Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa
File: c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa (raw, json)
Hash identifier: wpEquj9Ig8LsCQE7Y+MbSVtYeoDlqqJ8cepm+207hA8=
Subject key identifier: 73:B5:A8:79:67:E7:21:D3:C5:D6:09:19:EE:BF:74:A4:DE:7C:63:67
Certificate issuer: /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial: 019427B5CF93D03644E1AC84CD0868910400
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa
Signing time: Thu 02 Jan 2025 15:50:14 +0000
ROA not before: Thu 02 Jan 2025 15:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34024
IP address blocks: 91.199.235.0/24 maxlen: 24
193.26.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cf:93:d0:36:44:e1:ac:84:cd:08:68:91:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Validity
Not Before: Jan 2 15:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73b5a87967e721d3c5d60919eebf74a4de7c6367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:0e:84:3f:e2:27:97:b9:23:ba:ab:ed:9b:
41:3f:3e:ce:87:4a:2c:84:9c:c0:bb:3c:75:c1:68:
88:db:5d:d0:16:11:19:d8:cd:bb:8a:25:90:00:6a:
df:d3:32:2a:6b:7e:04:44:ac:04:ef:14:dc:8a:49:
1e:12:c3:86:66:01:88:90:5b:05:26:05:fa:36:1d:
7b:94:ef:85:a5:c5:2a:aa:97:0e:8c:b9:a6:28:a0:
c0:eb:70:fb:14:a4:10:ea:fa:c9:ca:c7:5b:1c:64:
04:8d:a1:bd:4f:c1:e4:14:83:63:6c:c7:c7:ed:1d:
53:1d:bb:f7:84:f8:9a:d1:f6:c8:20:03:d9:44:69:
23:59:64:df:1a:43:ea:56:69:1b:4b:12:6c:12:b7:
0f:3b:5d:fc:b3:a4:79:6b:5a:2e:b3:fc:41:45:bd:
23:20:4d:16:92:15:bd:f1:cf:fc:c1:5c:e9:81:59:
a3:cb:55:cf:5f:ba:17:de:e5:8a:df:6b:e2:f6:2f:
5d:88:18:7e:e0:07:2b:b8:c3:b5:41:8a:18:0b:6c:
2c:65:e8:12:3b:d0:44:2c:62:6c:d0:3b:f0:5f:08:
98:66:33:70:53:1a:76:c2:c0:05:8f:d8:ba:20:16:
2f:22:2b:01:eb:d1:9b:a5:1e:5d:2f:7e:40:3d:be:
38:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:A8:79:67:E7:21:D3:C5:D6:09:19:EE:BF:74:A4:DE:7C:63:67
X509v3 Authority Key Identifier:
keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/c7WoeWfnIdPF1gkZ7r90pN58Y2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.235.0/24
193.26.26.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b8:0f:6c:7b:54:5f:dd:0e:1e:0a:e4:85:56:f5:d3:8f:8e:
97:6a:e4:33:e0:b5:c2:be:db:79:25:b0:b4:d9:91:33:c2:27:
0e:b6:e3:28:6d:6d:e9:31:54:e9:80:c9:21:6a:e2:29:3e:8d:
c6:9f:d8:f1:b6:17:74:eb:f6:1e:cc:91:d1:59:e2:98:a1:8e:
a5:6b:c2:a4:00:b7:07:91:34:8c:f9:ab:39:d6:f9:37:f1:3c:
73:eb:eb:df:bb:f3:67:28:2c:cd:4d:d2:c8:01:30:2e:89:3a:
b6:8d:57:60:ac:82:53:2c:41:29:c9:69:11:02:32:74:2b:11:
74:21:e7:37:5a:c4:83:33:73:2c:c7:90:62:2a:2c:12:58:35:
47:39:11:73:32:da:67:61:c1:0d:2a:bb:8e:28:d4:29:93:91:
c2:e2:2d:c0:4e:ae:be:7e:4f:44:7e:06:1c:22:51:d4:35:5a:
31:3a:c8:29:dd:58:c4:1e:3a:67:25:ce:4d:cc:0e:5f:e8:dd:
1d:a3:c4:c6:f0:3f:d2:a6:d3:45:f7:a7:30:b2:0e:4f:3f:5f:
05:3b:ad:3a:5d:bf:52:8d:24:00:e5:fb:66:8b:7c:e6:03:59:
c6:2e:04:75:a6:d2:9e:2f:3a:8c:b8:34:05:7c:db:af:9d:7a:
3f:2f:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:35 2025 by rpki-client