Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/En2fZob7-Xp8zkiLryaS1TtBdYw.roa
File: En2fZob7-Xp8zkiLryaS1TtBdYw.roa (raw, json)
Hash identifier: zk5DD5xhiB++oRKxPmJdvhY2qq8VEHhmVtAgMqGgPO4=
Subject key identifier: 12:7D:9F:66:86:FB:F9:7A:7C:CE:48:8B:AF:26:92:D5:3B:41:75:8C
Certificate issuer: /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial: 01941FFAAA6BCE7E09447163D3F78AB3F02D
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/En2fZob7-Xp8zkiLryaS1TtBdYw.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198515
IP address blocks: 91.235.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:aa:6b:ce:7e:09:44:71:63:d3:f7:8a:b3:f0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=127d9f6686fbf97a7cce488baf2692d53b41758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:7e:33:c8:fd:f1:6f:27:a0:37:9f:d2:04:
c3:47:d8:57:e7:77:91:f6:a9:cc:9c:aa:58:ea:c4:
30:f6:c4:c9:68:3a:3e:19:fe:58:6d:24:fb:cd:3a:
bd:9e:a7:d7:31:41:66:1b:56:d7:49:66:0e:a8:06:
9b:a4:9f:19:75:a9:8a:cf:1d:e4:b5:ff:41:0c:2b:
2d:b3:62:d6:1f:b3:e6:5c:7e:05:2f:18:37:a3:e8:
72:05:fc:21:ae:9a:ef:41:2f:74:2b:b5:23:24:f9:
b8:12:4e:81:23:09:75:b7:15:73:61:db:e9:68:00:
f0:d6:28:c0:24:90:c0:a3:61:f3:a7:7c:75:67:07:
36:7a:39:17:72:6c:fd:da:8f:c5:66:30:86:6d:22:
a0:5b:b0:4c:11:93:96:a4:1b:3a:d7:7c:6a:e9:92:
51:fe:11:a6:22:d0:87:9b:67:f4:33:f7:db:a6:8d:
c6:8d:07:04:68:65:a6:7d:d8:10:86:df:3d:6f:6a:
80:38:31:6c:f5:21:35:32:92:68:f8:37:91:81:32:
1c:bb:1b:b9:86:9c:2b:ef:96:93:3d:d0:02:1c:84:
73:99:a1:b8:3e:b6:38:8c:91:14:6f:95:ac:3e:ce:
6d:28:ba:b1:bf:43:97:36:a3:c2:dc:20:88:bc:b6:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:9F:66:86:FB:F9:7A:7C:CE:48:8B:AF:26:92:D5:3B:41:75:8C
X509v3 Authority Key Identifier:
keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/En2fZob7-Xp8zkiLryaS1TtBdYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.213.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c2:6f:07:09:21:b5:4b:6b:d4:cf:c1:6d:be:cd:06:66:ce:
ac:7f:ff:1a:3a:ea:65:f6:27:9f:ea:72:0c:9d:ce:9e:b9:2d:
99:f3:d9:d7:30:38:56:5d:fe:dc:cb:47:bb:72:75:76:84:02:
d2:a0:b7:c0:fe:79:b2:a6:ca:68:89:30:37:eb:4d:b6:d4:0a:
31:e8:4b:b7:a5:1e:2d:71:78:29:6e:e2:20:55:fc:3e:e8:3c:
47:24:43:7e:b5:41:53:e0:a7:0d:06:ac:5f:b3:d0:57:b9:85:
f9:4d:37:60:19:5c:20:45:2c:2d:a8:c7:78:bc:20:81:ae:31:
a8:9e:9b:3c:50:3c:d2:97:67:36:cb:62:45:d5:2c:91:76:68:
a8:4f:a2:34:a0:f2:3c:6c:3b:65:ca:73:ac:8a:01:84:46:20:
7e:0d:0f:8a:01:8e:6d:db:ab:16:75:19:eb:e1:c5:21:15:a0:
32:56:31:56:67:88:cd:0d:7b:5e:4c:77:46:83:39:7d:9b:5d:
10:a8:f7:d1:40:e5:dc:92:6c:f8:0e:29:a7:2a:af:e7:ed:27:
04:8c:7e:96:e4:64:c7:d4:3a:6e:eb:26:a6:23:71:2f:9e:7d:
ad:1c:06:6b:19:ce:c5:51:7d:da:5d:c8:e2:6f:9b:5b:ac:17:
6d:d7:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net