Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/We1vlMV5F0WOOHhpojHWiZ1mpOk.roa
File: We1vlMV5F0WOOHhpojHWiZ1mpOk.roa (raw, json)
Hash identifier: kb4mbEAAu4J7YcsoL9X19jWq28MWG1KM2kpIpY/qIwQ=
Subject key identifier: 59:ED:6F:94:C5:79:17:45:8E:38:78:69:A2:31:D6:89:9D:66:A4:E9
Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial: 0195D267C15265589DF53480B3FFDF992E40
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/We1vlMV5F0WOOHhpojHWiZ1mpOk.roa
Signing time: Wed 26 Mar 2025 12:22:49 +0000
ROA not before: Wed 26 Mar 2025 12:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13009
IP address blocks: 91.220.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:67:c1:52:65:58:9d:f5:34:80:b3:ff:df:99:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Validity
Not Before: Mar 26 12:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59ed6f94c57917458e387869a231d6899d66a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:3e:bf:91:9b:1c:10:d9:d8:90:7d:36:60:
9a:95:ad:b6:fb:79:38:3b:b2:5e:36:33:0c:83:5c:
eb:5a:45:c1:a5:0e:1c:69:8a:39:fa:53:71:bb:89:
85:33:f0:e6:08:2f:cc:8a:61:48:42:7f:19:7b:30:
af:5b:17:d8:45:8d:45:70:ef:dd:c5:30:60:9a:1a:
21:fe:ff:6a:8f:60:49:46:25:8e:00:d4:3c:7e:03:
38:ec:4a:71:55:15:fc:e2:15:9d:54:23:68:08:bb:
02:0e:b3:eb:b6:94:b3:b5:8d:6f:46:27:d9:3b:d6:
7c:b5:79:56:37:a6:a9:90:af:2e:88:c5:0c:77:ee:
b1:2f:15:96:eb:c5:5b:b8:c1:82:e2:58:ab:64:7b:
1a:fc:a4:54:ed:db:8f:49:2c:a6:4e:a4:c0:9a:09:
03:9b:36:22:75:89:d7:32:46:61:c8:0b:f8:30:86:
14:e2:59:ac:84:fc:fa:a9:48:e9:21:93:10:53:6d:
96:a1:d6:f7:30:c1:d8:33:bf:46:90:7c:c4:0b:5d:
95:7f:04:5d:9d:ba:70:ad:35:12:49:6c:fe:7a:60:
c8:1b:38:24:3d:06:f5:f9:f1:ea:77:da:d2:96:43:
6f:83:52:26:28:5a:a8:db:13:47:be:d7:1c:99:84:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:6F:94:C5:79:17:45:8E:38:78:69:A2:31:D6:89:9D:66:A4:E9
X509v3 Authority Key Identifier:
keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/We1vlMV5F0WOOHhpojHWiZ1mpOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.24.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9b:19:a9:ac:ec:78:70:4c:ab:c5:14:85:9a:9d:72:05:6c:
44:3f:73:9b:d5:f5:83:e7:fb:fb:7c:c7:ad:5a:2b:bc:37:7c:
40:55:9f:8b:7d:fc:b4:09:25:84:db:3a:a7:4c:20:55:86:00:
18:9d:60:de:7a:0e:81:85:92:e3:ec:93:9f:28:0d:e7:42:f1:
29:2c:36:e9:31:77:7b:92:b4:d2:6e:87:40:30:03:46:21:59:
f5:ae:43:e7:e7:41:a3:30:ba:ec:31:f0:48:91:83:c8:2a:b4:
c8:6a:bd:50:af:25:0e:e2:87:6c:b7:1c:11:e9:a0:3a:17:2e:
46:fe:71:e9:86:c2:16:03:a8:44:37:a7:06:f7:17:a0:18:80:
4a:f7:a5:26:2f:3b:8a:31:20:82:86:c0:02:60:30:52:64:6e:
1e:22:e2:00:42:ff:e5:60:c9:9d:4c:64:18:13:cf:48:e0:9a:
8a:6c:81:65:a7:e9:94:4d:cc:30:ae:8a:a3:59:99:94:a0:aa:
f5:c0:87:ca:b2:92:d4:3f:6c:ee:f1:ba:12:50:fa:d7:fb:cd:
a9:b0:73:e7:67:7f:c6:31:b3:ca:8e:62:03:42:58:14:44:08:
68:84:c4:a8:1d:3c:2f:c2:7f:9c:12:f8:52:c6:bd:43:62:5c:
cd:f7:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net