Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/btWfzHoqqvCj7SwksK3sEa_GGss.roa
File: btWfzHoqqvCj7SwksK3sEa_GGss.roa (raw, json)
Hash identifier: 35nmBZjfYPLc1DjqtenJ/YTwHQyVVKy8N+n70T+IfxM=
Subject key identifier: 6E:D5:9F:CC:7A:2A:AA:F0:A3:ED:2C:24:B0:AD:EC:11:AF:C6:1A:CB
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 0194282628A99445D8EB9238D51A3BC92E77
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/btWfzHoqqvCj7SwksK3sEa_GGss.roa
Signing time: Thu 02 Jan 2025 17:52:56 +0000
ROA not before: Thu 02 Jan 2025 17:52:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207120
IP address blocks: 91.209.142.0/24 maxlen: 24
185.113.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:28:a9:94:45:d8:eb:92:38:d5:1a:3b:c9:2e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Jan 2 17:52:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ed59fcc7a2aaaf0a3ed2c24b0adec11afc61acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:91:02:a7:f2:26:97:9c:64:15:02:eb:af:
47:3e:b1:16:d9:a6:5e:ec:c7:55:f0:50:70:a0:80:
fb:f4:9c:28:b5:4c:e5:56:a3:62:66:c2:d5:49:18:
7a:b1:19:36:8d:6a:ce:b7:b7:0b:ee:1c:53:ed:8e:
db:8f:57:f4:d3:92:32:3c:0f:9e:52:a0:27:c1:e0:
9c:49:e2:54:e7:de:55:05:ba:32:97:40:97:22:d1:
d5:6e:bf:41:66:7b:65:8a:77:2f:ff:4d:56:27:08:
67:e1:2e:b2:10:e7:db:6e:8c:c5:d9:d5:42:c4:27:
80:cf:1f:fe:30:7c:9f:1c:d8:0c:36:0b:f9:7a:07:
f8:82:52:92:3a:a7:07:55:55:37:10:ba:de:8f:05:
36:a7:50:43:41:a9:c0:62:74:05:86:24:a9:11:9a:
12:3f:6b:75:75:f3:1c:f4:1d:52:2b:a2:26:38:be:
10:68:c7:49:95:1b:8a:dd:6b:90:8b:1d:ff:78:95:
f6:0c:ee:e2:22:50:55:0e:f3:90:5c:06:4e:2e:8e:
f3:c2:03:8e:94:f0:10:ca:86:0e:b9:de:ca:c2:03:
2d:16:b7:cd:48:08:15:8c:85:29:b2:88:33:a7:7d:
d6:ba:0c:63:67:3b:a4:d1:66:ec:86:ba:8b:7d:14:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:9F:CC:7A:2A:AA:F0:A3:ED:2C:24:B0:AD:EC:11:AF:C6:1A:CB
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/btWfzHoqqvCj7SwksK3sEa_GGss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.142.0/24
185.113.0.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:d9:48:65:41:03:d5:35:7b:83:25:77:39:d1:72:6f:41:63:
eb:18:e8:bb:ed:1a:bb:ed:13:78:36:7d:2f:a5:86:e4:85:88:
5a:50:a8:88:ee:76:7f:d2:a3:86:92:1f:0b:ee:40:82:57:bd:
9f:20:3c:55:c6:03:41:d2:1d:f0:1d:67:31:e0:d7:0e:53:e0:
30:f2:00:28:d7:af:d0:34:be:72:42:ef:4a:3a:7e:c4:b3:0e:
ae:a6:b7:a0:46:18:c6:a6:fc:b8:12:88:25:2e:d5:43:5a:46:
73:63:22:0c:44:20:94:ce:3f:6d:00:e6:c1:0a:c6:c6:70:8f:
85:21:b5:81:e5:28:73:03:bd:25:4c:6d:68:4e:20:1e:c6:0d:
0f:a2:85:dc:b3:42:b7:20:68:17:33:db:08:cc:66:b2:a0:a1:
45:8b:67:24:7c:2a:53:c9:26:a7:41:4f:08:40:19:39:0e:b1:
46:5d:6a:b7:ed:a7:0f:6e:78:0b:57:66:c9:3e:64:77:15:a0:
b0:d0:33:32:90:6b:f4:8d:6f:d3:3f:2c:f5:2e:c2:39:43:11:
97:7c:6d:89:af:31:91:43:2d:66:05:55:fe:70:83:f2:10:c5:
5c:04:1e:a5:e5:73:20:5d:38:ea:b1:8b:41:4c:86:6d:69:85:
9b:e6:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net