Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5uVuvju1BqfCC9TlwKIrEaaUVXk.roa
File: 5uVuvju1BqfCC9TlwKIrEaaUVXk.roa (raw, json)
Hash identifier: 7KIg0ieMJiNuV46pTrLRYuuK/hkTM0/9/2Qw5cXqUlo=
Subject key identifier: E6:E5:6E:BE:3B:B5:06:A7:C2:0B:D4:E5:C0:A2:2B:11:A6:94:55:79
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3CEBF28921DA376E349FBAC5BE8E6
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5uVuvju1BqfCC9TlwKIrEaaUVXk.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212898
IP address blocks: 91.205.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ce:bf:28:92:1d:a3:76:e3:49:fb:ac:5b:e8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6e56ebe3bb506a7c20bd4e5c0a22b11a6945579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:ae:3b:e7:ad:b5:bc:31:ac:b4:a8:0f:73:
4b:a2:5f:38:bc:d9:c1:89:51:e9:9a:f5:a6:d8:fb:
41:a9:9c:39:02:8f:8d:48:73:52:cb:ee:c1:20:eb:
8a:52:fa:6c:87:95:48:bc:8a:eb:80:a9:21:50:0c:
91:62:4f:ee:21:84:ce:de:4e:09:ee:dc:db:26:1f:
c6:1d:cd:1a:24:66:63:68:92:c4:9b:e4:b1:3b:78:
e8:af:74:38:b6:56:f8:63:e3:de:78:49:47:ce:6f:
6d:cf:66:09:e0:8c:5a:50:4d:d6:92:05:dd:2e:64:
87:42:76:f1:83:1b:24:39:00:07:3f:32:39:f0:89:
df:48:ed:4e:89:2e:ba:b7:fd:c6:3e:3b:77:d4:3e:
36:b2:0a:b5:f4:bc:3b:5e:30:6e:19:32:f1:ea:ce:
08:62:fd:31:ed:fb:a5:ad:7c:1e:2a:a2:4e:ac:f9:
bc:79:a8:a8:f5:7b:bd:fd:8d:eb:a4:0d:ee:a6:a1:
22:86:b3:14:de:6a:80:2e:f7:c8:44:67:43:cd:62:
b7:23:10:b7:0b:4b:c8:21:ea:c1:ef:2b:3f:31:96:
61:55:61:ed:74:a2:4a:14:ec:e0:a7:22:4f:1d:68:
3e:4a:5f:d0:74:08:97:97:33:68:50:ce:da:d7:b6:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:6E:BE:3B:B5:06:A7:C2:0B:D4:E5:C0:A2:2B:11:A6:94:55:79
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/5uVuvju1BqfCC9TlwKIrEaaUVXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.199.0/24
Signature Algorithm: sha256WithRSAEncryption
52:14:2e:f6:30:4d:28:7b:0c:81:45:9a:99:2a:7e:a1:3d:81:
d2:ed:02:c6:30:6b:eb:d1:9b:d6:1d:70:60:08:a8:bf:9c:27:
bb:d2:cb:c6:9c:89:9c:06:e7:34:e9:3a:d4:c9:69:c3:7c:cc:
c2:19:cb:8b:d5:1a:68:ee:1e:87:e4:d2:f6:f6:e1:8b:24:59:
22:86:94:74:47:af:c6:aa:75:c2:8d:22:88:a5:26:06:c3:5f:
ce:90:7b:b5:10:4a:90:10:8f:2b:b7:d4:fd:4e:15:f9:d6:2b:
a2:0a:54:2e:b3:87:ce:ac:82:e4:ca:8a:77:9c:89:77:f2:3f:
d2:5c:ee:c8:5d:98:b9:a9:30:49:00:69:c3:15:11:38:31:dc:
fa:8b:c8:8a:fa:e5:0b:f0:6f:df:0c:77:19:2d:9d:16:3f:4b:
f8:80:69:da:39:c3:e0:37:7e:70:7e:1f:a2:bc:41:5d:8a:93:
e3:80:ff:bc:96:81:55:bb:75:92:67:f5:e2:6f:4c:73:52:9e:
e9:fd:1a:71:1b:f1:59:d9:48:51:2d:f2:d4:e2:8c:d7:b5:ad:
0d:60:c9:b5:f9:19:3b:84:e8:5d:d6:3b:83:08:73:10:42:49:
73:e7:fe:0e:1e:81:8a:42:6c:35:b4:12:56:fc:39:c2:8c:79:
23:0a:49:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net