Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/cT2eGd63Px5rG_L6GRT2XCwHH8E.roa
File: cT2eGd63Px5rG_L6GRT2XCwHH8E.roa (raw, json)
Hash identifier: +Vm6cesMvrKle1O+NFaMGbBUxTSdI75W5YWzhqJGopE=
Subject key identifier: 71:3D:9E:19:DE:B7:3F:1E:6B:1B:F2:FA:19:14:F6:5C:2C:07:1F:C1
Certificate issuer: /CN=a85ed55f144d71e673e63f4b7670c41344c09580
Certificate serial: 01954C2B351F9DC3ACCC3C5A154B18FD27C1
Authority key identifier: A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/cT2eGd63Px5rG_L6GRT2XCwHH8E.roa
Signing time: Fri 28 Feb 2025 10:47:34 +0000
ROA not before: Fri 28 Feb 2025 10:47:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199113
IP address blocks: 91.242.56.0/21 maxlen: 21
176.123.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:2b:35:1f:9d:c3:ac:cc:3c:5a:15:4b:18:fd:27:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85ed55f144d71e673e63f4b7670c41344c09580
Validity
Not Before: Feb 28 10:47:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=713d9e19deb73f1e6b1bf2fa1914f65c2c071fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:bc:57:2b:af:a0:0e:a7:dc:9e:06:93:5e:
32:95:1e:0a:ba:73:1e:f5:3a:3f:61:14:5b:07:a5:
49:ab:e3:aa:34:eb:7c:c7:56:9e:c4:bb:27:df:50:
33:ba:e0:d4:67:c1:e9:1c:b0:67:48:6f:25:22:29:
de:c4:06:cd:51:db:4b:16:1a:27:04:73:b0:c0:81:
59:8f:de:8f:a0:f2:5e:be:cb:16:c2:c3:af:05:ac:
bc:fb:43:a6:12:1d:b0:8d:5f:d4:98:25:07:2c:25:
6d:d7:58:db:51:16:b7:bd:94:d5:24:22:2c:a2:31:
1f:9f:0f:9e:5b:71:96:e1:cb:e1:3e:86:d5:11:56:
41:f5:c0:07:f0:13:ac:98:56:0f:ef:bf:31:ab:c9:
8e:19:1d:f3:2e:65:4f:ac:2a:e0:25:9d:d6:c7:d2:
87:ce:77:eb:75:36:2a:a5:5b:7f:72:b5:fd:86:29:
ca:92:f2:5f:18:05:20:92:c0:35:c9:70:ec:3a:bf:
c2:a4:b7:6d:2f:f3:50:bd:69:05:33:56:d6:a1:9b:
fb:4a:c8:59:38:fa:23:bc:35:91:f2:60:76:1c:80:
91:61:09:a2:b0:44:07:98:57:48:b3:43:8a:25:c2:
5e:d3:6c:b4:18:dd:1f:30:1f:b0:8e:91:e7:e4:35:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:9E:19:DE:B7:3F:1E:6B:1B:F2:FA:19:14:F6:5C:2C:07:1F:C1
X509v3 Authority Key Identifier:
keyid:A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/cT2eGd63Px5rG_L6GRT2XCwHH8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.56.0/21
176.123.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:9a:a7:a7:24:18:23:21:84:4f:6c:2c:31:e7:1e:e6:f8:93:
db:a7:88:16:31:4c:ff:a2:79:33:09:fc:25:01:60:c7:ae:7b:
40:a9:bb:fb:0d:3b:85:1e:3f:02:fb:a9:a2:d9:66:87:7b:ec:
80:c7:ab:34:e5:12:88:15:ef:25:81:2d:72:9b:f3:3b:22:94:
f7:2b:30:a4:e3:53:d9:05:97:06:c2:6a:96:ce:1a:34:41:e8:
76:a8:ac:8a:fd:3f:05:13:2b:53:bf:28:aa:aa:55:3f:dc:1a:
12:09:df:de:94:37:99:b3:9d:bd:c0:77:53:5b:58:40:cf:11:
a4:f1:8b:dc:fc:2d:97:0b:9b:e8:f8:de:75:ac:c7:9a:60:4d:
30:a8:f8:45:8e:76:6a:1b:15:c1:9f:4e:2a:38:c0:32:07:69:
55:d2:11:4f:6d:8d:cb:22:08:99:f8:2c:43:0d:ea:de:42:cf:
b6:bc:3f:73:41:bc:04:65:15:c3:11:3f:c9:21:f5:62:87:2b:
7a:42:09:c5:5c:4a:30:46:bc:4c:30:bf:64:00:7b:81:a6:0b:
fe:18:a3:10:4b:52:45:0a:d1:aa:21:b3:51:d3:44:d4:85:9e:
d5:cb:fc:04:0a:7a:a1:8f:75:d3:a3:ea:9b:9c:ef:3c:2d:9c:
53:71:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net