Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa
File: B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa (raw, json)
Hash identifier: bjPJdt8d8Rm7Nt6tD0StaYZNVd8a8Vg9VG3eQIsicu8=
Subject key identifier: 07:C4:72:E5:6E:0D:77:B9:86:11:71:EF:2B:62:03:E9:19:5A:60:A8
Certificate issuer: /CN=979586035abe23569c2135e320dbd1a255b84034
Certificate serial: 019423D6B172C4B942041D86DFB682FE753D
Authority key identifier: 97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197470
IP address blocks: 46.151.232.0/21 maxlen: 21
91.220.221.0/24 maxlen: 24
91.221.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b1:72:c4:b9:42:04:1d:86:df:b6:82:fe:75:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979586035abe23569c2135e320dbd1a255b84034
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07c472e56e0d77b9861171ef2b6203e9195a60a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:20:2c:fe:4b:94:47:88:02:af:05:1e:1f:
e8:a5:8b:c6:7d:4c:2f:df:56:a3:c4:54:19:5b:c9:
36:55:ec:b1:f1:f1:ff:29:17:14:42:9e:d8:f0:54:
d4:03:c6:83:75:66:72:30:03:e6:34:c4:45:fd:22:
2a:ca:84:c4:3e:59:47:33:75:da:36:16:a1:41:26:
17:fb:45:1f:3f:a1:e3:be:26:a9:81:ee:d1:fc:e4:
ad:f6:57:eb:94:2a:3c:2f:b9:2b:a6:25:2b:a3:ba:
2e:60:5d:13:a3:5d:e1:af:9c:3c:d1:73:48:39:d4:
58:85:7e:d0:b8:de:07:f7:72:06:90:3c:b6:e4:ea:
52:40:ce:b1:c2:3c:24:0b:44:5a:05:38:79:70:09:
46:35:61:6c:ed:6d:78:c8:ca:26:a3:79:d5:fe:7c:
03:da:d7:c5:37:ea:48:33:57:3d:d2:69:89:ea:8e:
7f:58:09:fe:b3:60:0b:19:a2:a4:2d:ca:f4:de:3f:
74:23:58:77:bd:c6:4f:85:1a:58:02:b1:ec:83:ef:
53:cb:bd:b6:65:a0:72:2b:c9:42:b8:c7:2c:36:af:
80:bb:45:c3:4c:55:ea:63:f1:91:8a:d3:cf:29:cb:
4f:65:55:cd:95:47:ea:e4:4a:5a:67:92:8b:7d:e6:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C4:72:E5:6E:0D:77:B9:86:11:71:EF:2B:62:03:E9:19:5A:60:A8
X509v3 Authority Key Identifier:
keyid:97:95:86:03:5A:BE:23:56:9C:21:35:E3:20:DB:D1:A2:55:B8:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5WGA1q-I1acITXjINvRolW4QDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/B8Ry5W4Nd7mGEXHvK2ID6RlaYKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/001b9f-e4d8-4dac-bf08-7240c36000d7/1/l5WGA1q-I1acITXjINvRolW4QDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.232.0/21
91.220.221.0/24
91.221.170.0/23
Signature Algorithm: sha256WithRSAEncryption
83:84:64:dd:c5:62:0a:c5:a2:74:e3:b2:99:cb:bc:af:1d:35:
07:8f:3f:95:ad:ad:e3:6c:ce:5f:5f:5d:ea:13:28:92:04:47:
32:24:af:aa:ac:df:9e:14:33:2f:f7:26:60:a5:18:dc:97:1c:
2b:e9:ff:80:d2:d7:c6:ce:63:0d:04:a7:be:1b:c2:23:cb:b9:
c7:b5:95:10:30:f1:0b:32:26:c3:61:ff:9f:02:19:8d:fd:a8:
3b:cf:13:f5:44:54:cd:66:ac:28:a0:53:9b:45:ad:ab:2d:fb:
ed:45:98:f7:e6:3e:94:49:76:f1:bd:e0:c6:0b:d8:92:8a:a2:
0a:21:07:b3:6e:9b:50:20:c8:d4:f0:6d:7a:02:ba:42:bc:4a:
d2:da:c1:80:e0:2a:84:36:6d:cc:fa:06:d8:70:68:e1:7f:3c:
83:bc:77:0e:e2:d5:4e:d7:4c:ee:2b:9b:05:40:ef:99:4f:d2:
dd:31:23:75:77:85:e9:c9:ee:b9:98:dd:d8:29:b2:18:74:99:
69:0e:34:fd:9f:a8:17:57:47:45:3e:44:84:73:af:95:5f:9c:
c5:5d:90:70:fc:44:74:78:ec:7d:94:e4:9a:a4:45:23:2c:a8:
f2:9c:d3:8c:54:66:b1:4c:31:4e:71:84:b1:e4:d3:46:c8:16:
7c:90:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net