Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/1FWlz0UmXvJd0zwOuSc3rrGoFsg.roa
File: 1FWlz0UmXvJd0zwOuSc3rrGoFsg.roa (raw, json)
Hash identifier: Z9j2Ppjp4Qt36VWExXtwgn0OhYcd4t+T5FV+FimtPqA=
Subject key identifier: D4:55:A5:CF:45:26:5E:F2:5D:D3:3C:0E:B9:27:37:AE:B1:A8:16:C8
Certificate issuer: /CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Certificate serial: 01955D5497DD4BDFEA7B6D73065503FDE6F6
Authority key identifier: 6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/1FWlz0UmXvJd0zwOuSc3rrGoFsg.roa
Signing time: Mon 03 Mar 2025 18:46:19 +0000
ROA not before: Mon 03 Mar 2025 18:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205420
IP address blocks: 91.223.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:54:97:dd:4b:df:ea:7b:6d:73:06:55:03:fd:e6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Validity
Not Before: Mar 3 18:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d455a5cf45265ef25dd33c0eb92737aeb1a816c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:e3:21:bb:11:c9:4b:a3:92:e5:ca:77:9f:
22:91:b1:83:f0:13:17:67:98:12:dc:52:0d:be:92:
8f:ca:55:42:7e:6f:61:dd:e1:f7:ce:c5:ab:98:78:
dc:66:57:45:c2:09:67:c0:56:0f:8e:af:67:f4:99:
eb:0a:24:3d:5d:30:96:b1:73:01:8d:ab:d9:d6:b6:
3d:a2:66:16:cd:25:20:bd:31:94:ba:e9:bc:c4:61:
20:9b:c7:ec:e4:01:a7:84:65:07:8e:75:3f:8d:d7:
09:12:d1:2c:e0:52:7d:3e:4a:47:74:2b:16:c1:1b:
78:b9:a3:9c:48:87:2a:ab:a2:40:64:35:0d:54:1f:
37:d0:c3:98:39:40:66:cb:cf:0c:f6:3f:60:38:84:
20:4b:fe:49:7b:9f:1a:d2:a4:c7:b9:57:f6:e1:9d:
24:03:08:9f:b9:dc:8c:b9:0c:81:72:83:b5:ea:43:
fa:f8:61:57:c3:fb:c2:ab:7b:16:e1:0c:b5:09:ee:
fe:08:d8:8f:43:6d:e4:9e:ad:a1:eb:85:b6:12:7f:
54:05:7e:52:61:1a:53:e6:19:80:51:7f:69:66:23:
69:de:e7:59:95:02:82:44:3d:e7:39:9d:8a:27:25:
ff:67:83:9b:10:11:97:ee:70:ab:38:16:53:43:d6:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:A5:CF:45:26:5E:F2:5D:D3:3C:0E:B9:27:37:AE:B1:A8:16:C8
X509v3 Authority Key Identifier:
keyid:6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/1FWlz0UmXvJd0zwOuSc3rrGoFsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ad:12:6a:ae:fd:fb:b2:45:5a:6c:ab:37:de:6e:2e:b2:07:
84:64:14:5b:a2:b9:23:63:41:df:87:01:1e:d8:f6:4f:59:39:
79:4b:c6:fd:13:69:df:bc:26:36:24:d3:de:ec:87:0d:ed:74:
d1:0d:bd:9a:c3:f0:c9:95:f6:24:30:8c:0d:fc:67:72:31:2c:
fc:e8:f3:c8:92:5c:8c:ac:11:c1:e5:cd:9e:0a:ea:f0:9a:b8:
35:5a:32:67:f2:5c:68:8d:e1:f8:ff:34:2a:62:ff:d7:6d:c3:
0f:81:b7:8a:5f:0f:e0:ea:31:51:ce:49:a2:3a:5a:29:70:25:
86:1d:ec:0e:c7:dc:35:a1:23:a8:b8:0d:c1:8b:ad:8c:67:a4:
fb:0c:92:4a:49:b9:d2:5a:5a:b5:5e:8a:3d:2a:00:35:0e:d0:
68:11:eb:99:59:77:ab:86:d0:12:21:0b:0f:5b:60:1f:43:79:
ab:d9:bf:e2:77:5d:cf:56:21:e5:9a:27:dd:ef:d3:3c:ae:54:
eb:05:5b:03:6f:17:68:58:af:2c:f9:73:72:d8:96:e5:57:50:
e9:96:20:68:cb:b1:69:5e:da:0b:a5:5c:6b:ed:3d:08:fb:32:
f4:24:13:1d:7a:11:9f:ec:b4:14:0b:6a:1b:d5:43:74:e8:37:
01:9d:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net