Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/_VhyulaRLMFmy7z_tqs-4L4cWXE.roa
File: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (raw, json)
Hash identifier: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=
Subject key identifier: FD:58:72:BA:56:91:2C:C1:66:CB:BC:FF:B6:AB:3E:E0:BE:1C:59:71
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 019423D6D78E5E1D4F5A8012141E424E4A42
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/_VhyulaRLMFmy7z_tqs-4L4cWXE.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47984
IP address blocks: 91.207.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d7:8e:5e:1d:4f:5a:80:12:14:1e:42:4e:4a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd5872ba56912cc166cbbcffb6ab3ee0be1c5971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:c9:20:9d:86:dc:a7:0d:11:fe:ef:0a:03:
76:e6:b4:76:1e:91:1c:83:c0:d4:2a:28:dd:16:5c:
d4:98:b8:91:ee:43:f8:b0:93:d7:3d:e1:c8:73:b1:
f8:dd:41:80:79:e0:0d:33:60:cf:eb:29:93:d8:cc:
4f:56:dd:13:ed:52:d9:df:d4:b0:b6:07:1b:92:3c:
96:df:fa:29:b3:9d:f7:15:26:17:89:1a:b2:b4:a1:
6e:7f:7c:75:44:fb:3e:0d:66:35:24:38:c4:b3:27:
3a:96:a5:0b:dc:b1:7c:6c:b8:e5:2e:25:30:72:03:
28:c1:2c:3e:69:6a:fd:bb:b4:aa:f4:2e:6b:e4:f4:
3d:a4:48:6a:03:9e:2f:0c:ab:76:e3:e4:3f:a3:7b:
4d:4d:b1:7f:05:d8:18:1b:7e:2a:d8:13:8f:a9:2d:
f4:03:2a:60:b8:44:6e:4c:6d:47:94:21:4a:a5:6b:
83:9a:e5:35:50:0a:47:77:f0:f2:7f:b6:45:3c:ce:
a5:d7:1b:fb:ed:7a:19:d5:ca:2b:7a:6b:5c:da:b4:
2d:0e:79:bf:2b:49:8b:be:87:85:a8:52:66:42:25:
8a:0a:58:e1:93:f8:e7:c7:d9:cf:7e:9c:b8:5e:21:
04:85:a6:1c:26:d0:f2:0b:7b:8c:fe:d6:1c:37:34:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:72:BA:56:91:2C:C1:66:CB:BC:FF:B6:AB:3E:E0:BE:1C:59:71
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/_VhyulaRLMFmy7z_tqs-4L4cWXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:2f:4c:47:98:e5:04:8f:04:d6:de:74:9b:ea:01:00:bb:d5:
34:4a:db:cb:81:c9:24:08:6d:27:27:49:12:a4:68:4a:60:64:
12:b8:70:b6:72:9f:2b:77:7d:8b:06:1e:25:1b:87:c1:41:4b:
3b:43:33:11:61:b0:86:61:4f:b8:43:16:63:e7:9a:e5:e6:c6:
4e:cc:b6:0a:38:28:4e:76:fb:e2:53:d4:c9:d4:9d:8c:1e:0b:
23:98:79:cf:1b:6e:0d:ce:2a:e3:bd:8d:a5:eb:06:9c:4a:ab:
43:7d:2e:87:3b:31:45:01:69:13:5a:ab:ef:d4:a3:39:8d:09:
5b:34:cf:c0:a3:02:34:d7:86:1b:6e:03:ae:ff:f8:75:56:ea:
30:80:80:75:2b:a8:70:30:a9:a0:13:8b:b1:41:7a:e6:92:9e:
ff:b3:5a:c1:c5:41:04:8c:d2:d6:37:dd:10:40:47:22:54:d4:
62:d1:d0:21:48:5a:f9:a3:39:1a:73:72:ef:bb:11:ee:5c:17:
6a:db:6d:b0:5a:0a:fc:44:a0:8a:65:91:c8:c3:ac:32:38:be:
b6:82:d6:4b:b3:39:1e:4f:0c:6d:39:83:4b:41:50:73:4e:82:
2c:fb:ea:e0:26:0a:43:43:f2:5c:9c:da:8a:ab:bd:fb:13:15:
2f:c5:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:38 2025 by rpki-client on console.sobornost.net