Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/Njf2TltOZrdEvD_qof8H0kAWoWg.roa
File: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (raw, json)
Hash identifier: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=
Subject key identifier: 36:37:F6:4E:5B:4E:66:B7:44:BC:3F:EA:A1:FF:07:D2:40:16:A1:68
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 019426D95A5B85BAB58F9C0B32FDBA814F26
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/Njf2TltOZrdEvD_qof8H0kAWoWg.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210091
IP address blocks: 89.19.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:5b:85:ba:b5:8f:9c:0b:32:fd:ba:81:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3637f64e5b4e66b744bc3feaa1ff07d24016a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:78:0a:ee:62:07:fe:89:ed:e0:ec:39:64:
dd:72:e4:49:8c:9b:86:7a:88:c0:55:a1:7a:b1:e7:
f2:f1:99:02:86:24:30:a4:17:b6:a0:37:21:11:f8:
2f:18:ea:c3:42:cb:69:c5:02:a6:56:98:18:7b:2c:
74:3a:ad:eb:0d:ca:0d:e1:d5:fe:07:ec:ca:12:16:
d3:62:ad:30:d3:22:ed:49:cf:d2:90:9d:e3:52:68:
c2:7a:2b:b1:35:3a:c8:1e:7d:81:47:f5:36:d2:20:
50:f4:a1:94:20:39:bb:f8:b1:e0:61:08:e6:be:2a:
c6:3d:84:7d:25:c9:cf:8a:ba:38:f3:23:5b:d3:62:
b7:39:f6:e1:0d:42:53:50:ad:6d:8f:91:f6:57:e5:
66:1d:76:03:f2:b2:49:a8:6a:5c:22:c0:ce:53:9b:
b5:7c:f0:1b:dc:e1:b2:7c:6c:4c:ba:d6:a2:8a:d6:
01:e1:92:de:ba:6f:c3:f2:c0:cd:6a:1a:bf:19:dd:
55:12:f1:6d:60:98:eb:10:f7:31:93:fe:b0:c9:20:
2f:b7:a7:3c:80:89:ed:08:ee:e4:15:45:87:ac:08:
e5:ae:bb:90:21:93:5f:fc:af:3d:5b:ec:bf:9d:f1:
ed:bc:00:28:6f:b8:22:87:5f:d6:3a:a0:dc:af:21:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:F6:4E:5B:4E:66:B7:44:BC:3F:EA:A1:FF:07:D2:40:16:A1:68
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/Njf2TltOZrdEvD_qof8H0kAWoWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:19:3e:ea:87:d5:20:9c:20:dd:61:8c:af:72:08:4a:e9:b2:
5c:02:a9:20:38:bb:9e:18:a0:81:34:b3:7d:ad:05:10:4f:ce:
9c:1e:6f:7a:fa:cd:f5:11:87:43:eb:87:91:df:0f:11:48:d1:
e3:90:74:a1:6c:04:93:ac:bd:40:aa:5c:64:40:54:5d:60:73:
7c:31:2d:79:2e:e8:ce:d6:09:dd:74:64:56:7e:d7:5d:7d:40:
ab:18:a4:07:3a:51:4e:b9:04:26:54:d3:d5:bb:0c:91:67:c9:
ce:e8:9b:69:e2:b1:df:fa:8c:79:06:f2:ba:d6:74:07:3e:5e:
60:41:8f:09:61:3c:cb:4d:c4:50:f8:8a:92:35:27:61:9d:85:
9c:50:c1:31:17:0e:5f:f5:d0:d8:17:f6:43:52:7f:8f:c3:c7:
42:78:f9:30:2d:c2:42:70:43:8f:ac:28:44:a1:31:df:00:7b:
de:6f:70:86:83:34:a6:23:e1:19:f5:22:6e:eb:f6:22:32:63:
4a:05:83:31:e8:a5:77:45:e8:e1:bc:41:64:db:9b:a8:8c:25:
ea:28:b1:0c:e8:3c:ed:d1:b7:39:31:57:77:49:fd:f4:33:95:
c0:79:9a:40:59:a0:0f:40:db:b3:6e:39:d6:01:04:86:41:af:
ca:55:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net