Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/1Cpy8hReysvqo6rJK2S7mrGPkKE.roa
File: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (raw, json)
Hash identifier: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=
Subject key identifier: D4:2A:72:F2:14:5E:CA:CB:EA:A3:AA:C9:2B:64:BB:9A:B1:8F:90:A1
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 0194228D9B4ADB1EF2796AF3A32FC519A0BA
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/1Cpy8hReysvqo6rJK2S7mrGPkKE.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50864
IP address blocks: 91.220.235.0/24 maxlen: 24
195.162.88.0/22 maxlen: 22
195.162.88.0/24 maxlen: 24
195.162.89.0/24 maxlen: 24
195.162.90.0/24 maxlen: 24
195.162.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9b:4a:db:1e:f2:79:6a:f3:a3:2f:c5:19:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42a72f2145ecacbeaa3aac92b64bb9ab18f90a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:05:72:d0:00:5a:c4:6f:23:19:92:d6:bf:
b4:a4:c8:4f:cf:8a:61:9f:35:4f:14:a9:3e:c5:c9:
67:e2:2b:9d:5c:48:69:78:f3:ad:da:98:4f:b3:0f:
9c:9b:99:8b:02:fb:42:43:e8:7b:f6:df:0a:23:34:
f7:a4:7a:7b:77:1c:3c:e0:c1:f0:72:0d:7d:37:d0:
6d:73:d2:f2:06:29:2f:9a:e1:e7:33:33:48:54:e5:
09:4c:f6:71:e1:39:aa:99:46:6b:5d:c2:75:4f:6b:
a5:c7:2b:2b:9a:d6:d2:45:1d:12:d6:2b:7b:84:d5:
17:0a:01:16:35:1a:ba:23:1d:ab:87:de:c0:61:a6:
28:7a:12:d7:ab:8c:dc:70:2f:9d:79:17:da:b0:4f:
4c:c2:32:26:e7:07:af:4c:62:47:d1:b3:98:41:d7:
84:4f:52:df:65:4b:51:45:c5:f5:bb:e0:84:2c:2c:
68:f6:03:aa:6e:f3:46:59:2b:77:97:86:32:28:e3:
87:08:f8:b0:67:29:2b:7a:8e:6a:57:46:94:b5:63:
45:52:74:b0:48:30:82:8e:ae:11:35:d6:5e:73:ed:
28:8b:11:a1:6c:d6:cb:fd:03:75:e9:c9:39:0c:e1:
6b:b4:a6:94:0e:17:42:e8:4c:89:58:33:07:d4:4c:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:72:F2:14:5E:CA:CB:EA:A3:AA:C9:2B:64:BB:9A:B1:8F:90:A1
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/1Cpy8hReysvqo6rJK2S7mrGPkKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.235.0/24
195.162.88.0/22
Signature Algorithm: sha256WithRSAEncryption
36:f9:34:e5:81:47:fe:a8:73:cb:f4:d0:e3:fb:93:25:6c:3b:
f1:21:a1:ca:72:ca:cd:e1:36:b0:41:d9:05:94:e7:03:f3:ca:
27:0b:73:06:e6:d0:77:0f:10:b7:c6:8b:cf:20:4d:70:7a:a5:
36:53:94:85:f3:6a:25:73:f0:bd:f3:47:f8:33:c3:69:33:a0:
d6:ec:9f:4a:cd:e6:4c:72:7f:e1:87:bd:68:93:9b:0f:26:18:
60:fb:8d:ab:27:b8:da:e1:f8:e3:05:ce:d3:0c:78:fd:f6:0f:
b3:04:9d:d9:8e:0b:36:59:6c:de:44:69:31:8a:9a:c6:09:26:
11:73:c1:92:8e:5f:a6:82:a4:5a:39:f4:41:f5:80:8f:52:d7:
b8:18:d4:0a:e7:8d:93:7d:08:b8:a9:a6:93:42:e6:ce:34:68:
78:ac:a4:50:77:af:49:e8:da:ea:30:fe:2a:ed:29:14:1a:8d:
0e:08:bc:24:b4:72:9a:92:d4:8b:97:4c:40:55:4d:e3:0a:e5:
4b:f7:69:a1:2e:05:54:34:6b:4a:e2:99:c2:70:75:90:7d:a0:
82:93:79:45:38:ea:5c:b1:fc:38:0d:c6:cc:fa:42:2b:35:2c:
2a:3a:9d:55:cd:21:b6:e1:19:ba:e7:86:d6:7a:42:21:70:98:
33:4c:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net