Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/n5tnQjmPsSAa7e0U_BISzqIEQuY.roa
File: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (raw, json)
Hash identifier: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=
Subject key identifier: 9F:9B:67:42:39:8F:B1:20:1A:ED:ED:14:FC:12:12:CE:A2:04:42:E6
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 019423D7314DD1F780CBA663C84FB8D02402
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/n5tnQjmPsSAa7e0U_BISzqIEQuY.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56623
IP address blocks: 91.231.54.0/23 maxlen: 23
91.231.54.0/24 maxlen: 24
91.231.55.0/24 maxlen: 24
193.111.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:31:4d:d1:f7:80:cb:a6:63:c8:4f:b8:d0:24:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f9b6742398fb1201aeded14fc1212cea20442e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:6e:41:39:10:28:ab:09:fe:60:65:1b:42:
c9:38:7a:98:25:85:0f:1e:07:b2:0b:74:55:e5:91:
e3:72:53:5b:b0:fe:b6:7a:fb:ea:11:89:74:64:8e:
d2:5b:81:19:b7:a0:d7:56:ef:f2:21:4a:12:f4:bd:
cd:19:31:fc:44:4b:a2:7b:56:ff:fe:1b:c9:50:ff:
e3:5e:40:06:95:ad:81:6e:ac:0d:b3:57:8d:fc:ce:
1e:a4:d6:d8:a7:60:fa:83:93:ff:cb:d4:22:7b:fa:
1b:a7:b4:e2:18:c9:53:f6:22:9c:9b:d9:f5:69:97:
7b:a7:d4:75:2c:b4:c2:b9:a1:68:ad:f4:b0:6e:ec:
b9:75:75:58:bf:73:47:63:5c:b5:94:64:38:a1:59:
5d:49:1e:4d:11:94:9f:2e:85:58:41:7d:b9:b7:de:
db:f2:e7:58:d7:a1:34:c9:db:16:01:06:1c:09:0c:
28:0d:c4:1a:45:f2:c5:f1:0f:fe:3b:15:46:4f:7e:
6c:95:68:c1:2b:2c:e0:8b:a7:8c:35:cb:48:bd:a4:
68:88:13:ba:22:ed:a3:30:58:68:d9:75:c8:48:77:
9d:5f:22:fa:4d:4f:2d:5d:09:10:03:20:cb:f4:84:
32:27:00:3b:3b:aa:f2:47:0d:76:fd:13:9b:4f:61:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:67:42:39:8F:B1:20:1A:ED:ED:14:FC:12:12:CE:A2:04:42:E6
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/n5tnQjmPsSAa7e0U_BISzqIEQuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.54.0/23
193.111.83.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9f:95:34:f6:52:b3:29:39:33:df:55:54:0f:29:33:1d:a6:
21:ee:f0:f3:56:5d:f0:f0:89:d4:0c:88:ad:44:48:e2:ac:e3:
9e:90:18:a4:05:4c:ef:d9:6c:76:c4:28:08:f8:28:1c:96:3b:
20:00:89:d4:61:53:09:d1:7e:74:8f:20:3a:bf:8b:1d:1b:75:
19:2e:d7:7e:d0:24:39:c9:ea:3b:a7:24:12:19:76:80:20:36:
b5:bb:dc:7d:66:37:5a:ce:da:d3:97:03:82:7a:47:50:4f:57:
04:6e:a3:14:40:e5:6d:00:27:64:20:9b:c4:3a:0e:92:78:9f:
ba:42:14:49:ce:68:2a:4e:18:84:6b:b7:33:ce:b4:58:55:57:
c8:22:2c:19:71:aa:6c:e4:52:e1:9a:b0:fc:b9:bd:36:08:c3:
43:c2:ea:a8:f1:93:09:33:1e:15:78:b9:ac:6a:48:ac:36:43:
63:0f:9f:7f:57:71:68:e3:ff:a3:39:68:e6:62:11:09:f3:03:
67:e9:24:fc:8e:3d:60:ba:25:e8:50:d7:bb:22:be:86:d8:43:
a3:3e:ea:6c:c9:fb:8c:f3:aa:0b:4c:58:63:71:45:5e:84:40:
69:2e:81:c9:f0:5e:df:ae:53:e2:c3:1c:ea:c4:de:49:ca:72:
03:14:82:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net