Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa
File: 1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa (raw, json)
Hash identifier: qehfEzu5pVPdqrtkKPnNAj43cdjEk3H8LlXqlcvxhLI=
Subject key identifier: D4:B5:E8:1B:C9:48:AD:F9:2B:AC:4D:C1:BE:16:C2:35:1B:3B:0B:28
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 019422FC25071C4DF9A966FE76F077B997BB
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43178
IP address blocks: 91.194.126.0/23 maxlen: 23
91.194.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:25:07:1c:4d:f9:a9:66:fe:76:f0:77:b9:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b5e81bc948adf92bac4dc1be16c2351b3b0b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:8f:c8:43:10:b0:ee:6a:d8:74:41:94:79:
46:69:c8:0c:96:b0:1d:94:e8:04:e9:e1:28:b0:61:
7d:c4:d8:0a:9a:1e:89:40:b8:46:22:0e:36:98:42:
40:38:75:45:0d:bb:56:c2:ea:48:1e:ef:28:44:9c:
95:64:d3:e2:ce:c7:aa:c3:4f:55:cb:e6:7e:60:43:
33:5d:cd:18:1e:41:3d:1f:0e:73:7a:c0:25:e5:4c:
dc:4e:1c:7b:35:2b:ad:93:0a:24:ac:8f:d7:e8:1e:
b7:3d:54:71:60:94:10:d0:4b:4b:b3:88:84:de:72:
a9:06:20:fb:ba:ae:b1:6b:f5:e5:15:b7:b8:b6:50:
95:8d:42:82:2c:14:ba:27:24:06:d2:26:c5:f5:41:
55:df:b7:d7:b2:40:c4:a2:e0:4e:d1:c3:2f:65:da:
23:3c:b0:72:4a:49:0b:c4:e2:cb:c6:e9:4e:e5:a8:
7e:f7:29:29:62:e9:2d:2f:09:e3:52:53:58:24:ba:
95:80:e1:89:bf:e1:25:9c:50:1c:ba:25:da:4a:b4:
9d:b2:48:d8:1a:49:2e:d2:25:2f:d2:83:bb:a1:02:
c7:71:f1:76:87:59:e6:a4:db:80:dc:3b:d2:f9:da:
28:11:68:f4:56:79:2b:3e:56:37:79:ae:4e:76:14:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B5:E8:1B:C9:48:AD:F9:2B:AC:4D:C1:BE:16:C2:35:1B:3B:0B:28
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.126.0/23
Signature Algorithm: sha256WithRSAEncryption
56:2a:c8:b9:8e:af:2d:c4:30:e9:02:f7:91:36:23:35:a8:ba:
ae:b5:e5:0b:70:91:e1:d7:9d:46:ea:a3:f5:2c:bd:fe:72:0a:
63:c5:77:b2:cb:85:b0:ae:28:8a:f1:7f:7d:2b:6d:cb:77:16:
08:71:ff:9e:c1:e5:e7:5e:b6:f1:7d:50:8f:07:2a:31:16:2e:
f3:49:c4:96:63:48:c5:f8:b6:59:6a:e4:c5:63:39:6d:c8:8f:
73:92:bb:85:a3:9b:c0:c1:2b:25:25:a7:6f:fa:46:44:eb:12:
45:4b:ca:a8:7f:74:ec:ed:68:e7:6d:b3:81:cd:70:ee:a2:b6:
4c:cc:f1:01:e2:b7:94:90:48:8a:dc:80:2b:ef:d1:73:21:e1:
a4:03:26:20:9f:46:84:01:c8:ff:0e:b8:2d:e1:f3:93:50:42:
6c:36:d3:cc:76:11:02:6c:e0:53:07:fd:d1:2d:ca:46:31:7b:
ae:68:0d:7e:ad:a2:3e:ff:ea:fc:12:05:f8:20:bb:ed:5a:38:
dd:ed:33:6a:92:c6:23:bd:8c:e0:76:47:d8:c2:8f:1f:63:fc:
03:55:84:50:db:3c:a3:15:2a:08:33:69:1e:df:50:9d:a9:db:
02:14:cb:05:73:5d:f1:10:31:70:93:af:fe:57:dc:c2:f1:7c:
3b:6d:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net