Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/cd3Fhp7JGsQY29OycLGqygOY3q4.roa
File: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (raw, json)
Hash identifier: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=
Subject key identifier: 71:DD:C5:86:9E:C9:1A:C4:18:DB:D3:B2:70:B1:AA:CA:03:98:DE:AE
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019426D9E6C59E99B3533BE4ADBAF70E514E
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/cd3Fhp7JGsQY29OycLGqygOY3q4.roa
Signing time: Thu 02 Jan 2025 11:50:02 +0000
ROA not before: Thu 02 Jan 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41247
IP address blocks: 91.222.184.0/24 maxlen: 24
91.222.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e6:c5:9e:99:b3:53:3b:e4:ad:ba:f7:0e:51:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Jan 2 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71ddc5869ec91ac418dbd3b270b1aaca0398deae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:49:7b:ec:65:84:e5:c9:76:d2:cb:c6:42:
58:79:98:83:fb:27:6d:8d:70:6b:33:6f:57:99:fa:
cf:7e:52:dc:bc:bb:6f:52:20:bb:d0:99:1c:30:2a:
95:71:da:02:83:57:27:e7:2d:ca:8e:36:5c:f4:85:
a9:9d:e7:c8:2c:62:1c:77:86:3a:59:a0:8c:ed:4d:
0e:ab:df:39:b5:75:75:ef:63:10:1b:a7:7a:40:16:
3c:7c:d1:b2:3b:39:fc:b5:db:23:7b:bc:ed:ae:b5:
74:a8:c9:66:4d:b3:b6:04:ca:45:c3:95:96:f5:8e:
bc:19:8a:5a:5e:d1:c3:7b:94:ef:bf:4e:f1:b2:09:
31:70:cb:09:37:be:fe:99:b6:a9:32:83:da:67:09:
54:45:41:e6:47:8f:35:65:75:11:c5:e7:54:95:ee:
6b:40:a1:d7:29:34:27:24:60:20:b2:5f:87:47:7c:
b9:b6:62:1d:22:78:ce:68:b7:c3:b7:b7:84:92:1f:
e4:21:23:a3:1f:3a:19:da:a0:ef:6a:a4:99:62:41:
95:28:14:7c:23:2c:86:0f:09:f1:9f:c5:a2:ca:cf:
2c:7c:26:f6:3d:e9:e3:d9:70:ea:a6:9d:b3:7d:f9:
0c:4a:42:73:60:8f:48:db:ee:e8:01:7a:30:d6:30:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DD:C5:86:9E:C9:1A:C4:18:DB:D3:B2:70:B1:AA:CA:03:98:DE:AE
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/cd3Fhp7JGsQY29OycLGqygOY3q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.184.0/24
91.222.187.0/24
Signature Algorithm: sha256WithRSAEncryption
86:75:27:1a:45:62:d0:e9:25:73:1a:85:fd:a6:8e:fd:62:64:
f7:7d:4c:d9:69:07:eb:b1:bf:80:98:e1:62:da:26:ea:11:60:
83:c9:85:b2:fa:6d:38:f3:cd:59:e5:62:7a:74:c0:ca:cc:95:
b7:d6:09:1c:28:b7:1c:b2:7b:83:19:05:9e:66:88:f9:9f:37:
3b:7c:be:4c:67:55:81:b3:5d:d8:cd:e6:3f:73:0d:6a:2f:f2:
14:05:0f:0f:3a:3e:37:08:a0:f2:c7:e5:b7:66:2d:c9:a5:db:
b8:b8:1a:89:59:cb:26:3c:fe:61:f7:39:1a:1b:2f:4a:a5:33:
c3:b6:3d:02:47:8d:5f:4f:41:16:12:8a:9a:85:ef:eb:d3:6e:
d5:72:b3:9a:27:a5:af:02:3f:cd:a0:8c:d0:8c:80:94:9f:af:
f0:c5:b7:00:a3:29:1e:61:65:4e:4b:7e:bd:c1:e1:e8:9a:c1:
14:f2:b5:4a:dc:3a:2c:ae:8b:2c:83:cb:02:04:c5:09:ed:fb:
0e:69:7d:1e:d5:cf:ea:f6:9f:ae:2c:6a:44:44:93:a5:80:a8:
41:bd:a6:9d:6a:70:8b:29:8c:ef:34:12:17:b3:74:e4:8f:9a:
aa:c3:4e:0c:27:14:af:1f:6f:e2:62:65:41:29:0e:dc:62:5c:
c2:56:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net