Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/DJMvMcbCqWs8S1k8F1cr0oOlAV4.roa
File: DJMvMcbCqWs8S1k8F1cr0oOlAV4.roa (raw, json)
Hash identifier: 2/XmIDp0C9u6r+CcJVDowCbwT1OywEIeqWzkNLLwQok=
Subject key identifier: 0C:93:2F:31:C6:C2:A9:6B:3C:4B:59:3C:17:57:2B:D2:83:A5:01:5E
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 019424457147C1FFD417BED57437DC95E239
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/DJMvMcbCqWs8S1k8F1cr0oOlAV4.roa
Signing time: Wed 01 Jan 2025 23:48:38 +0000
ROA not before: Wed 01 Jan 2025 23:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47973
IP address blocks: 91.103.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:71:47:c1:ff:d4:17:be:d5:74:37:dc:95:e2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 1 23:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c932f31c6c2a96b3c4b593c17572bd283a5015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:74:51:ba:d4:21:56:ee:ad:2c:1f:82:90:
c9:ea:d6:40:3f:08:df:05:54:b4:91:48:4f:1a:f9:
82:24:9d:c2:1e:ab:0a:05:69:d0:8d:30:d3:4c:77:
51:d8:83:bb:21:fa:7e:08:4a:aa:e6:f6:14:f2:b2:
35:44:ce:1c:1d:61:50:22:c9:b5:38:18:c7:86:e5:
ad:42:35:15:a7:21:7e:7a:a0:25:88:d7:d6:28:6e:
9a:0b:3e:86:3e:90:39:33:ab:29:7c:b3:cf:1d:09:
63:bd:04:87:97:47:27:8b:63:5a:50:0f:e2:f3:ba:
c4:e4:35:82:ee:2f:4f:8f:bc:63:38:6b:10:3a:c2:
50:da:36:84:22:8d:62:f9:dc:03:4d:c0:9a:08:2d:
f8:06:a7:8e:61:24:d8:75:4a:19:4a:24:86:4b:a4:
b7:e7:be:5d:4b:e0:de:fa:5d:8d:f4:a0:81:d1:6c:
14:68:77:99:30:a3:88:3a:ac:85:7b:de:75:63:14:
b6:e4:b1:0f:2d:4b:0f:ca:a9:53:37:3d:93:24:2f:
f9:f8:59:db:ad:e8:64:c7:44:29:a1:92:d1:d1:07:
a6:7d:50:b2:6a:5a:59:fc:66:6e:3b:1c:9d:70:ef:
ab:09:74:10:df:78:1c:e3:53:af:3c:78:2c:b8:be:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:93:2F:31:C6:C2:A9:6B:3C:4B:59:3C:17:57:2B:D2:83:A5:01:5E
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/DJMvMcbCqWs8S1k8F1cr0oOlAV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.83.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:88:18:3f:c8:49:e9:79:50:5c:e0:5e:2e:69:62:20:63:85:
a6:c9:a4:fb:4c:18:c1:51:df:cf:e3:7e:ca:3c:68:72:2a:9b:
4e:45:cd:d5:7f:0e:a0:0e:6c:6c:25:65:82:1f:79:d2:83:07:
be:1b:23:7f:7b:68:e0:07:37:94:c1:92:e2:81:07:f1:b1:86:
93:d7:56:a3:8f:c4:be:09:cb:49:f0:27:8a:e3:6a:f3:89:ce:
90:3b:2a:cc:32:3f:c6:42:32:61:36:57:6d:ba:28:7a:04:00:
11:ef:45:fc:66:96:cc:aa:75:c8:11:59:b3:3a:8e:d9:05:a4:
2a:b9:9c:cf:d8:f4:fc:85:6a:80:c7:c3:cb:51:c8:71:8f:fc:
4b:70:ae:c0:80:95:f5:58:7f:2d:c6:6b:10:16:13:3a:57:4c:
ec:95:b8:cb:59:cc:94:6f:fb:d6:85:ec:07:4d:cf:ce:3d:33:
fe:06:7a:74:43:15:be:aa:4d:5f:63:50:dc:d3:77:3b:4a:99:
53:de:a9:40:98:7c:ac:cc:19:e6:2b:cd:8e:48:8e:7c:35:d0:
15:3a:29:69:a9:cc:35:53:d5:3f:f0:39:7f:d4:e1:4f:af:21:
56:70:2f:46:99:77:aa:57:4b:2c:b2:09:a8:14:ab:ac:32:b9:
ca:fe:52:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:54:10 2025 by rpki-client