Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa
File: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (raw, json)
Hash identifier: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=
Subject key identifier: 1B:30:F9:F4:38:55:66:5E:3F:24:1D:9C:DA:9E:1B:47:02:95:40:D4
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D653F0137D51A27D8ABE3AC3BD760C
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49226
IP address blocks: 89.25.95.0/24 maxlen: 24
94.155.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:53:f0:13:7d:51:a2:7d:8a:be:3a:c3:bd:76:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b30f9f43855665e3f241d9cda9e1b47029540d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:3f:15:5e:4e:1e:3a:14:78:00:f9:0c:0d:
73:19:52:dc:60:22:93:d2:7f:d7:06:76:c3:cf:70:
e8:16:d9:12:90:d5:ec:d4:f9:2a:46:ea:28:7e:28:
5a:33:3d:8a:09:0e:5b:e6:7b:28:b1:97:05:01:36:
eb:a2:ed:36:19:d3:8f:48:4e:d6:21:f5:57:85:7c:
cf:28:62:f0:b6:0f:d8:11:28:be:19:67:ec:c2:fd:
3a:7c:be:61:5e:59:e3:f5:7c:44:17:d6:05:24:36:
6d:08:c4:9e:86:e2:4d:54:69:51:22:43:a4:e4:d1:
f0:cb:4f:56:91:66:8f:44:53:4e:c6:6b:a6:64:58:
32:42:05:74:38:82:6b:f8:67:50:9b:4a:86:6a:8e:
ec:a1:65:17:62:1a:4a:59:a9:91:93:a9:19:a7:ce:
60:20:09:4f:47:6b:c8:81:1b:2c:6f:00:f4:78:56:
09:06:b3:c9:2d:25:60:a0:04:c7:5e:a4:49:49:48:
61:bf:f1:33:d4:32:19:e9:f8:2b:8e:5b:63:b4:e7:
d4:69:36:19:18:8f:91:89:2f:1e:34:45:89:d2:f7:
7f:c7:b3:8c:bb:51:f6:fc:45:8a:25:75:99:25:49:
e7:54:61:f2:ee:c3:ed:66:0f:bd:f4:f3:20:f6:e4:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:F9:F4:38:55:66:5E:3F:24:1D:9C:DA:9E:1B:47:02:95:40:D4
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.95.0/24
94.155.15.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c3:56:b0:37:e0:57:16:91:12:81:00:b8:a7:9e:6b:35:9e:
40:b5:58:de:a6:e6:f3:f4:25:e6:71:22:8c:b9:f4:f9:31:b8:
2e:13:8f:c1:b8:50:d8:dd:b6:09:65:b8:59:25:27:90:df:7a:
bb:c8:84:23:32:d8:17:8f:1e:59:26:d0:b1:62:d5:03:dd:55:
c0:80:69:03:0b:74:81:e7:f6:3b:23:3a:72:fa:c7:cd:96:ef:
3d:e8:e0:10:90:01:0d:33:f4:d9:fc:59:ef:86:af:98:1c:06:
e3:40:ab:ce:6d:bb:f0:5a:f4:52:3a:a0:b2:dd:1c:e2:a5:c6:
d5:08:43:a7:3c:02:5f:f9:4b:c4:39:9c:7b:79:f9:24:28:73:
39:1f:a4:75:e0:3d:53:11:de:52:a1:d5:64:91:67:1a:3d:0c:
ed:73:5f:e3:5b:3c:31:01:62:e0:0c:58:9e:14:57:77:05:78:
97:e5:84:cd:04:f0:d9:de:02:65:69:a0:b5:e8:05:fd:4c:09:
cb:66:4a:de:30:c9:20:6b:ce:31:d2:8c:33:0c:11:88:c6:ec:
45:4b:52:d2:87:17:03:79:a9:16:0e:12:ea:24:40:78:3a:a5:
59:f7:3f:55:0f:00:bd:75:17:f4:f6:72:58:37:e8:ea:be:94:
ff:11:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net