Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/RFpSEEfmfhQM7TNBHUvPYNYCE48.roa
File: RFpSEEfmfhQM7TNBHUvPYNYCE48.roa (raw, json)
Hash identifier: iHrN3ygMDkDOsg7Lw4ctlZrjgMs+0h97Al7X6knMEEI=
Subject key identifier: 44:5A:52:10:47:E6:7E:14:0C:ED:33:41:1D:4B:CF:60:D6:02:13:8F
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019421B1F861221342EB30A92CF64B498D0D
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/RFpSEEfmfhQM7TNBHUvPYNYCE48.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199777
IP address blocks: 91.238.30.0/24 maxlen: 24
91.238.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:61:22:13:42:eb:30:a9:2c:f6:4b:49:8d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=445a521047e67e140ced33411d4bcf60d602138f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:76:d8:78:7a:d5:c0:b2:9f:25:a0:df:36:
fb:0a:24:5b:57:7b:d0:e9:57:52:ee:19:66:34:00:
36:e2:63:00:cd:a8:f5:8a:01:cd:c6:5e:7c:d2:50:
90:a3:3a:eb:91:bc:b2:f7:4e:b1:10:f9:cf:1d:a8:
49:67:57:39:ad:51:91:e5:b7:b1:e0:c1:7c:53:74:
75:09:e9:e5:dc:0a:12:90:e6:18:77:c4:09:7f:cc:
fe:7f:48:59:75:80:ac:f2:53:49:5b:23:2a:3f:08:
2b:64:c8:36:72:e3:0e:f9:9a:ff:1e:40:94:9e:78:
be:b6:15:6c:c6:f1:c7:04:7e:bc:29:db:8c:a3:76:
10:74:2f:0e:d1:23:91:9a:45:bf:08:8b:c3:cc:1c:
2e:7f:88:ae:96:6c:64:f0:97:7a:af:2c:1d:fb:f3:
33:9c:e6:34:2f:e2:cf:ba:ea:96:9d:1b:01:3c:94:
1c:7d:41:73:04:c9:6f:bc:3d:6e:47:33:7d:df:fc:
0c:ed:97:bf:4f:c1:e7:db:d8:0d:cb:b8:a0:45:38:
1b:b0:91:63:7d:63:9d:93:eb:a6:36:de:e8:b1:97:
ad:82:3e:93:39:a7:21:fa:68:25:a4:88:fa:c3:23:
fe:aa:5f:38:8d:c0:58:eb:ea:36:46:8c:1d:a8:de:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5A:52:10:47:E6:7E:14:0C:ED:33:41:1D:4B:CF:60:D6:02:13:8F
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/RFpSEEfmfhQM7TNBHUvPYNYCE48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.30.0/24
91.238.32.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e6:1d:a5:78:9f:a5:c0:25:26:83:c9:66:08:3d:ad:e9:c7:
76:f8:cc:63:f2:00:4a:55:37:68:3b:29:8e:8f:e5:46:32:83:
de:82:7e:62:b9:af:38:0d:95:11:d3:65:ba:ba:34:b2:08:72:
fa:ce:60:2d:75:ef:82:4c:02:d8:c9:b3:4d:fc:fd:07:94:a1:
83:9d:ac:15:df:86:94:5b:51:2f:7b:b9:d1:41:a2:9c:97:d6:
1a:a0:17:c4:63:66:8a:7b:93:05:aa:ca:3a:2e:2d:4b:bd:f0:
0f:a5:9d:01:26:22:4a:9b:03:bb:a4:d6:ce:60:af:78:6b:65:
d8:d0:d3:18:8e:c8:13:6a:8c:70:28:5b:91:0e:a0:60:4a:99:
39:13:1e:9b:12:d4:7e:80:93:f7:fb:04:d1:8c:00:d1:5f:50:
4d:81:a7:d0:f0:94:6d:15:00:22:44:6d:61:28:3a:9a:f6:c9:
cf:cc:d6:ce:7a:6a:6a:e8:7d:0e:88:e0:c2:1a:d6:17:0b:b9:
e5:ac:59:f5:dc:5d:1a:55:fd:7e:06:0c:76:0e:ef:9f:64:83:
f7:ac:fb:80:a4:52:4f:c9:d6:19:9c:ca:d8:ad:30:af:f0:c4:
29:fd:75:b2:cf:d6:fc:d8:bd:94:fb:32:d3:f4:51:68:6a:ce:
a2:b7:0c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net