Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/C9I9L672PlbWqQBGPXD-LljxFm8.roa
File: C9I9L672PlbWqQBGPXD-LljxFm8.roa (raw, json)
Hash identifier: +ke4s3nz80Z09QzZpjaWVPGcz+zRYaW46pTivPvijPQ=
Subject key identifier: 0B:D2:3D:2F:AE:F6:3E:56:D6:A9:00:46:3D:70:FE:2E:58:F1:16:6F
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 019585A6A7FB353DEA47EC3E6F8012768B54
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/C9I9L672PlbWqQBGPXD-LljxFm8.roa
Signing time: Tue 11 Mar 2025 14:40:46 +0000
ROA not before: Tue 11 Mar 2025 14:40:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201675
IP address blocks: 91.234.236.0/24 maxlen: 24
185.103.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:a6:a7:fb:35:3d:ea:47:ec:3e:6f:80:12:76:8b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Mar 11 14:40:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bd23d2faef63e56d6a900463d70fe2e58f1166f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:3a:bf:2d:8d:e8:81:09:86:78:1a:1e:58:
1e:f4:64:03:a0:9d:27:ee:73:57:7d:fe:5b:b8:aa:
6c:24:b5:74:5b:7a:8b:27:db:06:a5:9c:cf:2c:93:
3f:95:bb:9c:b0:74:d4:18:3b:ea:d9:60:50:46:d2:
81:02:16:7d:ab:c1:7a:d2:f7:3a:4d:0e:e9:e1:15:
96:b6:f3:52:27:a6:6a:76:9b:71:90:3e:97:cf:cd:
a7:f6:4b:33:4e:1e:39:42:89:6a:cc:45:77:9e:fa:
49:89:7d:11:54:dd:75:92:41:23:a0:4e:da:85:bf:
7d:73:81:d0:79:6a:88:a4:c6:8d:30:c4:af:29:8c:
de:b4:c5:05:7a:45:6f:d1:19:7e:b9:cc:63:70:b7:
6a:12:99:b6:2d:ef:ad:04:70:03:57:b4:51:f7:54:
2a:a7:a7:2b:eb:83:57:d3:56:e2:31:da:86:3f:f8:
40:ca:8b:15:df:39:2b:b0:28:1e:db:f6:c4:68:57:
6f:89:16:6b:e7:d3:c7:a5:5a:68:e4:fa:b4:fc:01:
75:ea:a6:f5:79:65:d2:3c:d8:5f:76:67:5e:d2:e8:
8d:be:4b:a9:85:c7:29:4b:4e:2e:f6:e6:f5:45:65:
6d:74:00:eb:de:1e:6c:17:98:bb:6f:89:4c:2e:d6:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:3D:2F:AE:F6:3E:56:D6:A9:00:46:3D:70:FE:2E:58:F1:16:6F
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/C9I9L672PlbWqQBGPXD-LljxFm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.236.0/24
185.103.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ad:1b:46:15:ac:75:58:2c:f3:b3:86:f8:9c:12:61:7a:73:
1c:3c:27:40:66:d4:5a:08:39:9d:04:a4:13:e0:fd:a7:cc:40:
10:d0:1a:51:a6:5d:03:52:b3:13:3b:30:35:81:12:9d:af:d4:
5a:5c:bb:c9:e2:bc:c9:10:9b:3c:5a:30:65:6a:70:a9:77:a3:
70:cc:8a:e2:a8:b5:da:df:06:c1:4f:6c:d9:8d:2c:4b:f3:a4:
be:fe:53:e2:cf:9a:0a:9f:3b:18:ec:c4:05:98:e1:33:25:77:
94:a1:96:8d:ba:0b:80:82:a5:13:42:b4:ab:91:f1:83:92:33:
a5:c8:de:fc:9b:35:bb:7e:8b:a9:ae:7f:de:9b:f3:3e:61:50:
5c:eb:dc:62:9a:f3:5a:e5:dd:2d:f3:d3:87:7b:d2:5d:27:8f:
1b:0f:cd:54:0e:f7:28:fd:50:a1:64:62:6e:06:89:36:49:3b:
2b:da:23:96:2f:02:4d:7f:26:f2:b3:91:f2:d7:76:19:ae:a5:
1e:0e:5b:53:d7:2a:19:80:4e:dd:6f:47:9f:c4:10:15:7a:49:
ab:b2:97:98:b8:17:ce:45:ac:63:92:ea:a3:69:b8:49:c5:5c:
15:29:95:a0:41:95:95:dd:31:e8:22:48:d2:f6:92:42:1e:10:
c6:a3:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net