Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/1-4LyRzdV51htq9SQywG6kqmLtHA.roa
File: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (raw, json)
Hash identifier: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=
Subject key identifier: FB:82:F2:47:37:55:E7:58:6D:AB:D4:90:CB:01:BA:92:A9:8B:B4:70
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019424B3C9A8923FC746F13BFACD39BEED62
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/1-4LyRzdV51htq9SQywG6kqmLtHA.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8685
IP address blocks: 91.208.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c9:a8:92:3f:c7:46:f1:3b:fa:cd:39:be:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb82f2473755e7586dabd490cb01ba92a98bb470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:50:a0:76:6c:2e:db:98:61:9e:2a:0b:bc:99:
7b:1e:b2:b8:4b:2f:67:2f:27:39:e2:25:a4:a5:61:
fb:89:46:63:49:4d:1a:83:2e:13:59:ff:4b:f7:07:
8d:e3:f6:90:7b:03:7e:fb:76:4e:6c:b7:09:57:5a:
4f:5c:81:6b:1b:74:d8:ce:60:41:af:5e:27:87:0e:
20:21:97:9e:86:fe:9b:a3:14:6f:94:c2:52:51:fe:
f6:c7:35:f7:cc:39:4f:b8:04:ef:2b:08:8f:bd:6f:
40:05:0e:22:f2:24:1d:93:76:9e:b7:cc:17:da:b6:
d8:3f:c1:72:d5:d3:13:61:02:bc:e4:d3:ed:50:a7:
04:b4:31:ca:28:f0:bc:a1:f3:51:db:d8:09:41:e6:
59:40:35:48:2c:a6:75:7c:ce:68:0e:00:d5:76:ac:
68:21:2a:ee:21:a4:c8:42:c9:67:b9:d7:db:65:79:
d2:55:dd:af:05:c8:01:d8:e1:d9:6a:11:d4:05:42:
61:6c:9a:3c:63:7b:1d:cd:11:e4:e6:2d:bf:60:90:
70:04:6f:a8:6f:77:1a:94:5c:15:7e:52:8c:40:e8:
a0:16:d6:71:86:e1:dc:41:d4:97:64:b9:49:15:25:
f7:52:7a:f8:3e:ad:d2:7e:80:bf:93:05:7a:f8:e9:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:F2:47:37:55:E7:58:6D:AB:D4:90:CB:01:BA:92:A9:8B:B4:70
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/1-4LyRzdV51htq9SQywG6kqmLtHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:23:e5:3a:09:91:1c:15:1c:07:c3:92:e7:52:63:de:86:6b:
95:95:db:2f:aa:d5:47:18:ec:6c:7f:cb:4e:92:5e:fa:98:82:
87:47:c4:9a:69:a5:79:ed:b5:b0:82:d4:3b:39:5c:c2:fa:7b:
19:16:48:27:e4:9d:db:9b:f8:3c:f8:80:3a:bc:f9:d2:75:5f:
5e:98:92:b4:0a:21:5f:96:74:11:f3:cb:2e:f5:e8:90:88:65:
b6:c3:8d:b1:7a:42:81:28:30:90:bc:d5:69:64:8b:58:73:5c:
82:28:d7:54:d9:2e:84:dd:ff:2f:7c:3f:ce:1e:61:11:80:2b:
70:80:1b:71:61:da:4a:64:a3:be:be:17:f5:3f:8a:32:79:b5:
85:e3:1f:4f:21:27:dd:01:f1:0c:1e:3c:01:57:43:98:43:a9:
93:89:41:61:c6:c9:86:c7:af:30:ae:c8:29:d3:69:fd:99:a4:
85:6f:4e:55:5e:e4:04:91:a9:84:b1:44:e3:7d:a4:a0:ed:96:
c6:e7:21:01:7d:4e:0d:0d:2d:7a:ed:47:2b:f0:2c:6d:0c:5e:
97:da:6a:f7:1f:8f:2f:4e:18:28:d5:ee:1f:69:d8:ba:b3:43:
a4:47:b7:54:ef:ca:f1:b5:a2:0a:a4:85:e6:c0:0d:0e:a7:8e:
f6:ad:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:54 2025 by rpki-client