Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/7fCLxFxs3uirSoBmBAB2IiaPCDE.roa
File: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (raw, json)
Hash identifier: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=
Subject key identifier: ED:F0:8B:C4:5C:6C:DE:E8:AB:4A:80:66:04:00:76:22:26:8F:08:31
Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial: 0194266C010CB5F71B11A36163B7A0B9BD88
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/7fCLxFxs3uirSoBmBAB2IiaPCDE.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31725
IP address blocks: 91.201.244.0/22 maxlen: 22
91.201.244.0/23 maxlen: 23
91.201.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:01:0c:b5:f7:1b:11:a3:61:63:b7:a0:b9:bd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edf08bc45c6cdee8ab4a806604007622268f0831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:b6:9c:a1:65:ef:a3:79:72:3c:96:c1:12:
8f:d3:0e:b6:5c:ce:e0:72:21:b0:ec:e0:40:54:b8:
e9:79:95:b3:4a:73:8b:ac:a3:b9:7c:d3:65:b4:31:
cd:b2:94:ec:bd:10:3f:84:a1:ea:47:3d:07:13:c5:
54:e6:02:fe:b6:0c:39:3a:60:68:db:c1:42:5d:88:
c8:46:98:bd:52:40:62:4d:2c:db:ff:fc:ef:dc:2e:
f4:31:4f:29:6f:5b:bb:c0:bc:6c:e4:51:9c:8b:49:
d8:d7:80:58:9b:81:24:da:ce:ed:22:6e:83:c0:20:
7d:01:ea:f8:32:ca:14:ca:b4:1f:ac:6d:30:a3:2b:
72:49:ba:1b:05:67:d9:73:87:f8:2b:3e:fc:17:5f:
14:e0:0b:18:14:be:98:12:a6:8a:85:95:5d:9f:4f:
45:e3:19:31:42:ea:23:06:99:9c:4b:ef:c8:10:53:
43:6f:b9:07:84:bc:33:c8:c1:a1:d7:73:a9:52:0c:
ff:e6:8b:06:8a:33:2d:1e:71:c0:0c:8b:e3:25:bc:
0b:f9:d9:db:ef:5f:05:92:5f:16:19:31:c4:ae:8e:
a2:cf:31:b5:87:74:f8:b1:f7:d1:5f:34:50:d7:6e:
6d:32:0f:27:da:a4:3f:27:d2:a6:83:9e:f4:52:0f:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F0:8B:C4:5C:6C:DE:E8:AB:4A:80:66:04:00:76:22:26:8F:08:31
X509v3 Authority Key Identifier:
keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/7fCLxFxs3uirSoBmBAB2IiaPCDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.244.0/22
Signature Algorithm: sha256WithRSAEncryption
15:7f:d5:03:e5:4e:2d:a2:76:17:2d:de:d5:a7:d5:28:23:cb:
3b:b1:fc:3d:ba:48:32:e4:b1:c7:0f:46:61:d0:7a:9f:67:8e:
6b:b6:9d:d7:f0:59:12:1f:7b:2c:55:47:a7:76:a4:23:08:45:
01:b5:b0:3a:77:67:3f:1b:f4:fa:a4:b4:f5:02:f4:2c:ab:d9:
07:ff:30:d9:08:61:10:8c:5b:27:52:e8:8c:25:8e:3f:eb:39:
ff:a1:a6:39:88:d9:6f:2c:3d:4b:df:ca:51:b6:76:9a:e8:a6:
63:99:98:2c:61:45:a5:8b:ef:6b:85:ba:09:00:8c:87:a7:0f:
05:b3:38:1e:98:ea:69:99:1f:f0:fd:77:b6:18:09:f3:c5:b9:
20:d4:91:6f:3c:90:48:04:ee:7f:89:dd:1c:47:1a:dc:90:30:
6e:5b:ba:66:de:6b:d1:60:4f:86:0e:f4:3e:29:60:bc:68:fd:
99:76:06:0f:b0:8e:4d:8e:18:df:08:36:ba:37:af:11:2b:f3:
b6:a6:25:cf:f8:14:b7:52:02:bc:44:7d:b4:bd:b2:f4:7f:b9:
20:34:66:3e:ec:e7:9a:79:5e:d0:58:4d:5d:87:b0:2e:b0:60:
95:8a:d1:c9:18:3b:29:34:19:c4:c4:e7:a8:5b:c3:7d:6b:b8:
c0:22:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:22 2025 by rpki-client on console.sobornost.net