Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/gJVc1ED6fXAztZrZVaBt7sRVw7s.roa
File: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (raw, json)
Hash identifier: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=
Subject key identifier: 80:95:5C:D4:40:FA:7D:70:33:B5:9A:D9:55:A0:6D:EE:C4:55:C3:BB
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 019426D97B6B283ED6C4874DE976082E87F3
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/gJVc1ED6fXAztZrZVaBt7sRVw7s.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44050
IP address blocks: 91.203.152.0/22 maxlen: 22
176.123.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7b:6b:28:3e:d6:c4:87:4d:e9:76:08:2e:87:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80955cd440fa7d7033b59ad955a06deec455c3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:50:77:9a:90:20:8b:10:45:3d:54:65:a3:
3b:6d:5e:ca:20:c2:fc:46:d6:5e:7c:8f:c8:18:d5:
e3:ed:4f:a2:72:ba:a9:d2:d0:27:eb:2e:6b:e5:c4:
7b:79:cf:40:2f:7a:81:e3:07:cd:5b:6b:76:a2:3c:
54:cd:64:27:49:12:cd:10:2d:b8:36:5f:7c:13:87:
8a:8c:93:ee:f4:38:fb:96:8d:32:10:fa:fa:d9:dd:
13:e5:b2:b9:df:e5:19:2e:9f:0b:20:28:c5:30:f6:
d8:27:0c:05:72:87:4b:7c:4c:fb:a3:8f:4a:37:5e:
ef:e8:5f:9c:14:e5:ea:37:56:e3:95:16:44:ae:64:
93:ca:51:bb:e2:7e:7a:a6:57:21:28:e7:25:c4:93:
d2:d9:69:2c:08:b9:13:18:e3:6e:d0:a4:26:76:5d:
68:25:24:5c:ac:9c:02:6f:8f:9d:fd:c2:ab:dc:b8:
1f:b1:c0:93:08:52:2c:fc:df:c5:ac:cc:57:54:ef:
81:a2:4e:df:39:cb:e6:67:2d:86:c0:f0:86:04:81:
5d:ab:99:d1:b5:fd:81:f5:22:b8:05:e0:d9:56:29:
ce:57:c7:24:3d:96:48:7e:2f:3f:91:15:25:4a:6b:
20:9a:43:5f:de:c6:61:36:21:4f:9f:64:33:ea:a2:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:5C:D4:40:FA:7D:70:33:B5:9A:D9:55:A0:6D:EE:C4:55:C3:BB
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/gJVc1ED6fXAztZrZVaBt7sRVw7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.152.0/22
176.123.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:5c:58:9c:24:70:51:9e:99:2c:8f:c7:2e:c6:db:53:a2:ad:
0c:a6:25:b0:01:c2:40:0f:10:eb:db:66:53:8f:3e:be:25:99:
25:c4:87:34:6f:36:eb:04:7e:cf:54:e2:c2:f1:db:35:8f:f5:
57:7a:7c:39:78:79:62:a2:c4:d0:7e:0e:cb:8b:ba:8f:9b:e1:
fa:b0:2b:71:74:be:96:e8:ce:ed:24:53:03:27:7a:3b:41:ef:
c6:26:12:70:88:08:ee:47:e6:5a:1e:d5:f2:fd:6d:4a:c8:87:
69:02:1e:c8:db:e3:fe:4f:68:73:16:7b:5a:53:c8:47:23:30:
05:ea:9b:5b:57:6f:99:39:cc:99:df:90:77:8a:0c:69:31:4a:
2d:9f:a4:04:8d:eb:93:a5:78:80:a5:f2:b0:4a:02:a1:12:a0:
5a:4f:08:f2:0c:a2:7a:62:a9:36:d5:2e:2e:79:6c:8c:24:c2:
92:7c:28:91:c2:92:ec:d9:5a:d0:d9:b6:52:09:f2:e6:6e:17:
c6:50:aa:87:29:b4:f9:8b:76:4b:72:c3:09:da:f6:d1:a3:a3:
5e:0f:81:23:8b:96:eb:d2:41:80:7f:be:08:4e:12:eb:d1:cc:
dd:72:4b:fb:2a:be:6c:2d:7c:6d:14:bd:92:2b:02:9b:5c:bb:
bc:8a:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:03 2025 by rpki-client on console.sobornost.net