Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa
File: T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa (raw, json)
Hash identifier: /yZIDrhN4+3klzibXSLP0BAGEXpbbrny28/lcBpDjcU=
Subject key identifier: 4F:96:84:49:6C:40:55:76:50:08:A5:38:84:A4:3B:31:B7:B4:FA:05
Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial: 019427B5BBBAD3512FC671FF4C892E77E6A0
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41131
IP address blocks: 91.245.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bb:ba:d3:51:2f:c6:71:ff:4c:89:2e:77:e6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f9684496c4055765008a53884a43b31b7b4fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:c4:f0:c6:b8:89:5e:17:6b:4a:2e:ee:a1:
bc:25:1a:6d:c4:3f:d1:65:8f:3f:f5:fd:88:e3:bb:
1e:dd:9d:31:78:e9:7d:55:42:1a:5a:95:30:9c:f2:
68:b1:2f:d3:3f:84:9e:4a:9a:15:66:b7:47:00:c7:
b3:59:1c:c1:ef:58:51:36:b4:c7:02:dd:0a:5e:06:
ab:a6:a8:9d:ce:cf:9f:db:c4:b9:5f:4b:d7:3b:3a:
96:99:f5:63:36:90:f2:08:7f:85:a7:69:8b:bc:3d:
38:f7:23:e0:e0:60:21:cf:17:b8:e9:20:e8:ff:e5:
00:f9:84:9d:00:84:46:38:ab:d8:c5:1f:43:dc:11:
e4:f3:91:2b:eb:fa:ab:c2:d6:58:66:d4:91:d2:ba:
f2:6f:70:1a:25:5d:67:29:2c:74:22:18:d2:9a:c9:
c0:4e:5c:89:96:32:34:53:0c:82:49:2d:bb:b1:ae:
4a:5b:b7:38:d3:85:ba:49:93:5e:42:c1:00:47:08:
2b:f4:3d:0a:3b:c7:41:48:cd:9d:da:aa:ad:c7:94:
3b:63:e9:ea:42:bb:1c:c4:91:69:36:93:12:a8:d4:
70:45:ae:0f:08:05:26:d2:89:26:35:71:55:dd:a3:
e2:fc:83:f7:7c:8c:a6:c0:36:b2:2f:97:72:f3:46:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:84:49:6C:40:55:76:50:08:A5:38:84:A4:3B:31:B7:B4:FA:05
X509v3 Authority Key Identifier:
keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.208.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:94:05:ea:16:cd:f9:32:25:99:3d:cf:50:bc:54:87:02:ee:
2a:76:01:48:04:07:f5:31:06:9c:03:48:ea:12:71:22:09:0d:
84:2c:eb:64:37:7f:29:3f:54:9c:37:ea:ad:5f:e3:92:cd:ac:
a9:9b:dc:b4:97:a3:56:7d:b9:79:da:5f:3d:29:36:06:c1:e1:
62:cd:8d:8b:11:1b:a8:8e:0d:64:27:ee:f1:89:91:99:e6:f8:
13:e8:54:b3:74:12:64:96:6a:06:dd:01:ea:03:d2:11:ff:0a:
64:7a:7d:f8:21:4a:87:dc:94:40:3d:46:fb:c7:79:38:94:20:
f6:88:8b:c3:f5:d2:5a:65:f8:4b:67:a4:f3:f7:2d:3f:f3:fe:
1a:3f:dd:88:59:85:60:10:d6:9f:0d:7d:00:36:bb:70:e8:46:
00:03:b1:25:2b:f6:28:7a:bc:9a:5c:42:1b:f4:8d:34:0b:29:
ab:8b:b6:8e:ff:8b:03:46:5c:5d:2b:79:07:d5:50:be:3e:c5:
e7:06:ef:35:7d:61:ac:73:e8:e1:4d:cf:0c:cc:35:8a:99:89:
5f:44:66:92:c3:99:c5:77:d6:35:92:97:1f:50:dd:71:36:5b:
22:45:44:c1:a4:37:9a:c7:7a:8c:e0:84:82:15:1c:d3:78:fb:
0d:83:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net