Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/dnwf0B7ghFQhubHpkV_b6aRmfaU.roa
File: dnwf0B7ghFQhubHpkV_b6aRmfaU.roa (raw, json)
Hash identifier: /ZpiVEXwKVsBxeMoy/4YPuoiF3m8c7Z0eTdmKuo2JTI=
Subject key identifier: 76:7C:1F:D0:1E:E0:84:54:21:B9:B1:E9:91:5F:DB:E9:A4:66:7D:A5
Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial: 019421440807E7B488BA6D91EBCD0D0373D6
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/dnwf0B7ghFQhubHpkV_b6aRmfaU.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.194.25.0/24 maxlen: 24
91.194.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:08:07:e7:b4:88:ba:6d:91:eb:cd:0d:03:73:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=767c1fd01ee0845421b9b1e9915fdbe9a4667da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:a3:27:dd:41:01:1f:cb:0b:ce:f2:76:2f:
75:36:fe:02:34:aa:f4:e4:c1:37:e4:2b:5c:8a:14:
91:67:42:1f:07:b1:52:60:d9:8f:44:ed:35:0f:c9:
47:15:1b:f7:b1:e2:75:56:e8:08:9c:34:56:b6:45:
aa:4f:21:77:18:e9:44:7e:f3:c9:75:96:ae:3c:da:
82:38:b7:21:05:c0:99:d0:53:cd:38:f3:87:48:72:
5e:e5:9f:12:a9:3d:a9:ac:a9:3b:fa:c1:b7:f5:75:
4a:e9:63:2d:de:e1:b5:d9:60:c1:ec:b5:a3:a7:62:
66:96:60:88:18:92:30:49:28:9e:c1:59:50:02:68:
d5:43:e6:3a:f8:38:9d:a9:ea:3a:cd:d8:1f:99:f1:
c8:1e:df:ef:9d:dd:62:c1:be:23:62:b4:d5:e7:d9:
84:d7:8f:c7:78:1b:5e:6f:31:7b:f5:57:51:fd:1a:
5c:34:4a:51:ed:b2:e8:db:1a:a4:93:67:e8:d4:ac:
f8:37:6a:2d:78:96:68:6f:7d:1e:6f:53:ff:00:fc:
37:31:63:02:09:52:a3:93:c3:0f:f8:3b:a4:fe:4c:
03:c5:80:f9:9a:0b:a5:91:d2:14:dd:26:35:13:cb:
bb:d2:64:e5:4c:48:65:e2:ef:50:a4:01:fe:c0:e5:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:1F:D0:1E:E0:84:54:21:B9:B1:E9:91:5F:DB:E9:A4:66:7D:A5
X509v3 Authority Key Identifier:
keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/dnwf0B7ghFQhubHpkV_b6aRmfaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.25.0/24
91.194.104.0/23
Signature Algorithm: sha256WithRSAEncryption
99:21:87:36:0f:8e:8f:0f:39:4f:23:87:e4:42:2a:c6:3c:22:
9d:f8:60:59:d8:0b:0a:81:04:19:19:65:2c:f9:02:68:ed:f8:
6a:b9:c9:82:2a:56:d1:e5:b5:93:7e:fd:fb:78:a4:5d:ec:59:
c3:ac:23:f8:e4:8c:a7:10:59:05:03:4d:28:b0:70:b4:99:a1:
98:83:e2:c3:9a:a9:94:3e:3d:8d:e2:66:f9:d0:1f:4a:fe:3d:
e0:f9:ff:e3:40:98:92:13:3b:a3:45:81:94:a8:10:1b:ea:60:
9a:b6:bd:9d:a3:db:00:d0:9e:94:3d:80:97:f7:97:b6:cf:e5:
7e:cd:e7:69:b0:aa:8f:6d:6c:6d:5d:fd:0f:c6:d4:b0:d7:32:
7e:17:44:4c:f0:c9:75:12:6f:7f:d6:c7:3c:8b:dd:f2:43:1c:
9a:1f:48:c3:43:c4:db:11:f2:94:b3:56:c5:3a:f6:0a:e1:a0:
39:09:6d:71:67:33:d9:f3:b6:de:9a:37:ba:b1:7b:f1:51:1f:
34:08:6e:b8:b4:c3:63:06:ce:6f:1a:15:3d:8a:13:28:dd:12:
59:45:65:b0:d0:70:13:6e:1a:8e:5e:34:13:73:df:ba:0b:53:
b5:37:bb:75:71:0f:d6:65:e3:33:c4:1a:6e:00:4d:92:1d:df:
33:f8:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net