Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/_Hv-371f3PpQrPgvaLXFPgbDqAs.roa
File: _Hv-371f3PpQrPgvaLXFPgbDqAs.roa (raw, json)
Hash identifier: LCaDC2GnT7VyfO2v1Zin8LH9TSL6mMs+tcHPlTEQoSg=
Subject key identifier: FC:7B:FE:DF:BD:5F:DC:FA:50:AC:F8:2F:68:B5:C5:3E:06:C3:A8:0B
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 019593834AA6B03DB0FAA277D85AA669BA64
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/_Hv-371f3PpQrPgvaLXFPgbDqAs.roa
Signing time: Fri 14 Mar 2025 07:16:49 +0000
ROA not before: Fri 14 Mar 2025 07:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213047
IP address blocks: 91.234.236.0/24 maxlen: 24
185.103.118.0/24 maxlen: 24
2a14:b180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:83:4a:a6:b0:3d:b0:fa:a2:77:d8:5a:a6:69:ba:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Mar 14 07:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc7bfedfbd5fdcfa50acf82f68b5c53e06c3a80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:a6:05:01:cc:56:c9:da:36:2e:f3:7e:63:
d2:a9:18:b1:2e:16:b0:72:e7:c8:8e:68:1b:5b:7a:
be:24:05:88:e3:59:ab:9d:82:d0:60:fe:a1:44:6f:
18:78:7c:1f:05:6c:83:d8:cd:ff:cf:3a:85:ba:dc:
9f:76:77:cc:38:f2:54:d6:6e:93:ec:fc:36:69:23:
dd:7b:82:b5:b3:40:e8:a3:86:1e:ce:e6:e8:d4:4b:
98:a5:07:af:99:1d:59:61:47:38:8f:c1:76:84:88:
59:43:63:fe:d7:98:0a:1a:79:fb:04:bf:6c:6e:80:
6a:fb:b9:1e:12:78:1e:5a:48:8e:d1:33:bd:cc:f7:
1b:d7:55:50:4f:42:9c:2e:2e:b2:27:38:b5:6d:51:
6c:ba:02:58:cc:98:6c:26:ae:93:63:6d:bf:78:96:
35:21:d3:7a:8e:84:c7:c7:be:ce:79:ee:d3:78:d3:
95:d0:66:7b:88:15:13:37:7e:92:80:b9:1c:f7:91:
29:f5:a4:58:f3:ca:c3:38:9e:af:ad:06:b2:1f:7a:
c7:99:03:7d:71:a8:4a:8a:dd:f8:c6:a2:a9:91:e3:
86:d2:6f:03:58:2e:e5:86:ad:87:66:c1:13:6d:b9:
f7:f2:b9:d2:0e:bf:84:b0:18:09:34:b4:a0:42:83:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7B:FE:DF:BD:5F:DC:FA:50:AC:F8:2F:68:B5:C5:3E:06:C3:A8:0B
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/_Hv-371f3PpQrPgvaLXFPgbDqAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.236.0/24
185.103.118.0/24
IPv6:
2a14:b180::/29
Signature Algorithm: sha256WithRSAEncryption
76:86:c9:c9:a5:8c:c4:36:48:67:ca:f8:47:83:93:18:20:58:
c1:ac:0a:46:50:6c:0d:b1:6d:84:6a:e7:ba:5b:3e:09:73:79:
3c:f4:71:a9:0a:6b:97:bf:bf:90:29:23:f8:83:42:2c:a0:d6:
ec:f5:54:29:bf:bc:62:fc:d3:44:bb:ab:ee:1e:77:06:a7:4a:
d5:6d:b4:c5:69:c7:1e:b2:4f:00:be:d6:e6:1c:1e:08:57:65:
b2:71:f7:78:b6:39:26:ad:a0:e3:6a:52:d6:a4:5e:e5:e3:25:
fa:5f:74:06:7a:14:e3:bb:5d:8a:df:7a:32:86:fe:7c:f6:9a:
23:08:0a:56:a8:e2:f3:c0:7e:7c:f7:02:6a:b0:6e:c2:83:aa:
e2:00:bd:14:a2:20:da:96:1d:df:0f:7a:c9:1b:6c:f7:9f:c0:
f1:41:45:57:b7:7f:90:29:14:38:e1:f4:96:54:d3:9b:13:4f:
f5:51:5f:26:b0:72:d9:04:e6:d1:62:8e:75:2f:fc:79:88:62:
98:b3:36:9e:68:df:b7:61:3f:5b:28:9a:eb:5b:e8:79:5b:e8:
0c:75:2e:6a:11:a8:24:7b:ad:1a:53:39:d3:a9:4b:f8:d8:29:
68:49:05:5d:64:a3:c7:4f:71:f0:a6:3a:ad:e9:91:d5:0a:05:
61:54:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net