Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/1YtqoFQLtfGDiVmHDelz4DRg3EU.roa
File: 1YtqoFQLtfGDiVmHDelz4DRg3EU.roa (raw, json)
Hash identifier: IK9E4boh47Pzwtuw3Las8hTZNUl+rwA5t6hlkkr2bx4=
Subject key identifier: D5:8B:6A:A0:54:0B:B5:F1:83:89:59:87:0D:E9:73:E0:34:60:DC:45
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 01941F8C8EEF48F4CD28FA04AD31E2ABC56A
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/1YtqoFQLtfGDiVmHDelz4DRg3EU.roa
Signing time: Wed 01 Jan 2025 01:48:12 +0000
ROA not before: Wed 01 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44427
IP address blocks: 91.199.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8e:ef:48:f4:cd:28:fa:04:ad:31:e2:ab:c5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d58b6aa0540bb5f1838959870de973e03460dc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:11:0e:a6:b6:2f:ac:9f:12:ae:e2:5c:48:
46:83:20:bc:2a:7b:47:7b:44:1f:4e:fa:68:09:da:
9f:1e:4f:83:b5:6f:ff:a6:3d:b8:e7:2c:82:87:3d:
ba:95:42:94:0d:65:b4:00:c8:51:92:3a:5d:e1:da:
8a:6a:9c:4d:37:24:d0:81:82:22:e5:f6:4e:77:00:
ac:9f:95:74:77:0e:41:82:5d:e3:4f:ff:ba:5b:b4:
a5:e8:6c:a5:a6:4d:16:80:12:6a:f9:4e:0b:1f:00:
bc:98:97:65:7e:63:58:2d:fe:37:2c:f6:9a:60:6d:
e9:03:68:ad:95:a3:c7:bc:56:bd:99:3e:ef:d6:31:
c9:f3:07:e8:f2:be:2b:c1:28:c3:a8:5d:6f:b2:6f:
c5:d9:9a:e9:ef:4c:10:2c:27:2d:6a:0f:67:65:d5:
0a:30:aa:71:8e:50:36:01:c3:cf:ec:4c:cd:05:a4:
ae:ad:9b:44:b7:97:25:e9:31:5b:58:3a:be:d6:3f:
e4:85:a6:4d:50:24:46:84:28:25:62:64:0a:37:be:
a5:24:1c:a5:02:0d:76:a4:3c:7d:f1:ac:47:27:46:
bb:44:a1:fa:08:c8:d5:ad:63:1b:82:05:29:1c:16:
84:e9:d8:5f:e7:1b:4f:d6:6d:42:b0:c6:99:e9:14:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:6A:A0:54:0B:B5:F1:83:89:59:87:0D:E9:73:E0:34:60:DC:45
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/1YtqoFQLtfGDiVmHDelz4DRg3EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.119.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f7:fa:7f:62:d6:c7:dd:59:67:ea:e0:f7:f3:e1:af:ca:ff:
12:64:d5:25:88:89:59:be:28:65:f6:6c:83:46:b7:1b:23:46:
a9:60:a9:e3:3f:95:ca:d6:f7:1f:df:d5:ed:75:2a:a3:34:26:
0b:ba:10:a7:5c:9d:37:0c:b9:40:c1:48:6b:50:f0:07:88:ae:
57:8d:9c:b9:5b:b8:20:5c:98:88:0c:f3:1c:a9:fb:ff:73:92:
66:40:47:69:59:61:d2:19:6c:d8:a7:6e:33:6a:c6:33:51:72:
b8:57:04:74:5b:b4:b1:c2:98:5c:ac:d9:d1:cc:01:b7:d2:ce:
cb:49:8c:06:f4:77:75:37:d9:d9:fe:4e:76:a7:9e:55:9c:e4:
f1:be:b2:d1:e4:d8:b2:71:f9:9a:ad:f3:e2:72:a1:39:42:77:
d1:52:b5:fa:11:7a:1a:4c:24:78:19:08:5b:12:27:3e:f1:f9:
ae:40:b8:9b:8f:1b:4f:86:00:99:47:1f:df:e2:0c:02:e7:26:
48:40:ba:3d:6d:74:2f:f8:65:01:37:eb:db:b6:70:bd:db:13:
96:1b:c2:72:d6:f0:f1:ec:f6:42:b8:9a:d6:92:8c:99:2e:b4:
9c:db:55:49:82:21:4c:df:05:2c:4a:58:30:e5:33:c1:17:8e:
b9:b4:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net