Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/dCxXanqYo2BAfARwyH_-JPoYvgo.roa
File: dCxXanqYo2BAfARwyH_-JPoYvgo.roa (raw, json)
Hash identifier: v12nw6HCaY7DPyuKw9bgY2SCEviVsH9TJx3km0XK9nE=
Subject key identifier: 74:2C:57:6A:7A:98:A3:60:40:7C:04:70:C8:7F:FE:24:FA:18:BE:0A
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0195DADDE44A188BC693F0224CD27214AE5F
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/dCxXanqYo2BAfARwyH_-JPoYvgo.roa
Signing time: Fri 28 Mar 2025 03:48:49 +0000
ROA not before: Fri 28 Mar 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58030
IP address blocks: 91.237.254.0/24 maxlen: 24
91.237.255.0/24 maxlen: 24
91.238.0.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:da:dd:e4:4a:18:8b:c6:93:f0:22:4c:d2:72:14:ae:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Mar 28 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=742c576a7a98a360407c0470c87ffe24fa18be0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:c1:58:46:cf:3e:be:61:9f:71:be:11:bd:
0b:15:0a:7d:dc:a5:b8:4e:92:f7:29:fe:1b:c0:3f:
d9:26:7c:e8:68:56:80:d9:00:2e:b3:d7:cc:dd:86:
96:07:c6:4f:53:89:97:93:be:13:1b:b9:a9:5f:09:
5c:00:32:7c:41:bb:55:3d:da:5c:86:87:46:e8:ee:
30:1a:5d:af:1c:6e:a0:15:91:50:93:f7:b0:00:17:
59:35:7b:d0:f0:75:6b:a4:c5:7f:ac:3d:3e:58:33:
b5:64:25:06:b8:0b:fb:ad:83:d6:52:76:1c:be:5b:
74:a7:ec:7c:e5:10:90:3f:11:b1:1a:0a:7f:22:17:
35:9c:68:16:3c:95:e8:e4:6b:fe:aa:7b:73:26:4d:
f1:9c:a9:f6:27:11:ee:0f:e5:d8:12:95:46:33:79:
62:34:a9:ce:51:8e:31:dc:18:0c:4f:82:fb:3f:1f:
f7:28:f7:8f:2d:e3:53:65:53:33:7d:02:67:3a:34:
6e:71:b2:25:3c:35:36:97:e7:d2:85:b3:22:b1:54:
91:fe:4b:01:94:cc:ec:1f:4d:52:33:e5:87:9b:50:
ef:64:d0:fb:3b:a5:44:88:fc:5b:a5:1e:e5:ee:7a:
ce:b1:4f:4d:e5:62:b6:29:6f:c2:0a:bf:39:d1:80:
c5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:57:6A:7A:98:A3:60:40:7C:04:70:C8:7F:FE:24:FA:18:BE:0A
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/dCxXanqYo2BAfARwyH_-JPoYvgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.254.0-91.238.0.255
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
9e:11:46:d5:5f:a6:5d:d3:89:63:41:83:8c:90:b3:4a:cb:ea:
3c:26:58:69:92:f1:01:1e:7f:dd:5b:e7:49:2d:0a:db:25:c3:
1f:50:f2:d6:b4:a5:a6:c7:47:be:20:38:ce:3d:ee:c0:b4:03:
33:7a:19:d8:83:e5:2e:c2:1f:10:ca:32:24:88:55:f4:a6:9f:
b7:73:c9:26:ff:01:81:70:2b:cc:f4:74:a4:02:40:76:cc:cc:
9f:00:58:51:d0:79:56:f8:da:e6:03:4d:0b:35:0b:bc:f5:8d:
dc:24:8f:f4:3b:9d:fa:8a:10:65:ce:1b:08:db:b0:c5:94:ff:
7a:d8:99:81:12:df:56:82:9a:a8:c5:d7:07:46:0c:0a:89:2e:
6f:77:24:ab:bd:fe:43:0c:e3:2f:a4:fc:45:74:cf:3a:e8:c0:
9d:ee:52:1d:a0:7d:62:2c:ff:f3:9d:24:f2:22:d5:44:b4:d6:
7b:ab:ec:f0:61:a8:f2:91:1c:20:6f:2e:f5:2d:e5:d2:98:a5:
dc:4f:85:da:e3:5f:51:0b:0b:c7:5d:70:b0:9b:f5:f9:59:a9:
0b:4a:70:7b:d6:29:80:db:0b:34:07:a1:97:b3:41:33:9b:c8:
a9:22:79:a3:fe:13:60:83:b7:43:b2:55:eb:c5:1c:84:00:f3:
a3:4e:00:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net