Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa
File: 1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa (raw, json)
Hash identifier: iH5nOf9Pb3Kl/sC7b3allhtNGpIaxcmUvhP78iH8szA=
Subject key identifier: D4:9F:43:70:26:1D:DD:0F:E3:74:42:6D:A7:C7:19:50:0F:1F:93:D7
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019423D6FB2B2D032441C903D07AF53B2005
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51241
IP address blocks: 91.207.138.0/23 maxlen: 23
91.207.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fb:2b:2d:03:24:41:c9:03:d0:7a:f5:3b:20:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d49f4370261ddd0fe374426da7c719500f1f93d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:ab:96:dc:39:f5:40:7d:43:25:49:ea:46:
c0:40:9f:7a:2c:86:7d:cd:06:6a:c3:23:c2:8c:1e:
c5:ce:3c:4e:73:d6:6e:18:79:56:64:0d:4f:7a:b5:
87:d9:22:43:b6:69:2d:b8:d9:1d:3f:0b:de:65:7f:
ad:cb:04:90:3c:c8:e2:28:95:4c:c3:e7:15:d1:08:
d3:5e:9c:df:79:a7:be:f0:d2:38:25:6a:46:50:e5:
19:6e:a8:95:e5:7a:78:bd:b5:f5:f1:db:e7:92:2e:
8a:85:32:8e:7d:7d:cc:76:36:8d:fc:49:48:a4:96:
f7:3f:51:46:0c:1f:60:95:78:2a:73:40:52:05:fd:
e2:db:b1:0e:b6:fb:ce:40:6f:69:a7:98:66:2f:67:
5e:cb:ee:0b:68:bb:00:0c:a5:5e:55:c0:36:d0:43:
59:e4:9b:da:cd:ce:19:66:63:fd:90:20:d4:ba:8a:
c6:a4:bd:6a:29:0e:6e:8b:3e:04:73:ac:bf:86:89:
6b:1a:3f:da:b8:ef:dc:4c:8b:74:3b:6a:cc:0c:27:
7a:a8:88:9b:16:90:75:f6:9b:62:b0:8d:e5:89:28:
9b:0a:01:65:95:1a:0a:a7:2e:43:7c:d8:d7:08:ee:
38:80:41:d7:03:33:4e:30:e7:f6:ad:8f:7e:fa:f3:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:43:70:26:1D:DD:0F:E3:74:42:6D:A7:C7:19:50:0F:1F:93:D7
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/1J9DcCYd3Q_jdEJtp8cZUA8fk9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.138.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:7d:bc:c1:1a:37:1b:be:af:d6:48:4f:f6:7a:9b:93:a3:5a:
c2:e8:91:16:c4:0d:84:32:ec:2c:9c:6c:40:3c:a7:9f:e5:15:
fc:12:f8:62:9f:95:6d:a3:2a:8d:bf:13:65:60:ef:40:90:b8:
6b:a4:32:50:74:0b:9c:a0:3a:9f:c0:f4:23:43:bd:33:5d:5b:
f3:fa:b2:01:1b:a0:3b:5a:20:d5:0e:15:47:e7:db:98:70:14:
91:c6:c2:19:fb:aa:f4:44:28:dd:5e:30:79:c4:c1:f3:84:c4:
3a:92:6b:4f:89:d6:32:3e:6a:68:6c:a9:5d:8c:ab:01:5d:93:
e8:05:25:88:95:2f:06:8c:96:8e:30:43:d3:d4:a2:09:b9:28:
bc:c2:80:40:79:93:f3:67:5a:10:cc:08:84:02:b7:02:b2:4c:
c1:b4:65:c1:3f:bb:3b:05:a8:9a:95:7c:af:47:ba:42:bb:41:
1a:e6:25:3b:53:04:cc:16:48:24:b8:ea:1c:22:a3:78:d7:91:
af:ec:9d:00:cd:5d:80:55:39:0f:fd:f4:ed:4b:21:cf:fa:d7:
d2:67:04:ce:2f:d9:8d:42:09:be:ae:cb:4a:ca:ad:37:6b:c4:
54:be:6c:ac:5d:99:68:ec:84:48:e6:4d:3a:49:3a:d6:f4:a2:
77:32:69:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net