Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa
File: 7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa (raw, json)
Hash identifier: sMayzuz7AI9s61a/aq9HH1Cc6asWKL5qDPVUoL1bHKQ=
Subject key identifier: EC:26:40:81:4B:D0:3E:EF:B0:AD:B5:7E:37:D6:C4:77:70:A0:39:6B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 0194274772A71FCADEB67E089A384CDB407A
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa
Signing time: Thu 02 Jan 2025 13:49:41 +0000
ROA not before: Thu 02 Jan 2025 13:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56544
IP address blocks: 91.225.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:72:a7:1f:ca:de:b6:7e:08:9a:38:4c:db:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Jan 2 13:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec2640814bd03eefb0adb57e37d6c47770a0396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:11:dc:45:c7:98:3a:b2:f6:2c:11:4f:b1:
fb:3b:ea:30:3a:aa:bc:86:3f:44:86:ee:89:90:97:
0d:eb:68:89:71:d7:f8:b9:26:b8:b6:db:1f:62:73:
79:48:28:bd:00:bc:75:d7:7d:91:27:0a:b1:68:2c:
c8:d9:e3:de:ef:2f:49:96:9e:16:cd:62:7a:e1:3a:
2c:46:06:0e:57:78:23:c7:47:fc:e1:73:29:54:a4:
29:dc:92:aa:60:eb:52:89:58:0d:ae:39:6d:67:df:
81:56:c4:7d:a5:53:d5:02:b1:05:b5:b8:94:29:8d:
a9:5e:72:57:bd:69:4d:33:4f:1d:d3:d9:f5:e1:d1:
bd:7a:04:b6:e1:16:9b:f8:23:4d:64:bc:b6:9c:82:
6d:cc:a2:69:40:32:35:c3:d3:10:5e:d8:08:e1:b9:
8f:f1:60:41:8f:c5:ad:bc:2b:ca:27:b2:13:84:e2:
6e:61:ed:7c:4c:e4:71:ae:60:cc:5e:55:90:35:08:
7b:7c:5b:95:22:71:b4:14:52:67:71:43:2a:e0:c4:
08:b1:bd:7a:0e:d3:a7:3f:e1:3e:64:da:0c:3f:d7:
e9:92:2a:8d:ec:28:d8:38:db:42:36:ec:ff:81:79:
1c:99:59:46:c4:47:f3:36:80:0a:72:ed:45:da:cf:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:40:81:4B:D0:3E:EF:B0:AD:B5:7E:37:D6:C4:77:70:A0:39:6B
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.176.0/22
Signature Algorithm: sha256WithRSAEncryption
52:22:2a:a5:98:c0:3f:aa:88:09:44:fb:8f:8d:60:ca:bd:b7:
1b:1d:7d:e6:36:b8:6a:73:15:26:2f:9f:3f:06:45:43:bd:cd:
9a:fe:8e:03:41:16:e6:a3:42:1c:7d:aa:d7:76:09:04:4e:41:
19:ab:d2:63:53:72:67:0b:ff:f3:61:ae:4d:b3:66:02:d2:63:
e1:a5:d8:0a:c8:e0:5c:bd:f3:32:1d:99:63:ea:3f:f7:64:cd:
45:e9:48:76:4f:ab:d5:4d:b0:7b:a0:70:04:a8:c2:f5:60:ac:
b6:5f:07:b5:5e:08:b1:93:d1:a0:0b:66:41:9e:51:22:b3:d8:
4e:c2:e5:ab:54:24:1e:af:46:30:56:df:b0:51:8f:37:97:d9:
cd:09:da:fe:41:0c:29:f3:56:a9:6b:35:ef:9a:9b:52:3c:eb:
ce:9c:7f:6f:1d:86:2a:66:5d:b4:a7:0b:46:fc:83:3e:9e:77:
27:c8:3c:fd:12:1d:1a:b4:0c:42:86:0c:e6:08:47:53:4a:9b:
e4:82:d1:8a:99:dc:41:b9:60:a5:ef:b4:f8:0a:fe:b8:97:fa:
cf:1d:eb:cc:fd:5e:7e:56:57:cb:14:bf:d4:0d:dc:da:77:c3:
62:6b:8d:0b:6d:b9:09:dd:7f:60:5c:b7:ee:3c:58:a9:24:e4:
84:3f:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net