Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa
File: 4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa (raw, json)
Hash identifier: A3c3lK9eOK2+oXlJyN8L6YhZDvbwMKgjDORS3hJPEzI=
Subject key identifier: E2:E3:87:70:63:F4:5D:18:54:40:FF:45:40:E2:3D:A2:82:F5:3D:29
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01941FFAB771E4DBD99C89F44DCA210109A2
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209738
IP address blocks: 91.226.84.0/22 maxlen: 24
91.226.84.0/24 maxlen: 24
91.226.85.0/24 maxlen: 24
91.226.86.0/24 maxlen: 24
91.226.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:71:e4:db:d9:9c:89:f4:4d:ca:21:01:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2e3877063f45d185440ff4540e23da282f53d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:2c:3a:ed:04:52:29:5e:a9:9f:44:24:5d:
02:a8:57:9e:31:0d:b9:b2:34:6d:a8:a7:1e:d9:c1:
5b:92:2f:87:82:71:71:d3:ba:7b:19:3d:de:5b:95:
b5:36:7e:c1:48:61:0b:f6:17:ba:0b:c1:a2:e0:42:
29:a6:d3:9c:c7:dc:d7:6f:52:52:be:54:e7:fc:fc:
f9:c8:05:58:b9:7b:bd:2f:49:e5:95:52:92:b5:0e:
be:ea:ce:63:74:a0:f1:e8:87:ca:aa:d8:02:53:4e:
9d:c4:aa:a7:07:45:74:6f:b2:6a:d7:b6:91:e3:92:
e9:90:82:ed:86:c6:85:39:30:65:71:c3:f9:ec:56:
cd:d5:68:93:a5:0a:2c:1b:6f:64:22:42:35:d5:71:
6a:bb:6e:92:c8:77:45:e8:1e:da:ae:ee:9a:2d:06:
8a:94:7f:60:c4:96:5c:10:1c:04:b5:45:a0:36:88:
75:08:99:8f:6f:20:8a:57:74:9c:4d:08:99:8b:df:
36:aa:1a:a0:dc:90:42:09:be:41:f9:2c:2f:05:b5:
63:3f:3c:61:01:91:3d:71:35:9b:13:67:98:bb:fa:
e7:be:cb:62:87:dc:06:be:ad:51:35:af:33:f3:10:
e1:27:4d:2c:22:8c:ac:c9:87:7c:b2:82:de:0a:ef:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E3:87:70:63:F4:5D:18:54:40:FF:45:40:E2:3D:A2:82:F5:3D:29
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/4uOHcGP0XRhUQP9FQOI9ooL1PSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:0c:fd:51:38:a8:db:54:f6:80:96:3d:b5:f5:2b:3c:4b:6e:
18:73:71:14:46:bd:44:a8:15:b6:f2:5d:da:bb:d0:03:9b:69:
db:81:b3:42:30:93:3f:be:62:73:18:98:8a:51:9d:a5:17:17:
13:d8:d3:c7:cd:88:93:6c:5e:e3:4e:96:b9:e5:55:48:25:48:
32:4c:04:dd:88:e6:48:37:ed:77:b8:f9:81:a3:94:3a:72:34:
32:37:cc:89:ab:04:6f:1f:d1:69:3c:0f:5f:14:aa:a9:72:23:
ae:7c:ba:54:05:22:bd:15:05:e0:f3:34:fa:c3:55:c9:46:98:
c4:b4:f2:42:a5:ec:21:72:fd:d4:34:6e:56:a5:b0:c3:71:03:
b4:66:ab:17:c7:ee:23:4e:06:a8:bb:18:fb:eb:df:e2:6c:6e:
54:b9:73:ed:56:51:21:d3:03:46:50:e7:d1:ff:9e:da:06:fd:
26:3f:12:90:a1:74:f2:ae:28:bf:9d:f7:81:bc:ce:a0:e6:99:
b9:de:4d:7c:86:f2:a3:81:2a:75:28:e6:0d:11:42:04:9b:08:
e1:a6:fe:39:b1:7d:cc:74:61:75:1b:40:ed:a1:44:19:72:49:
6c:aa:3c:bc:09:df:2f:d0:e8:ae:9e:6f:e2:6f:d3:8f:17:19:
79:9f:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net