Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/hRAHaXw08T46yQXdPdRGo5FEyKc.roa
File: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (raw, json)
Hash identifier: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=
Subject key identifier: 85:10:07:69:7C:34:F1:3E:3A:C9:05:DD:3D:D4:46:A3:91:44:C8:A7
Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial: 019421B180A019E0A74E3E254E5CC1182F76
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/hRAHaXw08T46yQXdPdRGo5FEyKc.roa
Signing time: Wed 01 Jan 2025 11:47:48 +0000
ROA not before: Wed 01 Jan 2025 11:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57593
IP address blocks: 91.233.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:80:a0:19:e0:a7:4e:3e:25:4e:5c:c1:18:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
Validity
Not Before: Jan 1 11:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851007697c34f13e3ac905dd3dd446a39144c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:bb:17:df:1b:64:29:73:31:d9:3c:4d:23:
1c:b8:4b:a5:fc:b9:bc:17:8a:1f:e9:d5:96:d5:f8:
33:d9:97:0a:8d:7f:64:50:94:a9:89:cd:15:99:13:
53:76:35:aa:5e:44:bd:6e:1e:d1:80:ef:9e:0a:88:
7c:10:a4:48:0c:e6:75:d4:ef:e1:d5:96:2a:e4:a3:
ef:4e:fd:d4:07:4d:80:f1:fc:70:44:65:92:3e:cf:
01:66:84:b6:a9:ed:54:d9:f7:58:4d:84:bc:70:54:
62:70:5c:c9:a8:b1:f6:c1:0e:3e:72:2c:63:b7:22:
8e:fb:0b:66:d0:19:54:a6:5f:49:12:ac:df:8c:5e:
b7:8e:4a:da:e3:8d:bb:d7:f4:7a:a0:24:11:e6:9f:
b5:eb:b2:50:b6:de:e2:da:52:07:ba:aa:c9:ee:40:
ac:01:02:6a:8f:23:5e:df:99:8e:45:1e:25:78:69:
91:27:4e:e6:ae:d0:fa:13:2f:99:5d:38:8d:12:f7:
43:e3:58:85:35:df:b9:07:3c:37:2a:7a:a4:e8:18:
63:7b:f7:02:e2:b5:9a:b8:e9:e5:c7:58:4a:18:d3:
0b:a1:19:62:70:fc:b2:ee:51:8a:1a:37:e6:96:3e:
76:1a:b0:fc:d2:8a:03:f6:23:af:f3:70:b7:f0:e1:
09:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:10:07:69:7C:34:F1:3E:3A:C9:05:DD:3D:D4:46:A3:91:44:C8:A7
X509v3 Authority Key Identifier:
keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/hRAHaXw08T46yQXdPdRGo5FEyKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:5c:88:10:91:79:a5:e1:fa:8e:51:09:f7:65:d0:fc:72:a6:
aa:50:83:19:92:d8:52:09:3a:96:c2:5c:05:f9:c4:24:05:5f:
40:3b:56:77:b5:4a:5e:78:7e:87:84:95:3e:9d:8a:1b:49:0c:
93:5b:c7:c2:26:aa:c8:b1:bc:51:9a:07:2e:9f:54:21:df:20:
c5:d2:d3:e1:26:06:76:32:a3:9c:e8:b1:47:9b:42:d1:f5:c0:
bb:88:35:05:14:81:55:86:ca:fa:fe:99:e6:4d:70:5a:54:39:
0f:fd:d2:ba:c6:4d:e0:90:8a:e6:44:33:11:85:80:0f:6d:3c:
b6:e5:af:6d:eb:f6:56:ee:25:54:53:4c:3b:a2:af:cd:29:1a:
15:7a:3a:4a:2a:2c:c7:fc:74:de:a9:c6:6d:0d:f2:49:6b:24:
0d:2d:03:e6:f6:60:df:c9:02:3f:bd:9c:36:5f:48:9c:9e:f6:
00:be:c4:9d:f4:e6:1f:d5:bb:16:25:a9:c3:04:65:4e:03:a9:
e3:11:b5:2e:07:2a:4a:69:db:01:a8:e9:8f:30:92:2f:da:6f:
af:ef:c6:9f:a2:da:90:e4:41:a9:2c:f4:5d:1e:97:83:c0:63:
e9:f7:2e:54:c8:7b:66:98:40:33:72:d4:c6:c8:d9:8c:d3:1e:
9c:78:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net