Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa
File: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (raw, json)
Hash identifier: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=
Subject key identifier: 37:3D:14:D4:C4:BA:56:9E:84:36:22:BB:42:0C:3F:36:D9:D6:D1:9A
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 01961A2C493F1C31399A4FACDF1E40267382
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa
Signing time: Wed 09 Apr 2025 10:50:32 +0000
ROA not before: Wed 09 Apr 2025 10:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34121
IP address blocks: 91.201.184.0/22 maxlen: 22
2001:678:d8c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:2c:49:3f:1c:31:39:9a:4f:ac:df:1e:40:26:73:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Apr 9 10:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=373d14d4c4ba569e843622bb420c3f36d9d6d19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:c9:69:fd:5f:ee:ce:c1:d9:15:94:c4:72:
e9:c7:ef:37:71:14:b9:76:e2:6a:d7:b5:0c:cd:0e:
ac:8c:c5:0d:59:59:4a:ed:45:49:54:05:eb:df:0b:
5d:c9:b0:4f:c9:cb:ff:1d:fe:71:f7:fb:93:db:08:
2c:d4:2f:69:94:0e:ca:7c:8c:8a:39:b3:58:40:40:
83:90:e3:2c:90:b4:d7:9e:1d:fa:13:e0:93:d1:9d:
77:e5:1a:d2:41:51:65:83:81:0e:7f:35:76:38:32:
da:ca:13:08:fd:7a:ba:bb:7b:a5:ec:22:ca:58:04:
5c:80:70:1d:fd:28:9b:8a:dd:cd:c7:c8:b0:45:6b:
b6:a6:5e:a6:96:cd:f7:85:ba:0a:0d:f1:57:cd:26:
15:a3:ee:af:a1:b8:f5:21:c5:49:91:ac:80:3d:25:
b5:5a:6f:58:2e:17:70:d6:c9:65:17:04:19:45:32:
c3:0f:a7:a8:d9:81:43:70:d4:37:9b:a6:be:ad:84:
c8:34:9b:24:8f:21:17:2c:b0:5d:78:84:13:9b:bd:
0e:b3:a8:5a:f5:eb:63:1f:18:80:dd:0f:2a:c1:d4:
dc:6f:58:08:3c:8a:51:13:cd:5d:f2:42:d1:c7:70:
d6:60:79:13:81:ce:4b:ef:c6:9b:4d:5b:00:c0:f4:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:14:D4:C4:BA:56:9E:84:36:22:BB:42:0C:3F:36:D9:D6:D1:9A
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.184.0/22
IPv6:
2001:678:d8c::/48
Signature Algorithm: sha256WithRSAEncryption
14:6e:dd:45:cf:c7:92:ff:58:85:b3:b1:7d:3f:b9:61:5e:22:
55:e1:c0:c5:10:fb:5b:af:46:48:3e:86:7d:29:d2:76:7d:a5:
fe:d2:21:7c:50:09:07:0a:c2:d7:d0:d5:d5:f9:59:94:16:8d:
83:1c:a2:ea:d2:69:50:55:ad:7d:a2:fd:bd:57:16:d9:98:ac:
a2:3f:32:e1:eb:f9:58:a4:f2:8a:b5:3a:6d:1f:1f:06:63:cb:
64:75:00:17:7f:23:eb:5b:de:cf:24:2d:2e:59:c3:41:3f:23:
a1:fd:90:a5:21:07:7a:86:55:11:17:67:93:e8:cf:7a:54:f7:
71:cf:3f:61:00:ca:4a:1d:cd:96:e7:79:65:87:a4:d6:d3:c3:
54:24:dc:bd:ad:2d:d2:bf:58:30:16:1a:59:e6:e1:5b:9a:0a:
0e:0a:c5:49:cc:a5:75:cb:d5:32:59:db:49:72:e4:75:e6:6e:
dc:06:5e:28:ec:1a:df:56:7a:ff:c5:7e:84:f5:b3:19:bf:be:
1e:d0:71:30:4c:c0:c7:4f:07:1a:3e:cf:7b:90:c9:2a:33:a4:
29:6c:1d:7d:e9:9f:a4:f6:23:0a:86:17:b3:4f:63:67:b3:08:
a0:e2:59:8e:56:81:ad:d2:34:b4:5c:16:c1:f0:ac:c3:7d:22:
0c:18:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net