Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3G8aoha_rglYEwuzHMyhLleU1PI.roa
File: 3G8aoha_rglYEwuzHMyhLleU1PI.roa (raw, json)
Hash identifier: MWonZJy2YRTjYg77BP8oNIs7yRAlyJV8GJTaMsd91E4=
Subject key identifier: DC:6F:1A:A2:16:BF:AE:09:58:13:0B:B3:1C:CC:A1:2E:57:94:D4:F2
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 0195A9237BA01FF597698A36B139EDB09185
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3G8aoha_rglYEwuzHMyhLleU1PI.roa
Signing time: Tue 18 Mar 2025 12:03:49 +0000
ROA not before: Tue 18 Mar 2025 12:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60908
IP address blocks: 91.135.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:23:7b:a0:1f:f5:97:69:8a:36:b1:39:ed:b0:91:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Mar 18 12:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6f1aa216bfae0958130bb31ccca12e5794d4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:1b:36:95:f4:fa:f4:09:d2:ef:c3:e8:2f:
bd:99:0b:59:06:cb:c0:16:48:09:92:cb:81:ea:dc:
a9:13:53:15:3b:6c:45:cf:f4:fa:1a:f6:09:b0:e0:
85:b6:7b:a3:43:30:b6:95:d1:58:75:21:24:1e:21:
28:81:4a:ba:b3:5e:ff:3a:db:4b:fe:b2:ac:28:82:
c8:fc:19:58:29:24:d3:72:79:f2:ef:ac:b7:21:e9:
b9:a1:1e:44:19:99:ab:4b:e4:74:82:1c:aa:75:1a:
6e:3b:b0:1c:dd:1c:fc:fd:03:0c:bf:68:ce:49:dd:
b5:5d:d5:ea:11:86:3c:58:42:bb:52:4c:17:99:d2:
f1:39:51:88:39:6d:9f:75:e0:52:45:51:46:0b:da:
c9:55:9d:98:bb:c6:4e:ab:72:c3:20:1e:ab:83:cf:
a3:6c:27:40:74:ce:0a:b4:60:77:3f:86:50:df:f7:
3c:3c:e5:76:a0:31:0d:69:35:94:c2:66:63:13:4a:
95:89:b0:76:08:a7:c8:70:57:35:0d:4c:14:32:d3:
49:e6:4a:e3:8c:26:26:c4:b6:82:d1:99:5b:b3:a0:
3c:20:03:83:75:cb:54:5e:ac:b9:a4:47:42:1b:75:
18:35:cb:ba:48:ab:74:5a:9b:fc:44:d0:0d:92:df:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:1A:A2:16:BF:AE:09:58:13:0B:B3:1C:CC:A1:2E:57:94:D4:F2
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/3G8aoha_rglYEwuzHMyhLleU1PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.59.0/24
Signature Algorithm: sha256WithRSAEncryption
67:78:09:b6:d6:62:75:27:94:5c:a9:8d:d0:ef:2a:a9:9f:e4:
1f:53:c5:b7:7a:4f:2b:72:5a:45:3c:67:ec:34:4b:02:fe:8e:
be:74:be:8a:36:92:77:33:0f:c3:e0:98:96:b2:5a:00:3f:95:
b9:f2:1d:92:6c:fe:1d:e6:50:81:04:9f:6b:ee:65:88:e9:c5:
3d:65:73:ef:3f:50:87:f4:68:4f:90:3e:14:62:35:cb:95:ed:
59:98:39:df:10:20:f0:f5:fa:72:3b:cf:6e:81:47:6c:69:d2:
fe:b6:c0:c0:c2:51:1e:d7:4e:b0:24:f4:e1:98:ec:91:16:eb:
55:f5:f1:00:7b:2b:6e:14:ca:52:21:87:d3:b2:bf:59:72:77:
c3:af:b5:33:47:68:f9:fe:ac:ea:2c:08:ca:0f:33:fa:ed:a3:
a3:b3:d4:9e:c9:5c:d5:2b:e9:90:5d:ab:34:32:78:2b:18:56:
b1:9b:7f:65:28:4f:19:9c:e8:27:66:90:be:63:f2:35:80:d6:
52:38:d2:20:ac:65:07:79:03:69:8d:4b:a0:4c:49:f4:f5:7b:
8c:83:e9:95:59:52:81:2f:7e:45:9d:9e:e3:bf:b5:55:d0:16:
1e:e7:d6:e5:23:84:a1:30:f3:52:2d:9b:75:73:35:5b:5f:d8:
eb:5a:9e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 17:55:09 2025 by rpki-client on console.sobornost.net