Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/j4nA-5dcYXHEDW8ahrcEwwSSveI.roa
File: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (raw, json)
Hash identifier: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=
Subject key identifier: 8F:89:C0:FB:97:5C:61:71:C4:0D:6F:1A:86:B7:04:C3:04:92:BD:E2
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 0194228DF51E6102296F9C2F1D9862A80BC8
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/j4nA-5dcYXHEDW8ahrcEwwSSveI.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43887
IP address blocks: 91.198.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f5:1e:61:02:29:6f:9c:2f:1d:98:62:a8:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f89c0fb975c6171c40d6f1a86b704c30492bde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:24:d9:3e:e3:d1:f4:b8:a5:71:c7:bf:9a:
ea:e2:66:60:2b:59:11:26:a6:8c:51:c7:fb:15:d4:
14:cf:0e:3f:a1:6e:e3:f0:92:28:40:00:b0:a5:ff:
25:c6:cc:29:6f:6a:dc:40:23:d3:02:02:60:66:59:
9e:c3:7f:59:d0:ae:3e:26:12:c4:b7:51:44:89:fc:
5b:9f:65:8e:9e:ab:7e:57:c5:83:78:ba:0a:a2:fe:
b4:ac:d2:7c:11:4d:0d:fb:70:13:8c:d1:cd:e2:46:
fc:55:6c:60:b8:35:0f:95:91:44:3b:94:33:31:37:
89:d6:4f:23:82:ce:69:13:b3:8a:6f:1a:6a:f4:e5:
98:95:93:51:e9:82:41:f0:38:76:32:8b:65:75:9f:
2c:5b:c8:a9:dd:34:95:b1:21:b0:5d:c0:21:eb:39:
c8:30:62:8a:2a:3b:ef:9f:cd:7a:db:b7:6c:3a:13:
96:ed:e2:cf:32:30:56:34:8f:20:d7:f8:59:f7:3b:
f6:75:21:9c:1f:08:2d:42:76:a5:64:b9:cf:0a:5b:
df:fb:74:9f:e3:af:8f:9b:dd:fe:c4:7e:2f:7d:7b:
f1:bc:73:36:e8:57:38:de:10:53:81:a8:01:31:74:
42:f6:1d:fe:0a:72:c9:6e:55:67:e3:ab:09:bb:5a:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:C0:FB:97:5C:61:71:C4:0D:6F:1A:86:B7:04:C3:04:92:BD:E2
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/j4nA-5dcYXHEDW8ahrcEwwSSveI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.182.0/24
Signature Algorithm: sha256WithRSAEncryption
59:66:7a:7c:36:1a:ae:2b:e8:34:9d:d7:3d:87:7e:4c:5c:de:
21:f8:62:51:76:1b:1d:15:cb:a8:74:b9:c0:e3:9c:42:48:01:
fc:bb:1a:23:1c:db:7a:80:2b:44:ab:42:7c:b0:ef:f2:ce:3a:
e6:0d:5b:d6:85:82:32:33:69:5a:91:48:9c:4f:2e:68:05:78:
dd:e8:e1:bf:fd:bd:09:7c:99:68:2e:bd:41:4e:a8:fe:1c:cd:
c1:aa:6d:76:01:f7:55:d3:22:46:0e:55:dd:f9:ae:e8:5f:fc:
af:b2:ef:cf:69:2a:ed:4d:75:08:95:46:33:68:5f:12:fc:c8:
07:6b:84:68:17:85:90:17:c8:1c:ea:5b:6f:c4:de:43:93:63:
71:d6:78:1a:f4:df:e4:2e:14:12:7e:0e:c7:29:c5:8d:06:46:
92:87:87:8e:25:22:ce:1b:6f:4c:0b:78:30:c1:ac:10:2d:36:
1c:fc:0a:d2:07:fc:66:1a:e1:b9:49:df:fb:39:a6:85:32:f7:
55:f9:2d:5b:40:e9:c7:a4:b6:55:0d:31:96:80:78:2e:65:ee:
83:6f:a0:cb:a3:cb:8f:fb:4d:ab:81:31:87:90:3d:63:27:19:
8f:1c:eb:cf:71:7b:fd:ea:de:22:b9:05:e5:8f:c8:b2:fc:10:
3a:67:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net