Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/iWKzGh5m2_oz6qvqBjoyFnizgxw.roa
File: iWKzGh5m2_oz6qvqBjoyFnizgxw.roa (raw, json)
Hash identifier: YVbdlpkB57bicqIuUwT2dIakABg210l0QU3avOsuQbo=
Subject key identifier: 89:62:B3:1A:1E:66:DB:FA:33:EA:AB:EA:06:3A:32:16:78:B3:83:1C
Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d
Certificate serial: 019581125F5E39694293CE49E66CEE2BDB85
Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/iWKzGh5m2_oz6qvqBjoyFnizgxw.roa
Signing time: Mon 10 Mar 2025 17:20:19 +0000
ROA not before: Mon 10 Mar 2025 17:20:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213558
IP address blocks: 31.186.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:12:5f:5e:39:69:42:93:ce:49:e6:6c:ee:2b:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d
Validity
Not Before: Mar 10 17:20:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8962b31a1e66dbfa33eaabea063a321678b3831c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:19:67:c7:38:d0:4e:d8:ad:70:3b:31:ab:
a8:8b:81:81:42:ec:25:67:a9:1e:cb:63:7b:c3:63:
77:2d:73:56:6a:a4:16:75:4c:82:9c:e9:45:ba:47:
59:88:5a:ab:95:75:29:60:68:7c:6e:e3:8a:4a:62:
84:d4:0a:0c:92:f9:e4:55:7a:7e:ef:03:5f:d6:5a:
ce:b6:0e:4c:82:e5:00:7f:06:84:ce:b7:0a:7e:bc:
ca:f1:c5:1f:bd:07:7f:f1:2c:64:14:e5:62:d6:79:
f4:01:05:ce:35:bd:23:16:08:d1:6c:f2:f8:e1:98:
6e:3e:3b:41:d0:6c:7c:72:aa:43:44:ce:b6:ab:eb:
c0:bd:52:33:6b:5b:ee:89:8a:87:84:cc:15:63:63:
3a:c4:a7:e0:f5:f8:31:40:4a:46:04:f7:e4:60:4b:
c2:36:8b:5b:15:1d:91:c0:30:21:f0:e4:4c:2b:6d:
d3:da:6e:4e:81:08:ea:5a:85:05:98:4b:c4:11:99:
08:9d:b6:09:53:13:f0:ce:28:f9:00:fb:24:59:07:
6f:59:45:fb:2d:69:fb:66:9b:2f:40:a5:36:3e:6f:
79:99:6d:19:27:20:3e:14:27:e3:5b:df:c2:13:9b:
11:27:ae:ed:06:9d:8f:57:18:3d:c1:60:45:7a:b7:
7c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:B3:1A:1E:66:DB:FA:33:EA:AB:EA:06:3A:32:16:78:B3:83:1C
X509v3 Authority Key Identifier:
keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/iWKzGh5m2_oz6qvqBjoyFnizgxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d3:2b:07:3e:65:17:a6:9a:84:6d:42:c3:c0:21:fb:3b:4d:
20:fb:81:35:25:b4:d7:74:38:f7:0f:ae:98:6d:95:09:09:53:
c8:5a:8a:0a:5c:7b:68:14:64:95:4b:b5:00:27:39:fe:af:fd:
53:48:36:96:db:5e:e6:a0:87:e6:c7:68:18:91:a3:ac:74:ed:
c7:92:7a:0d:9b:ac:04:ef:ea:89:0b:ed:96:a1:10:b1:6f:3a:
f6:99:8c:e4:50:38:50:5a:76:c2:1f:e0:b0:32:b7:44:cc:d4:
81:9a:55:0c:d3:69:da:ec:c3:cd:18:97:22:28:b0:93:b4:4b:
c4:ca:c3:ea:4b:de:80:23:ee:22:e5:c4:25:3b:56:d5:d2:a2:
88:ae:41:5d:52:5b:2c:51:d7:dd:7c:bf:2e:86:be:54:76:fe:
ee:cd:e5:35:0c:14:55:5e:46:3f:e9:c7:f3:90:cf:43:f7:22:
50:70:a4:13:1f:8b:12:0e:e9:a0:88:b6:45:32:82:a9:73:fa:
26:16:77:76:e2:a1:d6:8a:40:84:4b:8f:25:1d:93:b5:bd:94:
98:a5:c3:44:ed:60:bd:e1:b0:9c:d9:54:4d:a7:74:d4:01:b8:
81:44:3d:e9:1f:b0:c8:c2:46:90:18:aa:43:23:c4:36:82:41:
b0:ad:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net