Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa
File: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (raw, json)
Hash identifier: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=
Subject key identifier: AF:F4:77:2F:BE:18:11:8C:20:C2:15:23:99:D2:11:33:C1:AD:E4:2A
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 019423D737DAF74C541A75310AA97C98C38A
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42466
IP address blocks: 91.189.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:37:da:f7:4c:54:1a:75:31:0a:a9:7c:98:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff4772fbe18118c20c2152399d21133c1ade42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:fc:32:69:b4:fb:72:ff:d3:61:75:87:6f:
d6:95:03:c0:55:91:86:c2:f1:1f:a3:22:6d:2c:99:
fb:3e:a2:bf:a6:a6:12:bc:30:58:ad:f8:1c:69:86:
e5:d0:9c:41:72:94:7e:f5:0b:92:d4:1e:40:d6:50:
52:4b:c8:45:82:e1:ae:95:51:61:48:39:cd:8d:91:
ac:06:c3:99:96:8c:92:0a:3d:01:38:22:5c:b7:da:
ba:4f:e3:34:bc:59:17:ec:13:b7:c7:88:45:a6:f3:
e1:a8:7e:21:be:c8:1c:3f:94:4e:da:5f:1d:45:3c:
f1:ea:06:04:a9:f4:71:eb:cd:ec:8f:67:9b:69:9d:
1a:e3:0e:1b:69:4b:25:ec:0f:97:7b:5f:a0:c9:79:
37:a5:08:0a:dc:8f:2c:d2:b8:26:1f:d8:bd:ae:0a:
92:b3:ec:83:32:fa:e8:46:f7:bb:31:7d:7e:34:f1:
5e:79:e2:8b:00:e2:a5:da:49:d5:e8:ec:97:fe:78:
71:87:74:c4:dc:39:79:ba:db:4e:ff:5b:2c:bb:4f:
67:cd:63:4e:8e:d1:a1:be:8f:ae:c9:bd:2e:b0:71:
a8:a3:58:c9:4f:c7:d1:fd:7b:99:e1:39:17:a0:27:
2d:d0:7e:14:ae:eb:c2:f6:aa:10:79:de:8e:f2:cd:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:77:2F:BE:18:11:8C:20:C2:15:23:99:D2:11:33:C1:AD:E4:2A
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.144.0/21
Signature Algorithm: sha256WithRSAEncryption
05:42:85:40:b9:4e:f5:6b:b2:79:4e:c6:6d:4e:98:1e:d5:25:
43:99:59:e7:25:df:4b:e7:62:d7:15:54:ec:a7:58:68:e0:ff:
54:a6:ab:72:5a:de:b9:e6:38:6c:54:29:4e:36:ab:24:7b:28:
7b:da:eb:1f:ad:2f:29:54:82:1a:b1:0a:37:cc:ec:02:56:e6:
df:a8:f9:1f:5b:cc:53:52:50:17:50:33:bd:e9:ea:34:48:04:
0f:75:02:72:aa:9c:b6:30:16:87:cb:b2:44:29:ef:28:dc:6e:
9e:85:78:62:4b:16:49:3c:b0:51:6e:0e:36:a4:de:28:88:84:
e0:78:5d:86:1c:49:78:6c:0f:3f:08:fe:10:d2:d6:3a:e8:39:
34:3f:5c:51:7a:0b:e8:45:b8:83:22:05:fe:52:9b:e4:a1:97:
9c:b1:26:fa:ea:a1:ec:88:92:a5:f9:01:64:24:1b:cf:63:2e:
b4:34:2e:c3:d4:66:4b:0b:d2:99:ec:bf:b1:a6:72:ce:2d:a2:
74:be:c4:99:22:d1:95:81:c2:c1:15:59:c3:e6:90:be:94:a1:
5b:40:c1:b2:dc:bd:b5:6c:47:a3:f4:fc:44:74:37:15:ce:ef:
e3:f0:86:17:a7:25:a3:e3:b6:0a:ac:83:90:2d:d7:14:84:f1:
ab:3e:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net