Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/txxKQQE40wffgCtcTH6E5WrYYhY.roa
File: txxKQQE40wffgCtcTH6E5WrYYhY.roa (raw, json)
Hash identifier: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=
Subject key identifier: B7:1C:4A:41:01:38:D3:07:DF:80:2B:5C:4C:7E:84:E5:6A:D8:62:16
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C192DA77CB79B25E7B864A35350CC
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/txxKQQE40wffgCtcTH6E5WrYYhY.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49711
IP address blocks: 91.149.171.0/24 maxlen: 24
93.125.43.0/24 maxlen: 24
178.172.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:19:2d:a7:7c:b7:9b:25:e7:b8:64:a3:53:50:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b71c4a410138d307df802b5c4c7e84e56ad86216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:52:56:db:3c:80:6d:40:b5:59:88:fd:ea:
fc:cc:e7:db:a7:7d:b3:d8:a5:13:97:48:8a:d2:37:
8d:73:d0:06:67:f2:c2:51:59:6c:c0:79:74:1c:89:
e9:f9:c9:b9:b1:c8:50:fd:cf:0e:38:5c:8a:c0:3b:
43:41:20:4b:83:fd:2c:5d:d0:c3:ee:f7:ba:8d:09:
ab:b8:42:ef:d9:72:78:d3:5a:c0:30:5a:57:84:77:
c7:ce:9b:ee:e8:81:43:67:52:91:de:61:57:77:f8:
86:74:e9:93:97:5e:a3:2e:6c:a6:b5:77:a9:4f:e2:
56:1b:a3:47:dc:b5:25:4e:f3:00:2e:ab:8e:c7:f0:
8c:cf:3a:da:9b:4e:18:70:46:6b:c3:93:08:62:61:
35:9a:dc:00:d6:b1:0e:08:e4:9e:cb:2a:27:f8:76:
b3:bc:19:fe:89:54:1a:76:23:51:e6:d3:f6:10:fc:
e3:0d:ff:52:7a:93:aa:0a:eb:93:6b:6f:95:03:6f:
9a:c8:31:45:bd:8c:73:48:1f:c0:cd:2d:37:49:5f:
b1:11:da:35:4e:e1:8d:72:fe:61:e4:6a:ac:d0:ae:
01:94:20:58:38:b1:a1:bc:82:6f:e0:45:51:06:f5:
41:e2:39:18:9a:31:4c:3c:cd:e0:57:27:8f:23:8d:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:4A:41:01:38:D3:07:DF:80:2B:5C:4C:7E:84:E5:6A:D8:62:16
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/txxKQQE40wffgCtcTH6E5WrYYhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.171.0/24
93.125.43.0/24
178.172.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:de:ad:3c:b1:c3:9c:cb:a8:99:55:d0:e2:36:d0:dd:dc:12:
a6:e8:bf:22:4d:6f:6a:68:f8:4c:a9:f9:de:6a:7f:28:c2:6d:
1b:65:d8:a3:c1:4b:30:55:17:2e:2b:ef:ac:57:d4:3c:43:7c:
67:a1:b8:5e:e4:6a:ee:60:56:a5:bf:9c:fa:75:f3:19:8d:c4:
44:7b:e5:4b:28:4d:32:cc:ad:c7:b8:17:c1:6d:39:b9:b3:00:
e2:97:a2:14:2c:bf:6d:94:8f:70:25:96:e0:1e:ef:ac:56:b3:
3d:04:89:3b:93:7a:48:5b:61:1c:2f:b4:46:dd:f9:3d:40:5d:
a9:2a:0a:28:4f:4b:79:6c:9d:85:89:84:58:39:4d:88:a8:6c:
2f:34:a0:c6:a0:ad:7d:03:83:8b:75:4d:01:29:a2:02:40:c9:
47:9c:dc:e0:4a:64:ad:d4:f7:f8:44:07:d4:bc:49:4a:1c:10:
43:4c:6a:a3:ff:31:0b:02:c9:27:f2:ed:46:8e:cd:c1:89:32:
3a:68:05:75:7f:9f:5a:e2:f1:96:e1:87:41:f6:b7:2b:48:c1:
ea:d8:39:48:d2:95:21:bb:c1:75:b5:ce:84:c3:3d:2c:c7:20:
83:36:8e:62:cd:c2:8e:5d:7a:34:9e:99:32:ed:45:cb:41:b9:
01:22:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net