Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa
File: 1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa (raw, json)
Hash identifier: ruSOhXJd1v3gKBskv3cjew+PBFyYM840a6Wjo+pKuTw=
Subject key identifier: F8:B8:0F:17:D0:42:8E:16:4D:59:6C:3D:84:49:5A:6F:42:EF:F9:44
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 019425FC48463579ED0EF3B1F48E82C6E4F6
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57350
IP address blocks: 91.231.216.0/24 maxlen: 24
91.231.217.0/24 maxlen: 24
185.41.116.0/23 maxlen: 23
185.41.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:48:46:35:79:ed:0e:f3:b1:f4:8e:82:c6:e4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b80f17d0428e164d596c3d84495a6f42eff944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:59:d4:ac:57:89:e8:ed:03:02:51:ae:dd:
48:30:d5:54:58:4a:23:2a:f9:82:2e:30:94:cb:fe:
4a:c1:bd:f6:f9:22:7f:da:01:48:6f:3f:e9:ba:5f:
60:df:ab:2d:55:e5:90:9c:1e:9e:a2:da:03:c7:7a:
e2:bc:76:20:8a:88:10:bb:a8:6e:30:c3:40:7a:b2:
2d:57:a2:07:d3:44:9d:6b:7a:bc:bd:2a:7a:d2:31:
c9:0b:87:24:b7:e8:2f:7c:56:67:17:8d:0f:d5:fb:
1c:eb:b8:22:cb:88:b9:f4:a0:bf:ab:03:02:2f:7a:
24:4a:4c:2f:33:58:00:d9:55:93:f2:01:97:56:ba:
30:3a:8a:d1:ed:0e:0b:38:b8:3a:d1:04:ab:80:a6:
0d:1c:1e:a6:72:59:b1:e3:8d:f9:88:18:e1:31:b5:
82:85:33:af:82:2c:55:08:a6:ab:60:07:80:7d:49:
75:29:34:a4:f8:ab:7e:02:6a:ba:b2:0b:21:a3:fe:
57:1c:d6:ea:8c:7e:67:61:96:c8:6a:dc:6e:11:fa:
6a:b8:96:4f:d2:cb:8f:ee:64:15:7f:be:53:f8:61:
f9:3d:f8:13:44:92:ad:0e:6b:93:7f:57:50:7c:ac:
30:0c:ae:7d:69:8e:b7:df:b7:37:64:2a:77:a0:68:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:0F:17:D0:42:8E:16:4D:59:6C:3D:84:49:5A:6F:42:EF:F9:44
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/1-LgPF9BCjhZNWWw9hElab0Lv-UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.216.0/23
185.41.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:3c:0f:a3:1e:eb:d2:38:cf:dc:23:36:24:aa:79:94:e4:4a:
d1:8d:41:11:98:cb:96:16:10:de:f9:47:a8:23:fc:6b:98:6d:
2a:13:5d:1d:ad:bf:8d:a0:a1:f2:c7:59:d2:26:89:c7:4f:35:
ce:22:a1:c8:77:77:7b:d3:63:64:14:a7:79:3b:88:c6:b9:23:
6b:18:6c:bf:92:23:37:8b:d4:e5:dc:71:42:00:c7:1d:8a:9d:
55:01:34:87:08:b3:77:1b:0d:52:d8:b3:2d:e5:95:2e:3e:46:
b6:85:ad:09:96:27:db:ae:e4:4a:40:fe:36:f7:06:9a:0f:a3:
9c:46:c8:9f:2e:0f:1e:77:7f:9f:42:2d:89:52:c3:60:a1:4c:
ff:72:ce:6f:4f:fb:e7:e8:d0:96:7f:40:a2:5a:fe:73:df:40:
c0:93:8d:1f:c4:7d:9d:22:58:0f:a4:3a:9d:27:e3:aa:fd:47:
da:b5:5a:cf:f0:b9:27:2c:06:8a:e9:a8:8b:77:05:bd:6f:f9:
84:16:c9:76:97:e4:ed:59:49:34:6d:bf:cd:96:c0:98:a4:f9:
33:44:d0:aa:c9:a4:c3:51:ac:5a:b5:d6:0b:7e:ff:a9:b8:a0:
6a:4b:b0:e1:c1:75:dc:8d:a8:54:ec:0e:0f:89:a0:5d:44:0a:
8b:90:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:53 2025 by rpki-client on console.sobornost.net