Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/mD91GJWTGSKSHSgbgQ6P8S7ubME.roa
File: mD91GJWTGSKSHSgbgQ6P8S7ubME.roa (raw, json)
Hash identifier: rmUWh8AmrxJuI/WhfjCkpLYkhkimbTnBeIi7uD7XWfE=
Subject key identifier: 98:3F:75:18:95:93:19:22:92:1D:28:1B:81:0E:8F:F1:2E:EE:6C:C1
Certificate issuer: /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial: 019421445A759AB3EA3C4B946409915673F3
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/mD91GJWTGSKSHSgbgQ6P8S7ubME.roa
Signing time: Wed 01 Jan 2025 09:48:35 +0000
ROA not before: Wed 01 Jan 2025 09:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53589
IP address blocks: 146.19.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5a:75:9a:b3:ea:3c:4b:94:64:09:91:56:73:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983f751895931922921d281b810e8ff12eee6cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:c4:bd:f6:d8:02:7e:b9:c7:96:7b:3c:00:
04:fe:59:74:e2:f3:27:0d:94:81:d3:cb:f7:21:fc:
d6:ca:1a:56:62:d1:e9:03:2b:13:54:97:45:56:2a:
48:94:99:cb:f0:c8:92:8a:8d:d4:f0:09:0d:49:2a:
66:a8:d2:69:fb:54:be:42:23:60:2d:b6:fd:8c:1f:
a6:a5:11:b1:b7:e8:6b:68:c6:75:1c:d1:51:06:2c:
09:fd:50:7d:c0:47:55:ab:83:b4:8c:cc:5c:42:86:
29:c5:f1:fa:0b:67:5b:a3:18:7c:bb:61:13:51:45:
ae:db:a7:cb:ab:2a:cf:73:60:fa:db:1a:10:32:06:
cc:36:9f:1b:a1:d1:a0:bd:6d:b4:f0:78:e0:c3:fc:
86:ef:60:23:d8:d0:bf:bf:59:b7:ab:ce:9d:09:3c:
8e:14:c7:5f:de:45:dd:1a:d2:f7:f5:d6:a0:43:87:
4e:79:1d:a0:02:4f:bf:5d:ed:89:5a:09:0c:75:dc:
68:38:6b:18:d7:9b:2b:e7:ec:fc:ab:69:2c:7a:a9:
a4:6f:f3:35:76:d1:f1:53:5a:e2:fb:51:1f:21:56:
24:a6:fb:c7:02:e9:c8:96:ac:ac:0a:cc:d2:30:e6:
2e:91:92:11:5f:c3:0a:4a:78:a1:08:9e:08:0d:56:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:75:18:95:93:19:22:92:1D:28:1B:81:0E:8F:F1:2E:EE:6C:C1
X509v3 Authority Key Identifier:
keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/mD91GJWTGSKSHSgbgQ6P8S7ubME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0c:e6:83:62:ea:3c:01:aa:32:0b:16:8f:f6:2e:46:ca:3a:
a5:6f:69:20:42:a8:90:62:26:2f:fd:16:9e:f9:5f:af:c6:52:
df:16:f0:50:cc:1e:3c:e6:80:19:c8:33:73:37:62:d5:11:00:
64:08:81:40:28:d7:85:81:37:fa:36:e6:3e:46:89:34:5a:21:
81:90:1b:65:3d:b6:de:b3:14:1b:cb:d6:a2:f1:2a:c8:45:b5:
9f:f2:f0:ae:bc:61:7d:43:ad:70:a2:75:70:3d:fe:78:85:4c:
42:d7:58:8d:cd:4c:3f:fa:b5:07:a8:a1:5c:83:bf:2d:76:b3:
66:d9:f2:e5:aa:fb:df:ad:70:c8:fa:5c:32:a5:15:fc:d8:84:
f5:f6:39:26:49:50:77:e0:c6:56:60:26:d2:49:dd:b8:0f:1e:
a1:07:36:40:ee:16:90:b8:db:1a:79:c3:e0:cc:f5:c4:30:e1:
56:62:43:8f:9c:14:41:69:7f:29:d6:a3:3a:65:67:12:54:e2:
a2:d1:02:00:b0:44:75:b6:df:f7:0d:24:e5:e9:53:0b:5b:dc:
f0:42:40:f3:c3:e7:f1:81:fd:59:f0:45:b2:bf:6c:87:e1:fa:
20:50:73:c6:d5:89:e9:94:0d:20:58:df:0e:72:59:55:0b:b7:
af:b6:1c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net