Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/ExEAGmrTaGZYkgcoaaGfFiacDZM.roa
File: ExEAGmrTaGZYkgcoaaGfFiacDZM.roa (raw, json)
Hash identifier: vfQhBpcBjSjG95UQaSsBC3edgr1xXnN4hhJBHCKa+Vc=
Subject key identifier: 13:11:00:1A:6A:D3:68:66:58:92:07:28:69:A1:9F:16:26:9C:0D:93
Certificate issuer: /CN=68e95817406095ec7cb5c7b286b11333497b9451
Certificate serial: 019426D92FF48CB4F2D68523CF7C75A22223
Authority key identifier: 68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOlYF0Bglex8tceyhrETM0l7lFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/ExEAGmrTaGZYkgcoaaGfFiacDZM.roa
Signing time: Thu 02 Jan 2025 11:49:15 +0000
ROA not before: Thu 02 Jan 2025 11:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208477
IP address blocks: 91.208.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:2f:f4:8c:b4:f2:d6:85:23:cf:7c:75:a2:22:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e95817406095ec7cb5c7b286b11333497b9451
Validity
Not Before: Jan 2 11:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1311001a6ad368665892072869a19f16269c0d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:f2:54:ad:1e:48:2a:65:73:5c:1a:16:03:
64:f7:33:5a:92:e5:e0:0a:b1:0c:6e:9c:a0:a9:69:
c0:9b:9a:62:ca:ba:a1:46:3b:28:6d:62:3f:88:f2:
76:67:51:ef:7b:b8:9d:20:36:fd:b4:31:70:b0:d8:
06:9c:c8:28:36:72:48:a4:aa:c4:8b:97:bd:11:58:
6d:ad:56:b8:80:07:72:72:da:8e:f8:38:81:39:9e:
f9:93:a5:e1:c2:19:34:32:f2:cc:7b:a0:c6:a9:57:
42:3d:0e:c8:be:a4:d3:19:42:b9:ba:7a:19:32:cf:
e9:57:79:c3:98:e0:ba:82:9a:85:a4:06:62:18:f7:
2c:21:49:42:43:6e:90:5e:0e:4a:60:e6:e1:7b:29:
81:cd:38:cd:f6:e7:cd:bf:de:d7:4f:b6:72:95:c1:
6b:47:1d:66:40:05:6a:90:6d:8a:fa:53:3c:1f:15:
0f:30:20:8d:5a:9c:a7:12:65:50:cf:71:c4:7a:51:
da:cc:fe:32:18:25:d8:d4:b7:58:2d:88:45:46:8b:
3a:1b:89:30:57:ee:4a:e1:5d:ba:6b:4b:53:32:91:
f8:09:91:5a:9c:f7:4f:41:66:75:dd:c1:46:45:46:
be:70:f2:63:26:08:a3:90:5f:f7:e7:b1:4c:8d:d0:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:11:00:1A:6A:D3:68:66:58:92:07:28:69:A1:9F:16:26:9C:0D:93
X509v3 Authority Key Identifier:
keyid:68:E9:58:17:40:60:95:EC:7C:B5:C7:B2:86:B1:13:33:49:7B:94:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOlYF0Bglex8tceyhrETM0l7lFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/ExEAGmrTaGZYkgcoaaGfFiacDZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4a5d71-e11d-4d32-b597-019ec9d9a758/1/aOlYF0Bglex8tceyhrETM0l7lFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.31.0/24
Signature Algorithm: sha256WithRSAEncryption
52:66:d8:e3:24:58:cf:9d:f4:b7:79:56:5d:be:20:87:f0:75:
12:0b:37:c0:39:d7:ff:ca:c0:d0:fe:f4:2d:cc:ca:93:d9:fc:
55:af:e9:cf:a4:f2:cf:6a:e1:07:89:84:1f:6b:5a:6b:3e:e1:
37:18:38:1c:06:fe:34:51:e4:c8:df:b8:e5:99:36:1f:10:8f:
2b:bb:a6:ca:98:f1:50:0b:9f:bb:00:2a:eb:8a:46:ab:1d:be:
fe:fc:5a:08:17:32:85:f6:34:cb:15:bc:6f:69:dc:09:e9:45:
1d:ba:9c:31:8a:ae:12:e5:38:37:a2:79:e6:85:13:70:39:2d:
44:cb:41:94:9e:f8:6b:49:1c:1d:17:cd:77:08:0e:6b:b2:64:
9b:41:70:ed:bc:6a:39:cc:c8:5a:73:20:d7:31:06:5a:f3:d7:
1c:4e:67:d9:d3:da:fe:d2:87:0b:2e:da:2a:44:3f:8f:f0:9c:
eb:d6:22:29:66:05:74:d7:68:5b:b7:ca:63:1e:2c:7d:10:df:
37:19:fc:e0:15:be:de:f8:c5:88:44:2e:9b:e4:a4:83:d4:11:
41:4b:ea:2d:bb:de:b0:7f:95:1b:c3:a4:7e:0b:00:3a:f7:f4:
ad:fb:12:ac:e5:a1:f1:53:2f:4a:89:6a:f7:3d:b4:38:ae:00:
ee:b6:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net