Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa
File: fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa (raw, json)
Hash identifier: R/N1KJCx1ZG7TAbnbY1p8xT86HawFSAUgAukKuDa69o=
Subject key identifier: 7E:62:6B:A8:D8:B7:00:AE:F1:7F:EE:6B:CB:E6:51:D6:1B:C1:B5:04
Certificate issuer: /CN=d04e398f79049f6bbb8333810a8161c978962a26
Certificate serial: 019427B381DBAF1C60FD39CF067B9539F40B
Authority key identifier: D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa
Signing time: Thu 02 Jan 2025 15:47:43 +0000
ROA not before: Thu 02 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49616
IP address blocks: 91.212.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:81:db:af:1c:60:fd:39:cf:06:7b:95:39:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04e398f79049f6bbb8333810a8161c978962a26
Validity
Not Before: Jan 2 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e626ba8d8b700aef17fee6bcbe651d61bc1b504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:af:54:8b:70:bc:4d:0e:6a:a5:cd:a7:17:
ac:f1:6d:c1:3c:6b:a2:05:b7:53:03:b6:bd:ff:ea:
ed:0a:c8:c7:7d:d0:75:23:7d:25:46:a6:5b:da:09:
2e:31:a0:eb:b6:95:ea:77:e4:e1:b1:1e:75:80:fc:
c2:be:b8:d6:f0:2e:1d:ca:85:c5:2a:3d:7d:bc:88:
68:5e:7e:ba:6d:89:de:ee:8f:2c:f8:23:02:65:74:
58:ce:02:e5:84:cd:b1:ac:38:f7:50:c3:67:58:df:
5d:96:74:88:ad:fb:2e:76:43:6f:0c:31:50:0a:3e:
18:df:41:01:84:91:73:62:d5:a8:5e:d7:46:03:a0:
e0:87:dd:9c:cc:a1:04:ca:89:bf:64:5f:66:39:db:
d4:02:39:15:1b:80:06:56:15:f9:93:3d:d0:a4:4e:
9d:26:b9:ce:b5:8d:36:80:b5:e3:d5:ef:50:a2:9c:
ae:0f:63:e9:f1:db:00:b9:9a:1e:40:ff:c8:cb:0d:
ce:0c:c3:df:ba:7e:27:4f:f9:61:66:06:28:d8:37:
58:9b:9c:79:47:43:f6:ba:f0:01:14:d3:c0:5f:17:
8f:bd:af:52:ac:e8:5a:eb:c7:ce:ad:0a:59:ba:e3:
7e:b4:72:2c:1b:be:ec:cd:9f:04:7a:0b:4d:21:1b:
b7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:6B:A8:D8:B7:00:AE:F1:7F:EE:6B:CB:E6:51:D6:1B:C1:B5:04
X509v3 Authority Key Identifier:
keyid:D0:4E:39:8F:79:04:9F:6B:BB:83:33:81:0A:81:61:C9:78:96:2A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0E45j3kEn2u7gzOBCoFhyXiWKiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/fmJrqNi3AK7xf-5ry-ZR1hvBtQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1990b1-dd08-4691-ac6b-6ac4dd46d4f7/1/0E45j3kEn2u7gzOBCoFhyXiWKiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:31:3d:10:8f:48:db:21:55:a9:fe:d8:21:5f:0b:0f:2e:de:
37:b6:8a:ff:b8:c3:91:70:f8:c6:a6:f8:0a:1d:25:0b:ce:16:
f9:66:6f:bb:98:65:1c:ee:2c:31:f5:13:8b:bc:7e:8e:bf:eb:
23:2b:7a:c6:fe:38:f2:24:ba:6b:ae:7e:24:47:5d:6b:be:57:
d6:2c:47:d7:4e:de:ef:77:ea:a9:60:f3:4c:05:ac:c3:a8:c5:
46:ec:a7:95:a6:c0:c8:03:fa:e1:96:87:76:89:37:2d:6b:ca:
a1:6c:50:59:2f:ef:95:ca:55:35:b4:43:93:3e:a2:b0:e5:d0:
06:c3:2f:50:23:b0:fe:b3:1b:68:e7:0d:e4:73:b5:d6:45:b8:
9a:81:25:a1:e7:a6:28:db:6d:ff:af:b0:10:d3:3f:bd:1e:bc:
be:83:6e:3f:83:00:80:94:c1:9e:4d:62:c3:28:61:33:a5:7f:
de:c0:5d:fb:5b:7d:39:97:ad:b7:d3:02:7c:67:2e:92:c5:2a:
00:f4:42:01:c9:f1:2c:3b:ae:f1:f5:67:c6:2b:77:ff:c6:1d:
10:31:5e:17:f3:8e:3f:36:c2:a1:c3:e6:4a:56:48:82:25:aa:
06:c7:fd:67:55:09:48:7c:73:58:ef:b6:03:d8:b3:1d:1c:ae:
8d:ef:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:01 2025 by rpki-client