Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa
File: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (raw, json)
Hash identifier: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=
Subject key identifier: 09:1C:90:48:17:43:E7:E8:3D:AA:2E:4C:92:13:96:85:34:96:19:8C
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 01941F8C4C2060B96540178170AE7E0BB1AF
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58007
IP address blocks: 95.141.249.0/24 maxlen: 24
194.8.28.0/24 maxlen: 24
2a13:4380::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4c:20:60:b9:65:40:17:81:70:ae:7e:0b:b1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=091c90481743e7e83daa2e4c921396853496198c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:14:7d:69:0c:ee:38:b4:b9:5a:16:52:02:
e5:2b:c7:7c:cc:61:46:e9:7c:c9:9a:e1:86:d9:f2:
08:92:7a:c1:d9:f5:b7:ff:92:89:36:a5:bf:07:3f:
41:25:c8:d2:53:45:52:5b:6c:6d:fa:34:88:c4:90:
dd:af:de:a5:7f:50:99:c2:6b:5a:69:92:aa:97:04:
4f:e4:10:38:0a:58:fd:98:2d:a6:fa:96:1d:3d:91:
f7:e9:9d:6f:a6:20:20:5d:a7:75:0c:3c:79:80:a4:
97:15:13:87:32:cb:19:d5:5c:57:7a:42:1d:d2:70:
92:6a:f3:22:07:77:19:b9:fa:63:d9:27:1c:6a:91:
52:55:26:70:df:70:5a:5e:56:ad:13:a2:f1:b5:8d:
3e:85:8d:f5:0c:bf:33:c6:8f:0b:c1:79:58:e5:74:
6b:79:8c:bd:e1:e1:da:a7:0a:ca:76:1e:b5:97:7b:
f8:16:85:7b:30:1a:7d:15:8a:8a:63:cc:02:3e:08:
01:95:45:f4:2d:22:23:e7:09:21:3d:0f:c2:4a:f1:
2b:68:3a:ee:44:88:84:aa:df:b0:5e:54:14:7b:98:
65:de:5a:f4:c9:30:04:66:8c:63:c3:93:ac:31:ad:
9f:07:af:5d:db:e0:c5:a4:bf:db:38:f0:22:10:d3:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:90:48:17:43:E7:E8:3D:AA:2E:4C:92:13:96:85:34:96:19:8C
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.249.0/24
194.8.28.0/24
IPv6:
2a13:4380::/33
Signature Algorithm: sha256WithRSAEncryption
1e:e0:a4:69:79:d9:99:f7:94:c6:3b:e3:e5:ad:07:5e:58:08:
0f:47:c7:1a:d6:42:67:85:92:ae:a2:bd:4f:79:bf:01:72:80:
55:7e:8f:ac:64:8b:85:ac:86:e4:09:22:1b:c0:60:1a:76:8f:
b6:ee:c9:8b:29:ad:71:81:0c:fd:9b:d5:66:89:78:9c:da:32:
f7:06:ad:1b:ab:02:ba:2b:d5:39:5a:83:86:ca:c9:c2:5d:de:
35:48:db:12:44:ca:e2:52:e8:21:cd:d0:3d:24:06:a3:d0:a2:
0d:da:64:21:f8:47:f9:85:52:a4:a4:22:26:50:bd:5a:d8:d4:
0f:19:89:de:2a:5c:b4:b9:be:2d:22:cc:4b:1d:cf:d5:27:54:
7d:64:d9:eb:0a:44:28:a0:fd:77:8c:f9:cc:12:ce:76:e5:78:
6d:10:ae:a2:40:0f:c6:3b:78:5f:0a:aa:b7:54:c6:1f:33:01:
7d:16:8b:7e:f2:07:45:ea:a7:4a:4f:c8:f1:2d:48:32:9e:1e:
7a:5d:43:8f:00:4d:45:84:1e:1d:d2:c6:d2:0a:dd:1b:0e:b3:
97:87:2b:2a:35:9a:c9:29:74:8a:39:b7:e0:fc:2d:a9:d4:e6:
23:95:68:15:b0:8f:68:1f:81:1b:33:2d:2e:16:45:77:98:74:
dd:3b:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net