Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa
File: C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa (raw, json)
Hash identifier: I6wlUhROKZbhSUVuQLxUOY2F8mo+U4zrTtPsYJyoX+E=
Subject key identifier: 0B:E5:65:1A:4B:78:52:28:DC:5D:5E:8F:DE:9E:10:03:F9:EF:F1:47
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 01941FFAB6670F6626133C45A905611FECA8
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203397
IP address blocks: 91.226.84.0/22 maxlen: 24
91.226.84.0/24 maxlen: 24
91.226.85.0/24 maxlen: 24
91.226.86.0/24 maxlen: 24
91.226.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b6:67:0f:66:26:13:3c:45:a9:05:61:1f:ec:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0be5651a4b785228dc5d5e8fde9e1003f9eff147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6d:fc:a1:66:4e:a9:44:c6:3c:9a:cf:f5:92:
ab:30:be:cf:61:69:54:82:95:11:21:be:0c:54:98:
73:cd:a0:b6:46:ef:ae:18:f3:84:35:06:13:8a:1b:
4a:3f:bd:b4:fb:f3:a0:fb:59:28:63:a9:39:7e:3e:
ad:ab:dd:1f:ca:ba:5d:8d:f1:0a:9c:e5:8b:1d:86:
20:7f:0e:1f:51:f6:f8:fe:42:73:34:90:56:68:19:
6b:7f:a2:65:98:35:5d:aa:44:ad:4f:72:b1:bc:c7:
df:6d:ab:a9:c2:ca:d7:5c:e5:84:a6:ea:00:36:92:
65:b1:e6:80:5e:85:34:cd:7a:62:d9:c1:db:22:83:
7b:23:03:7f:6c:f9:27:d9:b2:f4:aa:97:ed:d5:6f:
31:1f:cb:a3:2e:27:38:e7:c6:80:d4:ce:75:42:f7:
db:c2:9d:25:6e:38:47:89:18:e9:ba:a0:43:26:bf:
60:c2:ee:60:6c:ed:c4:bd:31:46:a3:ec:aa:4f:04:
50:76:f0:e3:a6:e2:ce:ab:21:56:72:15:e8:e1:87:
99:bc:06:3b:a1:f6:9b:89:37:02:79:d9:06:bb:6c:
66:3c:18:79:b8:29:45:b7:9a:b7:2b:32:5c:90:c1:
f2:24:d8:fe:d4:cb:e8:87:cc:a4:07:80:28:46:45:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:65:1A:4B:78:52:28:DC:5D:5E:8F:DE:9E:10:03:F9:EF:F1:47
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/C-VlGkt4UijcXV6P3p4QA_nv8Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.84.0/22
Signature Algorithm: sha256WithRSAEncryption
59:69:df:50:09:0e:c6:05:a4:83:df:12:55:ef:eb:2d:2c:a5:
6e:b3:33:43:c1:75:59:10:df:b0:49:f1:74:b7:17:e1:40:e8:
60:e5:dd:81:59:18:a9:42:1a:4c:20:1f:99:99:66:7a:97:e4:
de:76:70:46:e6:9a:42:12:f3:db:a4:11:d1:f9:ca:dd:54:e1:
ee:53:93:3c:79:15:44:4a:dc:f4:47:73:7f:15:e0:e3:7c:20:
ea:93:cb:71:79:e0:e4:91:15:dd:a7:02:26:dc:fe:50:32:31:
8b:75:fb:42:f4:2c:6b:53:fd:62:ec:57:a5:1b:30:dc:84:16:
80:51:64:94:9b:ce:f3:c2:a8:78:39:fd:1b:ee:a8:96:6f:f8:
ee:ba:2c:81:ca:6e:5b:a9:c4:30:3f:5a:bf:7a:dd:82:c1:ea:
55:95:9c:82:07:ec:5e:a0:fa:d2:34:1e:6b:28:14:47:af:2a:
19:7b:cd:43:66:02:b7:cf:b4:c8:26:fa:ae:fa:ea:ae:ba:64:
1e:f1:ec:40:11:b0:e1:1c:5b:6b:30:04:92:78:98:b0:54:0c:
0f:24:02:85:e6:e5:ea:63:94:17:db:ca:62:23:70:06:6b:a7:
b7:b0:40:94:1e:9b:6c:9a:22:77:84:b9:fc:74:39:a6:43:bb:
a6:6f:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net