Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/Zeihe15xeOf_8eph8Lmd7nVS6QU.roa
File: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (raw, json)
Hash identifier: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=
Subject key identifier: 65:E8:A1:7B:5E:71:78:E7:FF:F1:EA:61:F0:B9:9D:EE:75:52:E9:05
Certificate issuer: /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial: 019427B63EDB1EE54287DBC4C39F3DE17441
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/Zeihe15xeOf_8eph8Lmd7nVS6QU.roa
Signing time: Thu 02 Jan 2025 15:50:42 +0000
ROA not before: Thu 02 Jan 2025 15:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39819
IP address blocks: 91.207.28.0/23 maxlen: 23
91.213.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:3e:db:1e:e5:42:87:db:c4:c3:9f:3d:e1:74:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Validity
Not Before: Jan 2 15:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e8a17b5e7178e7fff1ea61f0b99dee7552e905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:db:3e:22:fa:f7:b4:90:4d:c6:fb:b4:03:
22:8f:77:de:1f:ff:27:ce:97:93:89:6f:9c:b3:01:
63:55:3d:fa:54:10:69:5b:0f:a2:0f:91:b2:aa:9d:
f8:f7:aa:a6:b2:6f:29:3b:53:01:db:2a:f3:d5:0e:
71:1f:1d:72:39:ac:00:b0:81:1b:25:9c:16:29:d7:
e9:aa:ca:5d:32:1f:c1:31:61:45:15:5d:45:93:29:
14:e1:f6:78:51:2b:4a:cf:38:04:08:d9:51:e4:f2:
4e:59:1e:ea:1f:9f:df:97:3d:14:11:e1:d8:97:54:
86:88:16:7f:3a:8a:6b:71:02:f5:dc:52:78:5c:9c:
01:4c:c7:7e:d8:c2:4d:03:de:e9:f8:c8:48:47:ec:
21:a5:f7:0a:ec:d8:d7:e6:72:c8:a4:4e:cf:78:06:
2f:52:63:b4:44:9a:68:ea:a8:f3:c9:f2:0d:7d:e8:
e8:aa:26:12:c1:3f:19:4d:9c:cf:bc:6f:b4:5c:8a:
aa:e1:58:97:fa:6c:1f:c1:46:be:48:7a:b2:7d:56:
29:13:d8:7b:0a:29:62:e3:eb:41:64:77:82:78:03:
e3:14:35:42:67:ab:59:21:a4:24:c7:47:a7:b8:ee:
d0:23:a3:27:70:aa:31:7d:22:a2:93:f9:c5:6e:01:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E8:A1:7B:5E:71:78:E7:FF:F1:EA:61:F0:B9:9D:EE:75:52:E9:05
X509v3 Authority Key Identifier:
keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/Zeihe15xeOf_8eph8Lmd7nVS6QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.28.0/23
91.213.233.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e2:f1:b7:fe:48:99:25:83:55:7e:32:ab:c7:2a:18:0c:92:
b0:5b:c9:5a:2a:37:68:cc:29:5d:b5:0a:64:cd:3e:de:4f:0f:
d2:d7:27:c6:27:18:a0:65:59:0b:53:2c:bc:07:6d:98:fa:50:
7c:8a:b5:47:b3:56:d9:88:56:a0:9f:5b:3e:5e:b7:f1:88:bd:
e2:94:68:99:6e:9a:2d:1a:07:5c:2f:a6:5d:9d:96:a4:ad:b0:
3f:45:a7:19:d0:ec:be:e4:2e:f5:38:da:18:e4:92:29:86:42:
cf:94:13:8b:fa:bf:67:2c:5f:6b:24:21:5c:c5:ee:ce:e3:fa:
17:a9:12:c2:bb:dd:86:4b:1a:9e:41:1a:7a:ea:6c:d2:10:11:
68:ee:a6:5e:61:eb:67:99:bb:d6:43:f1:23:a4:30:41:3d:97:
9f:b3:06:05:8e:0c:03:c7:8a:97:6f:3b:da:ba:cc:9c:70:00:
38:f3:4b:e7:38:25:e5:88:f7:97:20:06:fb:c6:e1:d6:c9:7e:
cb:4f:d0:7f:21:d9:20:25:7b:80:d5:25:8d:43:40:41:eb:05:
8f:63:c4:dd:5b:e1:a4:93:ce:c8:8d:8e:97:56:88:f9:52:2c:
82:00:db:8b:17:d1:45:42:67:2f:b8:73:d3:16:e2:08:8f:72:
c8:3f:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net