Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa
File: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (raw, json)
Hash identifier: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=
Subject key identifier: E9:9C:7C:B6:F1:56:FA:8B:42:48:8C:7E:D1:75:F0:74:07:16:02:F6
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 01941F8C29BB87B5BD0D507DC50BE68EBB1B
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31633
IP address blocks: 91.192.128.0/22 maxlen: 22
91.192.128.0/24 maxlen: 24
91.192.129.0/24 maxlen: 24
91.192.130.0/24 maxlen: 24
91.192.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:bb:87:b5:bd:0d:50:7d:c5:0b:e6:8e:bb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99c7cb6f156fa8b42488c7ed175f074071602f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:b3:8b:bd:e4:de:9d:18:2b:bf:78:c1:24:
d2:fc:68:73:7b:b6:b2:5f:cc:84:36:24:24:60:a6:
a7:33:a9:df:f8:fc:00:ef:e3:08:04:ca:af:69:e3:
e0:a5:5f:07:65:cd:b1:9f:4d:9d:5c:73:81:41:ce:
d2:cc:20:2a:09:02:d4:23:8c:f2:dd:ee:e5:88:f5:
66:15:42:66:a1:f8:43:e7:e4:ed:e8:09:a8:92:77:
9c:a6:c3:57:93:79:3a:6c:65:85:ef:c9:7d:8e:38:
d5:bd:7e:63:b3:9b:68:e6:e6:15:fe:a8:f4:e8:3a:
8a:eb:b3:44:2f:be:b8:c9:50:c5:c6:fa:c4:96:30:
71:07:da:b5:50:f1:01:8e:8b:0d:f2:48:ef:56:42:
1f:8a:f6:49:1e:56:30:2f:49:6a:70:76:2b:ff:0c:
61:80:20:02:cf:30:e0:42:9c:e7:cc:fa:e8:bc:f3:
df:2d:3c:52:7f:f2:ef:c4:cd:dd:53:bc:70:57:f0:
40:c0:f6:77:bb:d9:0a:69:33:ee:d4:f4:c9:1a:5d:
4e:0b:bb:d0:cf:14:d4:d1:01:e8:c6:71:44:e0:b6:
07:92:c1:d2:c9:22:c2:a3:ef:7e:f1:eb:ad:07:a2:
01:fc:2b:df:7b:b6:16:64:b6:b0:da:6d:32:c4:27:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9C:7C:B6:F1:56:FA:8B:42:48:8C:7E:D1:75:F0:74:07:16:02:F6
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:3a:af:c9:76:0f:8a:05:75:35:a6:03:05:06:f2:82:89:95:
56:4e:70:7f:e2:00:cd:34:54:57:17:e1:a2:6a:85:06:de:c6:
03:90:3a:e2:29:87:3f:1f:09:9b:8f:ce:97:ec:63:f5:78:f4:
7b:75:d1:4a:42:cf:2a:63:aa:a6:67:70:f1:b3:00:d3:86:75:
f2:11:c6:c2:65:11:77:ad:6c:ee:31:2d:85:b0:1d:0d:66:ee:
a2:a6:c4:8d:25:68:de:f2:50:cc:5b:dc:dc:28:70:63:b3:ce:
d1:8a:9b:c7:68:17:31:8b:84:ce:3f:87:82:14:65:59:89:c2:
01:73:c4:e0:74:d8:e8:75:0d:75:38:6b:c1:44:2c:25:8e:2f:
b8:25:9a:d9:45:f9:92:ab:b8:f4:f8:65:14:39:15:cc:a4:7c:
84:54:8d:a6:6d:ec:54:99:ae:f9:8b:b3:dc:5e:4d:7f:e4:2c:
65:4d:a0:55:a5:d6:b1:40:cb:47:69:87:3b:91:aa:7d:f4:dd:
37:d2:2e:20:d0:68:38:04:c8:5b:fc:1b:6b:34:22:00:e0:39:
79:e4:ad:43:f0:ae:eb:83:2a:8c:f4:85:38:17:ed:cb:88:80:
54:3c:ab:ef:aa:e0:96:e2:8d:e6:88:bf:38:58:06:34:c7:da:
67:82:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net