Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa
File: tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa (raw, json)
Hash identifier: dYA2gqzlNnRY/+Z83i04orn08vaFeOTWTefS4wKcEJw=
Subject key identifier: B6:D8:73:36:3D:4F:87:82:A1:3C:11:AE:FC:88:FE:BC:0F:E3:0C:A2
Certificate issuer: /CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Certificate serial: 019522266844A597399E7AEC1FB703E9A019
Authority key identifier: C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa
Signing time: Thu 20 Feb 2025 06:58:17 +0000
ROA not before: Thu 20 Feb 2025 06:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50780
IP address blocks: 91.241.192.0/18 maxlen: 18
91.241.194.0/24 maxlen: 24
91.241.228.0/24 maxlen: 24
91.241.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:26:68:44:a5:97:39:9e:7a:ec:1f:b7:03:e9:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f2345a3fea4b3dbf25cb120f1b7842536268cd
Validity
Not Before: Feb 20 06:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6d873363d4f8782a13c11aefc88febc0fe30ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:14:9f:4e:dc:b2:24:e5:df:e0:ab:a7:a4:
c9:e9:92:6a:25:a6:13:b6:9a:70:74:f8:39:8c:6f:
50:e5:44:0f:98:26:ec:ef:3e:84:2a:ee:aa:1d:b5:
d5:c3:42:2d:97:13:04:fa:e5:36:1f:a0:14:ec:55:
50:2f:bc:76:d2:27:57:63:a1:87:05:f5:0a:1e:b2:
52:1f:62:24:45:a9:15:93:41:a3:22:f0:94:c7:be:
47:da:fe:cb:bf:2d:11:74:f2:b1:67:ab:50:ff:d3:
29:70:3b:73:4e:50:a0:66:a4:95:ad:e3:3f:12:65:
28:06:f8:01:04:f8:6a:70:1a:f7:29:d2:6d:47:6a:
72:33:fc:2f:87:f6:30:41:c6:52:b8:34:ad:59:16:
7f:2d:8f:a3:a5:d6:0e:b8:6b:4a:f1:7b:f7:e4:27:
81:e9:46:5d:3b:89:c3:2d:1d:20:62:14:a7:c3:c8:
f7:94:7d:0b:20:f7:be:f9:c8:82:19:7a:c3:79:91:
e2:75:1e:a3:69:d3:ac:cf:b9:8a:e1:c0:05:9e:cc:
6c:e4:0e:bc:61:5e:98:a4:1e:65:3e:f2:c0:0a:ef:
c5:9a:11:4c:69:34:ff:5c:de:7a:27:b4:9e:9d:61:
fb:8c:75:92:15:eb:bf:ec:e3:a0:9a:5d:7a:d1:83:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D8:73:36:3D:4F:87:82:A1:3C:11:AE:FC:88:FE:BC:0F:E3:0C:A2
X509v3 Authority Key Identifier:
keyid:C8:F2:34:5A:3F:EA:4B:3D:BF:25:CB:12:0F:1B:78:42:53:62:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/tthzNj1Ph4KhPBGu_Ij-vA_jDKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/48c28a-0848-4b0b-914a-0ea1e123417a/1/yPI0Wj_qSz2_JcsSDxt4QlNiaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:49:f6:c4:18:c9:90:3e:53:09:a1:48:7f:69:dc:e9:38:38:
86:18:a2:4c:26:5c:1e:f3:cc:52:0a:89:bf:cb:43:4b:bd:35:
83:25:d1:8d:25:b5:12:4b:28:6a:cc:ad:b7:c8:5d:95:de:20:
a6:72:7c:c7:b2:a7:37:07:be:35:b9:0a:23:ce:54:10:f3:c7:
4e:77:be:73:f6:ce:90:bd:42:10:a0:b4:93:55:2a:2c:b6:8f:
2e:97:1b:66:3e:33:10:ac:1d:e0:31:08:9d:da:94:b0:a7:41:
20:f9:32:5e:49:8f:f7:f9:de:f5:4c:65:fd:86:e6:66:db:9e:
bc:2f:6f:49:c2:05:a4:03:37:0f:0e:6b:f1:17:b4:3f:cd:ca:
aa:7f:e4:90:40:37:b3:40:b9:6e:f8:14:f5:e9:6b:c7:cd:6d:
a9:a6:a5:04:ed:73:f7:3f:da:8c:bb:cc:e4:3d:12:bd:8f:7c:
50:1d:5a:dc:9e:2a:b0:7c:f5:9e:54:87:10:66:5b:af:34:c5:
e3:6f:70:f8:35:a2:2d:63:65:80:70:15:8b:92:5c:64:a6:08:
53:ea:7f:aa:a1:4f:c6:7c:b2:14:78:a7:d4:2e:e4:cc:55:f0:
ba:d3:04:a5:7f:d5:64:16:0a:23:dc:b5:33:fc:cd:ef:a6:d6:
15:99:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net