Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/EkI17AhjtH4o6y1KK4g_wzf3KNE.roa
File: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (raw, json)
Hash identifier: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=
Subject key identifier: 12:42:35:EC:08:63:B4:7E:28:EB:2D:4A:2B:88:3F:C3:37:F7:28:D1
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019565F4D8737901747BFDD359983C99AD12
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/EkI17AhjtH4o6y1KK4g_wzf3KNE.roa
Signing time: Wed 05 Mar 2025 10:58:19 +0000
ROA not before: Wed 05 Mar 2025 10:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31052
IP address blocks: 91.205.148.0/22 maxlen: 22
193.93.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:f4:d8:73:79:01:74:7b:fd:d3:59:98:3c:99:ad:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Mar 5 10:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=124235ec0863b47e28eb2d4a2b883fc337f728d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:e0:ed:21:b6:8c:de:9e:c8:f2:24:12:0f:
58:3b:17:fc:61:89:27:6a:a5:84:87:91:9b:76:44:
50:53:33:42:87:d6:0e:f4:06:bc:4e:52:61:f0:6d:
2e:c3:dd:90:7a:91:6d:00:52:bb:77:a7:2a:e2:d6:
85:80:ff:9e:03:fa:f1:62:51:fc:5e:60:9d:7e:d9:
48:06:9d:3d:3a:b7:a7:4d:08:b8:96:84:04:73:65:
f3:ec:32:c1:08:a8:79:30:8f:74:ff:e9:c9:9d:e6:
5b:51:73:7c:e8:42:ae:cc:bf:93:74:c8:ea:0c:33:
0a:5f:49:28:06:46:d3:26:e4:ad:9d:b6:e0:e0:1e:
9d:cc:58:38:99:bb:69:b5:7d:c8:93:dc:d9:84:9b:
7d:01:c8:40:1c:f9:b3:ce:41:96:a9:38:cb:e8:75:
71:99:8b:fe:b9:6f:70:51:5d:e3:3a:40:68:44:a0:
e8:cb:6b:a3:7b:8e:4d:53:28:bd:f6:50:53:a5:b8:
60:ff:45:9c:18:5f:02:41:2a:76:61:c2:5d:3b:07:
bc:c6:eb:0b:dc:7f:08:50:47:60:b1:bf:4b:16:d8:
ca:42:b4:56:a6:49:96:32:a9:22:e2:53:25:d6:6d:
c4:31:c5:50:75:4c:05:4b:10:ea:08:0a:1f:14:c9:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:42:35:EC:08:63:B4:7E:28:EB:2D:4A:2B:88:3F:C3:37:F7:28:D1
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/EkI17AhjtH4o6y1KK4g_wzf3KNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.148.0/22
193.93.20.0/22
Signature Algorithm: sha256WithRSAEncryption
08:27:0f:bf:65:ac:b8:bb:c1:d8:6d:ac:70:f4:cd:30:fd:98:
27:aa:4e:3b:f3:cc:26:6f:9d:cd:f5:fd:d6:62:aa:c5:fc:7c:
77:03:23:48:81:6c:e0:6a:b1:b8:ec:37:0b:e0:25:7b:b3:34:
48:dd:a0:ab:48:e3:05:a9:48:6b:d3:83:fe:a3:22:1b:19:93:
e9:2d:63:20:ee:ff:7b:7e:76:dd:de:ec:39:f6:2a:b6:c4:4a:
af:90:b6:84:19:46:6d:bb:6e:4f:61:de:00:14:47:bb:9f:38:
4e:a6:e0:c5:39:2b:a3:36:6d:d4:ad:57:20:f0:27:3e:a3:94:
79:b7:81:af:77:8e:9d:84:44:6b:af:ba:83:c8:49:28:eb:71:
a6:70:e1:31:89:6e:b5:e4:bf:a0:66:1b:29:23:f8:7d:23:aa:
d3:77:29:8e:d0:ad:45:73:36:a3:fd:2a:b5:19:34:47:3c:62:
07:f1:ce:2e:4d:79:b8:a3:4c:8a:a9:32:02:8d:d5:dd:b5:33:
4a:d2:a3:56:89:3d:88:38:70:d6:f6:90:a5:6c:88:13:2e:27:
54:cc:cf:40:87:71:35:39:14:70:b2:50:85:74:7e:31:af:a5:
6b:4c:21:59:b3:07:b5:85:03:88:cb:69:22:b1:74:49:bf:03:
15:fd:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net