:
47:b1:b6:9f:93:c0:db:36:c1:56:b4:b7:f5:ca:c1:
99:04:21:bf:2b:79:ee:e9:10:48:4b:36:c8:9f:c1:
41:c6:73:4e:86:55:a9:57:a0:23:33:c0:83:06:5f:
21:ab:ee:c7:64:93:9b:ef:db:d4:01:fe:94:9f:2b:
43:36:80:2e:f1:8f:40:e5:fa:1c:59:59:e0:3c:1b:
7e:1e:5f:98:73:55:1a:43:34:a4:35:3a:f4:ae:b5:
1a:5a:9c:dd:79:fb:89:34:c8:9d:ca:1b:0e:8e:0b:
88:20:da:33:4c:bb:95:20:b4:e5:ad:35:d0:8c:b6:
77:c5:dc:91:dc:35:66:a8:bf:b8:d2:17:ec:10:06:
4b:60:b3:43:d0:d1:51:42:82:59:8e:d0:ca:43:d0:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:15:49:7D:E0:8F:71:FD:64:DF:1C:5B:46:26:F8:85:5C:57:8E
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.36.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:90:36:d3:0e:72:99:c3:f2:f7:30:31:6c:1f:1f:43:6c:de:
73:50:69:55:8d:d5:7f:24:61:66:0a:46:58:6f:9a:50:6d:04:
96:5e:eb:5b:53:99:f0:6f:e1:dc:4a:21:93:05:06:65:af:d9:
b3:59:b6:d2:16:48:eb:41:95:92:27:c4:7b:45:b4:68:0d:d2:
ca:13:6d:9d:2b:c9:b8:6c:23:97:49:47:47:93:6a:94:2f:3c:
0f:1b:ba:4b:fb:a0:b9:e4:65:b0:52:b0:fc:be:a0:f0:fd:b4:
a3:e0:0b:3c:34:ec:c7:c6:a0:0b:c1:66:68:66:a6:dd:fc:ed:
82:64:86:6f:8b:3a:a4:eb:c8:c3:3a:1c:44:7d:45:fe:8b:f5:
d7:fe:10:43:48:4f:f2:55:63:ed:3a:f4:32:48:ed:0b:e7:61:
65:f1:40:55:b1:10:a0:61:62:0b:71:3d:42:50:fa:f5:a1:a7:
a5:4e:2b:66:2a:f0:b4:87:b7:cb:f2:c7:ae:7a:64:a2:2b:e3:
86:5c:20:32:bc:fc:5a:42:26:fb:23:59:3f:ec:09:3d:33:e8:
30:03:a0:85:d8:88:52:70:9c:ad:02:a8:05:8d:64:04:c9:18:
f9:c6:f3:16:33:de:64:2a:4f:d3:47:42:f0:b0:cf:be:3d:66:
39:0e:2d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:01 2025 by rpki-client