Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/BYVEd7xc3EBzXbLQU0wScv8W8vM.roa
File: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (raw, json)
Hash identifier: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=
Subject key identifier: 05:85:44:77:BC:5C:DC:40:73:5D:B2:D0:53:4C:12:72:FF:16:F2:F3
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 019427B4EEDD6D65678C44163DBB08776611
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/BYVEd7xc3EBzXbLQU0wScv8W8vM.roa
Signing time: Thu 02 Jan 2025 15:49:16 +0000
ROA not before: Thu 02 Jan 2025 15:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43773
IP address blocks: 91.200.40.0/24 maxlen: 24
91.200.41.0/24 maxlen: 24
91.200.42.0/24 maxlen: 24
91.200.43.0/24 maxlen: 24
91.225.136.0/24 maxlen: 24
91.225.137.0/24 maxlen: 24
91.225.138.0/24 maxlen: 24
91.225.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:ee:dd:6d:65:67:8c:44:16:3d:bb:08:77:66:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Jan 2 15:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05854477bc5cdc40735db2d0534c1272ff16f2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:f3:c1:7d:c9:96:42:6b:2e:f1:27:06:e8:
76:c1:62:a3:e8:04:76:4f:dd:d4:a2:75:a6:4d:cf:
64:be:69:50:14:70:37:f9:11:4e:d8:ed:55:d1:42:
da:9f:c2:79:46:98:75:77:93:33:b2:28:47:8f:8e:
55:5d:e6:a6:94:b7:70:ec:af:8e:30:85:76:c9:88:
44:3d:30:5e:d0:5e:f2:84:55:5a:af:bf:fb:e3:ee:
de:08:c3:d3:52:00:81:96:0b:bb:5f:a5:67:ef:8b:
93:5e:df:19:ac:b0:ee:86:13:5a:70:77:a2:f0:38:
da:9b:30:79:42:42:b0:d3:17:f8:e9:a8:9e:ef:e8:
0c:19:31:dc:cf:f9:40:ce:d0:c0:98:60:f4:d7:7d:
40:2b:e8:34:f8:ec:a1:02:d7:80:1a:f8:ec:ad:be:
c9:38:b3:2a:5f:fa:65:0c:e2:80:9d:70:e1:13:08:
f7:f8:e3:40:89:19:e9:a8:fd:b8:9d:a4:e7:c8:a5:
87:12:a0:3b:ae:49:c3:3f:8a:df:bf:d1:46:aa:ce:
3e:1d:5d:3d:89:d1:83:bb:ba:fb:66:80:33:03:dc:
d1:3e:33:47:e1:23:a6:1f:7b:f5:19:23:57:9d:2c:
d7:9e:3b:4d:4c:ff:e4:88:18:20:2a:99:43:ad:aa:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:44:77:BC:5C:DC:40:73:5D:B2:D0:53:4C:12:72:FF:16:F2:F3
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/BYVEd7xc3EBzXbLQU0wScv8W8vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.40.0/22
91.225.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:b5:5d:66:4f:56:08:39:c4:e1:46:34:45:4b:ae:d3:92:72:
9f:2c:17:64:f8:a7:5b:fc:b5:93:ba:4e:b8:8d:11:20:3f:99:
7a:ed:3f:66:c0:1e:5d:62:b1:77:f2:bc:bf:40:b3:5a:8a:c9:
ca:ee:51:1d:81:55:6b:d4:ec:24:ff:56:30:bb:9d:18:dd:32:
6b:a6:35:b0:a1:1a:76:09:78:a0:71:a4:92:fc:91:7f:5e:ba:
f7:11:02:83:35:0a:90:27:a6:fa:0a:d3:d1:77:d7:fe:7e:da:
fd:af:3c:bd:ed:a0:85:6e:0b:0a:1d:aa:ab:aa:00:76:58:71:
45:22:ca:a7:cf:2e:b7:c4:1b:79:45:ea:61:07:a1:7a:81:f7:
e6:82:e6:96:67:c6:a0:5b:da:40:da:18:ee:35:66:8b:36:e2:
8d:0f:db:84:29:6e:3c:5d:1a:e6:70:31:2f:2a:8c:0a:4e:3d:
7f:18:d4:92:3a:4f:08:67:5c:fd:de:3c:96:2d:97:df:c9:96:
64:86:6a:42:7a:c7:18:50:24:68:04:60:7f:dd:df:bf:a8:b6:
08:47:14:dd:18:d4:f8:86:e0:5f:b7:f5:d6:d2:0f:e9:7a:3c:
35:14:89:4c:7e:46:e9:50:05:6b:f0:2d:90:f1:98:f5:a6:59:
6c:80:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net