Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/9-3CRoQW_QjusaOMGpyHscSTGa0.roa
File: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (raw, json)
Hash identifier: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=
Subject key identifier: F7:ED:C2:46:84:16:FD:08:EE:B1:A3:8C:1A:9C:87:B1:C4:93:19:AD
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 019420D5A47CBDCEAF944CB0ACEE865707A6
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/9-3CRoQW_QjusaOMGpyHscSTGa0.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198208
IP address blocks: 91.109.208.0/21 maxlen: 24
134.19.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a4:7c:bd:ce:af:94:4c:b0:ac:ee:86:57:07:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7edc2468416fd08eeb1a38c1a9c87b1c49319ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:a5:ac:dc:15:39:35:14:44:84:f9:45:88:
ec:14:1e:6f:f9:b4:11:eb:9d:87:47:a7:5d:cc:dc:
db:30:da:8f:1b:4e:28:c5:56:a7:f7:86:e9:29:f5:
7f:04:06:9e:f2:2e:86:9c:ac:8f:9d:ee:04:58:d6:
72:61:4e:60:63:c5:4e:e7:f8:78:af:5c:bc:ba:98:
62:6a:9e:51:f4:78:d5:ea:74:4b:f0:83:58:f5:38:
c4:cd:0b:b6:57:73:73:93:b7:11:c3:7d:78:f7:3d:
18:ef:4e:42:b3:19:fa:45:b9:a7:84:b8:fc:d1:fa:
9f:f7:22:85:44:99:58:a0:36:38:b9:b0:0d:8a:1a:
72:47:0b:ad:80:ee:7f:52:3e:70:31:19:83:e3:6e:
fb:ab:0d:7a:8c:f8:86:8b:b1:2f:f3:28:86:53:a9:
f9:bf:0b:14:1e:a4:d0:17:d1:3f:52:ee:c2:f5:9f:
97:4a:54:f8:7a:74:b5:d4:3a:0a:56:da:bb:cb:b2:
57:60:37:87:c2:90:d6:3c:d5:48:d8:64:65:18:9c:
a4:64:89:85:3f:e9:5a:4a:10:1b:c5:35:f8:ab:df:
ee:51:a3:f0:73:d0:86:92:7a:bc:90:f4:20:2e:6b:
b2:75:5f:8f:8a:59:dd:d5:5a:b6:03:e2:c7:4f:8d:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:ED:C2:46:84:16:FD:08:EE:B1:A3:8C:1A:9C:87:B1:C4:93:19:AD
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/9-3CRoQW_QjusaOMGpyHscSTGa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.208.0/21
134.19.200.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:02:d9:1b:e1:91:2d:e5:30:60:82:18:64:12:d3:e9:c6:31:
af:d4:9c:02:dc:c9:09:6f:20:cc:54:b4:c1:b6:d0:ec:f2:e7:
05:6f:41:bc:20:9e:60:68:dd:30:23:ae:43:bd:20:b9:80:c0:
bd:fd:d6:93:ce:a4:d1:2f:27:2b:b4:45:47:64:1a:59:a2:5c:
33:86:0d:cc:eb:21:f0:00:a2:d2:ad:d2:2f:14:ea:41:5a:62:
ba:4b:29:73:98:c8:6d:48:e3:d5:9e:f8:40:61:6d:b9:0e:71:
86:4c:85:4a:e2:6f:92:77:9f:25:09:18:ac:ef:09:d3:6a:83:
81:80:bb:a6:ce:d1:99:9f:af:42:ce:3f:d6:f8:0c:39:ba:7d:
1a:c4:2d:e1:66:f6:25:46:49:96:1c:42:71:18:38:77:40:93:
65:ea:ca:af:85:82:54:70:ad:9d:4d:11:fa:6d:db:0d:11:95:
c5:c9:c4:7c:f1:94:19:27:e1:c9:5b:20:42:79:86:81:d7:f0:
cc:d6:3b:e7:66:e8:44:07:96:73:35:ab:c8:bd:4a:19:c3:0f:
05:1a:a8:58:b3:11:1b:31:c9:cd:65:e7:88:9a:f2:80:16:05:
f2:d3:ae:8c:b7:76:24:ba:20:f3:a4:62:86:85:73:8b:f7:eb:
9a:f9:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net