Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/02fZd277xqKcuTMYmhFfbwx9HwA.roa
File: 02fZd277xqKcuTMYmhFfbwx9HwA.roa (raw, json)
Hash identifier: bemKy7xu5/Ii5zazW11+IHavu8JMVH9QIzpKn7l6Pf4=
Subject key identifier: D3:67:D9:77:6E:FB:C6:A2:9C:B9:33:18:9A:11:5F:6F:0C:7D:1F:00
Certificate issuer: /CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Certificate serial: 019425FD61153CE69007F277B95771E2F328
Authority key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/02fZd277xqKcuTMYmhFfbwx9HwA.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49282
IP address blocks: 91.194.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:61:15:3c:e6:90:07:f2:77:b9:57:71:e2:f3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d367d9776efbc6a29cb933189a115f6f0c7d1f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6a:78:d2:f9:3f:31:64:65:ed:3e:f0:28:ac:
87:e1:b3:08:cc:e1:76:2d:39:ea:e7:d9:07:da:f1:
ae:40:e9:14:71:3e:1d:44:26:e5:ae:53:fb:e6:62:
79:d7:0f:4a:0e:97:53:ad:93:e2:1d:9b:cd:03:b0:
47:0b:2e:6a:47:13:e0:7b:8b:cb:a4:07:9d:9c:a5:
d8:d1:0d:9a:75:7c:e6:51:16:48:1c:80:21:32:d2:
28:54:f1:04:fc:fa:7c:bd:9e:e6:7a:a0:a0:5c:db:
c7:0c:ae:5e:c1:e0:ac:2f:e3:29:c2:2d:ba:1c:89:
fc:08:6c:7d:47:b0:60:47:c2:2f:3e:ac:a9:1a:a3:
fa:51:4d:1a:6f:dd:ef:4b:20:08:03:39:54:b4:73:
86:96:2b:75:52:67:f2:81:c2:87:33:2f:54:86:64:
e8:f3:8f:e1:2a:ff:c3:0b:14:e1:f7:a0:ff:b3:db:
a8:7b:42:bf:91:f9:31:b3:a6:51:aa:8a:9e:4d:3b:
a9:8d:03:bb:83:79:be:b8:70:1e:23:3f:e0:89:53:
69:7c:e5:a2:69:2e:6b:73:0c:83:1e:9d:79:65:e9:
d2:91:e7:b8:67:bb:60:96:93:0c:65:d3:8a:8d:0d:
b8:8a:7c:9d:30:29:5b:e6:e7:f5:22:90:fa:77:77:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:D9:77:6E:FB:C6:A2:9C:B9:33:18:9A:11:5F:6F:0C:7D:1F:00
X509v3 Authority Key Identifier:
keyid:50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/02fZd277xqKcuTMYmhFfbwx9HwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:86:d5:7b:c9:a8:45:48:f6:7e:27:2a:fe:f9:ca:95:65:93:
5f:2d:aa:6d:1e:30:3a:91:d6:dc:4f:2d:10:eb:95:43:b2:95:
95:a7:72:55:be:96:f0:59:4d:85:3c:b4:10:60:f9:37:86:dd:
8b:a4:cf:48:fc:cd:89:76:39:6e:e2:b7:be:90:d1:75:b5:89:
a0:af:fb:db:2e:48:48:cd:2d:36:fd:52:a5:13:9b:1c:ac:d3:
90:c4:60:de:28:eb:ca:02:48:43:92:3a:3c:68:bd:c7:4d:07:
35:2c:86:31:8f:a4:c2:f6:c6:43:23:8b:54:75:06:0d:2f:22:
82:b8:d7:c7:74:07:91:f7:42:de:11:1c:94:46:b2:52:33:f3:
ee:50:6a:45:0d:36:df:d1:7e:fc:27:0d:ad:98:d7:3d:ae:bb:
ce:76:a2:84:5b:6b:a2:8b:8e:47:ee:99:49:08:7a:f3:e2:9d:
ad:3b:b9:20:a5:b8:5f:79:31:0b:b6:d3:97:13:dd:6d:a1:eb:
ab:f8:36:e2:e2:c8:a3:07:62:aa:6d:82:0a:f1:d4:d4:cf:e6:
71:86:de:e7:2e:66:e2:e4:be:70:c8:bd:39:3d:b5:ec:41:27:
32:ae:a9:cf:af:35:4e:72:a2:20:46:97:c6:05:4e:e0:6d:61:
6b:80:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net