Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/AJuM-CDQEIqDMwmQYhMsOTXtLM0.roa
File: AJuM-CDQEIqDMwmQYhMsOTXtLM0.roa (raw, json)
Hash identifier: argwradPbIz3URQFeSag9W3h8m0NACvx3UxzjCqDBeo=
Subject key identifier: 00:9B:8C:F8:20:D0:10:8A:83:33:09:90:62:13:2C:39:35:ED:2C:CD
Certificate issuer: /CN=168a919a4a463f3ca2bba5442550fc247da90cae
Certificate serial: 019624F506F527FB31090EC11DDA88CB26DE
Authority key identifier: 16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/AJuM-CDQEIqDMwmQYhMsOTXtLM0.roa
Signing time: Fri 11 Apr 2025 13:05:59 +0000
ROA not before: Fri 11 Apr 2025 13:05:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196776
IP address blocks: 91.215.236.0/23 maxlen: 24
91.229.250.0/23 maxlen: 24
195.88.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:f5:06:f5:27:fb:31:09:0e:c1:1d:da:88:cb:26:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168a919a4a463f3ca2bba5442550fc247da90cae
Validity
Not Before: Apr 11 13:05:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009b8cf820d0108a8333099062132c3935ed2ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:3b:10:92:7c:6f:04:28:02:99:76:aa:19:
f3:4b:e0:70:06:38:14:5f:e6:7a:7a:21:30:ab:02:
a6:00:81:37:a2:37:5d:7a:81:f0:54:06:db:9f:e9:
e8:72:2d:01:2d:d2:fc:7f:cc:09:2c:13:c9:36:67:
25:22:6e:52:56:21:16:90:8f:16:13:43:78:26:39:
1e:d0:44:91:1d:cf:cf:b0:60:91:27:7c:77:bc:9e:
80:a0:aa:a5:93:db:e8:01:1d:15:90:3f:49:c8:d9:
83:00:37:bf:5f:4c:7a:e8:5f:c5:a6:d9:8c:00:9e:
72:45:a8:b8:d4:66:21:09:1f:40:24:cb:51:a8:33:
9e:28:c8:98:45:ef:54:7f:e2:e4:07:83:71:09:69:
9f:be:6f:94:be:13:cb:30:5b:fb:e3:d3:54:3e:23:
95:f6:22:4a:6f:0c:36:09:7e:34:66:c0:83:1f:3e:
14:38:75:ad:a2:5b:1a:01:59:05:ae:41:8c:0b:2f:
77:9c:4d:c5:22:20:da:fa:45:73:c4:53:c4:58:5f:
b9:4d:cb:88:db:e5:d6:ef:a6:5a:bb:9c:33:14:08:
30:43:1b:11:25:00:47:41:23:a6:63:62:d3:07:25:
75:e4:5a:d1:4e:e1:ae:2d:6f:e9:7d:78:89:12:68:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:8C:F8:20:D0:10:8A:83:33:09:90:62:13:2C:39:35:ED:2C:CD
X509v3 Authority Key Identifier:
keyid:16:8A:91:9A:4A:46:3F:3C:A2:BB:A5:44:25:50:FC:24:7D:A9:0C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoqRmkpGPzyiu6VEJVD8JH2pDK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/AJuM-CDQEIqDMwmQYhMsOTXtLM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/fc0bd6-9868-4b49-9888-dcd6a39f80df/1/FoqRmkpGPzyiu6VEJVD8JH2pDK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.236.0/23
91.229.250.0/23
195.88.90.0/23
Signature Algorithm: sha256WithRSAEncryption
02:f1:7d:1e:9f:27:b3:57:54:f0:41:1b:30:51:d2:b2:ab:da:
18:bc:35:4d:3f:a4:fe:bb:ba:1a:40:e9:2c:71:df:29:52:4e:
71:ae:d9:80:f7:cf:d1:62:11:74:f3:9f:2d:d4:24:bc:66:dd:
c2:09:cd:cb:d8:70:a5:c6:24:45:6d:1a:70:ea:64:25:27:f1:
f3:07:3d:4f:a9:82:4f:ac:b8:db:58:a2:29:d7:a8:04:3f:91:
7e:ba:66:bd:3b:58:9b:f1:47:bf:d5:0c:39:cd:43:21:bc:65:
92:24:1a:0f:21:b6:e9:fe:35:0b:8c:f9:f4:5f:1f:b3:94:6b:
4e:2e:c5:2f:54:f4:e0:3e:be:23:1b:69:a5:63:35:cd:5b:73:
ff:66:e0:fb:1d:54:be:e4:80:10:7b:57:85:9c:63:3c:91:31:
aa:75:85:82:86:f5:e7:45:b9:45:41:cf:0f:6b:41:fe:94:dc:
54:ee:39:69:fd:bb:a9:09:d5:ae:2c:fc:f9:ee:07:fe:bb:a5:
ad:9d:24:25:73:24:7f:30:ed:29:97:8a:61:82:b8:4c:f2:8a:
ce:a8:6f:33:23:10:7c:2e:b9:35:d6:b0:3b:50:7c:cf:09:6f:
b0:f5:55:e0:60:31:d3:27:0e:77:05:e8:b2:c7:66:68:dc:6f:
24:c1:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:04 2025 by rpki-client on console.sobornost.net