Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/1W5smHKXook3Cttl9rBFCphz4iU.roa
File: 1W5smHKXook3Cttl9rBFCphz4iU.roa (raw, json)
Hash identifier: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=
Subject key identifier: D5:6E:6C:98:72:97:A2:89:37:0A:DB:65:F6:B0:45:0A:98:73:E2:25
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 01942369F6D5A29CE8D8D7E4FA0BE02925F3
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/1W5smHKXook3Cttl9rBFCphz4iU.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58125
IP address blocks: 91.239.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f6:d5:a2:9c:e8:d8:d7:e4:fa:0b:e0:29:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d56e6c987297a289370adb65f6b0450a9873e225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:65:a4:88:aa:e8:b6:81:80:cd:9c:b0:63:
63:a8:a9:22:4b:58:d2:c6:fc:62:85:47:15:16:b5:
27:10:af:91:07:81:16:d8:31:2c:f5:73:44:3f:cc:
bb:eb:5a:0d:dc:76:04:26:61:d2:93:82:47:da:5b:
9c:5f:53:18:cb:37:a5:36:09:d3:fc:4f:0a:ec:f7:
5d:03:c4:cc:c3:74:86:03:52:6d:fc:41:4f:25:20:
db:28:45:91:7b:28:25:19:58:df:41:56:59:58:49:
96:76:4f:30:49:ea:2f:84:83:95:30:fe:48:eb:92:
f7:db:ef:9e:eb:f3:03:1a:cb:35:6a:01:a5:0b:e6:
aa:a8:3b:46:78:ba:6a:58:ea:88:64:f9:0d:76:ad:
42:3e:1d:c6:ab:4e:4b:5d:6b:27:2d:81:64:38:38:
1e:64:c9:0e:4d:1f:a0:c9:1f:75:67:6c:67:78:32:
60:75:f0:2b:41:44:26:48:1d:0a:4b:4d:7e:bd:88:
95:ba:29:64:e8:7e:6c:79:98:ff:5b:0c:3c:e6:5a:
83:42:eb:1c:af:56:c0:98:d4:90:d8:6a:b2:ce:0e:
79:eb:da:b4:94:ba:23:3b:1e:11:82:f7:87:58:af:
e2:4b:10:f9:26:a4:18:9b:22:2a:ba:03:b5:9a:8f:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6E:6C:98:72:97:A2:89:37:0A:DB:65:F6:B0:45:0A:98:73:E2:25
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/1W5smHKXook3Cttl9rBFCphz4iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:57:c8:01:14:a6:3d:50:d9:96:14:ba:af:41:b2:03:c2:60:
c6:1d:b5:82:08:65:7c:23:6b:23:a6:42:13:67:4e:80:c4:3a:
90:26:d4:04:34:3f:79:ad:ef:c7:6b:f5:20:62:8d:c5:e6:9e:
df:44:69:65:f7:d5:d5:41:df:c5:02:07:4f:d7:04:67:98:a1:
56:b5:18:c6:ae:a7:4c:94:da:df:c2:fa:d3:45:98:29:98:54:
14:a7:c3:73:73:8b:fa:92:9a:d6:ae:06:4e:6f:9c:08:db:4b:
ad:23:af:c2:c9:7f:8f:6f:2a:31:ee:f7:47:c6:2b:36:b7:f8:
30:7d:e3:3a:5c:3c:39:9d:28:78:61:63:a4:31:93:a1:df:c4:
71:e0:fd:cb:2d:6e:13:ad:44:39:29:cb:5f:a5:d1:c5:df:82:
90:77:c0:5a:55:50:66:02:98:96:95:6f:63:62:e0:d6:2a:37:
23:dd:ef:54:1f:3c:95:fe:7a:3f:7d:f4:d7:01:36:77:f3:16:
13:40:9d:cd:d7:bb:8f:20:93:c0:91:d8:14:3e:3d:f1:83:46:
2c:ad:a1:dc:bd:b4:dc:c3:b0:b0:6f:35:99:43:d8:a3:d2:40:
7e:30:aa:8b:cd:69:dc:60:3b:be:7c:4d:bd:5f:df:50:2b:4e:
2e:dc:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net