Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/5v7duN9Ge8yGISXqxG3qUzWZAS0.roa
File: 5v7duN9Ge8yGISXqxG3qUzWZAS0.roa (raw, json)
Hash identifier: 1SA0Oa41y733C6WZxDupsHaqhvUOZQl7E3vDY0FiKPY=
Subject key identifier: E6:FE:DD:B8:DF:46:7B:CC:86:21:25:EA:C4:6D:EA:53:35:99:01:2D
Certificate issuer: /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial: 019420D6032EFB1C3D6EBD5372608D286E5E
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/5v7duN9Ge8yGISXqxG3qUzWZAS0.roa
Signing time: Wed 01 Jan 2025 07:48:03 +0000
ROA not before: Wed 01 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57828
IP address blocks: 91.235.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:03:2e:fb:1c:3d:6e:bd:53:72:60:8d:28:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6feddb8df467bcc862125eac46dea533599012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:5b:5e:94:7b:64:34:4f:96:73:6a:cf:37:
80:8b:91:16:68:74:ee:06:5f:47:1b:f8:04:ef:a9:
06:b1:0b:a5:29:96:3b:97:4a:48:df:da:b2:2f:32:
f4:a9:4f:2e:73:f3:12:de:7e:c8:44:9d:0b:52:e3:
83:91:e4:4f:05:af:70:fc:e2:7c:d0:94:ce:6d:6a:
c6:99:7c:44:eb:75:a2:21:0a:ed:08:3c:c6:b7:29:
9d:8d:76:d2:34:88:3c:ad:b3:a3:30:e2:b8:96:97:
46:f8:f9:ad:5a:4e:56:3f:14:b6:0f:fb:95:77:ae:
e6:c6:86:65:be:e5:e9:52:2c:02:a1:0a:8a:8b:c1:
8c:41:69:a5:44:72:0d:82:d3:97:cd:0e:0c:51:ab:
5d:0a:f2:bd:97:d6:6f:78:7d:3c:24:b5:14:e2:04:
d1:fd:65:9e:fe:ed:8d:7b:86:90:a8:ca:f1:dc:c0:
64:ef:8e:7d:91:33:dc:fa:88:85:51:3d:70:cc:d4:
55:fd:16:cd:1a:06:37:02:38:9f:4b:e6:08:0c:15:
1e:a1:3d:ee:8e:5f:b1:3c:a1:8d:8e:a6:e3:ef:81:
5f:a7:82:0c:0c:15:e8:78:6a:09:23:cd:50:25:0e:
b3:85:eb:be:ce:e8:12:f4:98:1b:c6:a7:58:7e:a2:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:DD:B8:DF:46:7B:CC:86:21:25:EA:C4:6D:EA:53:35:99:01:2D
X509v3 Authority Key Identifier:
keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/5v7duN9Ge8yGISXqxG3qUzWZAS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ef:aa:c4:9a:a8:36:99:e7:0d:af:c6:89:a2:68:f8:98:fc:
e3:4a:88:1c:c3:e5:8a:a3:ff:14:ac:41:1d:8a:cb:57:30:5a:
f5:5d:c6:3e:15:c2:3d:4e:9c:11:cc:60:5b:41:26:5c:e6:39:
61:e0:2f:1d:6a:52:68:31:09:e5:4e:5e:a3:ea:e4:08:6b:5c:
6f:27:ff:b1:d5:33:92:8c:b4:a0:22:16:d1:f8:20:8a:d7:b6:
d7:35:28:93:94:c7:86:39:27:99:b2:3e:4f:20:0c:7a:ee:f6:
c6:16:3a:53:13:6c:03:e5:20:c2:5a:18:84:e4:9d:99:7a:94:
86:2e:44:4f:ce:5f:2c:39:e8:f3:bf:2a:da:50:38:44:1b:7c:
4e:73:ef:21:64:cb:57:c5:d3:dc:14:a6:7a:7b:06:78:4d:ae:
79:ec:d5:f0:dd:0b:46:a1:a3:6e:b8:bf:08:96:d9:7d:fb:34:
74:16:08:13:6a:ed:2f:20:51:e9:f8:69:5e:9d:05:77:70:47:
dd:44:54:f9:19:eb:bf:c1:aa:2b:5a:32:28:ed:73:a0:42:73:
3d:ba:d2:13:9e:eb:95:f6:13:20:6d:cc:9f:1b:20:c7:a2:4d:
42:9b:11:73:50:cd:f8:38:fc:1d:11:36:d5:5d:3b:42:ed:7a:
52:8b:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net