Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa
File: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (raw, json)
Hash identifier: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=
Subject key identifier: D5:0B:D2:C3:03:2B:A8:B3:2D:2B:75:A0:AC:4E:FE:06:3B:89:35:95
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 0194BAFA32A3726F46EB9EDB952A1170E36B
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa
Signing time: Fri 31 Jan 2025 06:09:06 +0000
ROA not before: Fri 31 Jan 2025 06:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30779
IP address blocks: 88.135.224.0/19 maxlen: 19
91.200.72.0/24 maxlen: 24
193.19.74.0/23 maxlen: 23
193.34.20.0/22 maxlen: 22
2001:67c:203c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:fa:32:a3:72:6f:46:eb:9e:db:95:2a:11:70:e3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Jan 31 06:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d50bd2c3032ba8b32d2b75a0ac4efe063b893595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:0b:a2:e2:86:3a:85:6d:cd:f9:3d:04:8e:
a3:4e:0c:e0:3a:4e:57:2f:ac:b5:08:a8:c1:97:fb:
75:df:b5:dc:99:2e:3d:e4:e2:55:7f:9b:32:61:a0:
18:7d:74:df:d3:42:1b:86:5e:ce:e2:7d:6b:5f:86:
1b:91:05:9f:29:d0:58:58:c5:0c:ce:82:92:cb:15:
a8:c8:18:39:69:10:9e:e0:2e:bd:1f:02:19:99:cd:
1b:c5:08:a0:8f:a1:c2:49:32:b1:24:fe:23:5b:6a:
51:02:2a:f6:8a:f1:7d:f9:ba:58:b9:b9:34:4b:18:
f8:8b:27:1f:d8:e9:01:04:b1:42:f8:a5:d4:36:3a:
54:32:74:f7:fd:30:71:eb:2f:90:0d:2a:fa:25:8f:
15:bb:12:b3:ec:eb:6c:dc:f7:e5:a8:14:70:36:c4:
58:9c:6d:c2:04:a0:ba:61:ee:47:4e:86:dc:82:a7:
48:86:8f:b4:18:db:e0:f3:96:0b:48:9f:d6:b5:7f:
a8:8f:29:ad:5d:31:72:b7:77:59:f2:61:37:ff:18:
e0:8e:52:d2:61:59:a0:a4:87:41:09:79:f8:a0:85:
82:2d:c4:04:96:61:0b:f3:22:83:f5:5b:30:bb:04:
3d:8b:14:25:9a:fe:b8:47:ca:91:c4:f0:55:9c:b6:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0B:D2:C3:03:2B:A8:B3:2D:2B:75:A0:AC:4E:FE:06:3B:89:35:95
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.224.0/19
91.200.72.0/24
193.19.74.0/23
193.34.20.0/22
IPv6:
2001:67c:203c::/48
Signature Algorithm: sha256WithRSAEncryption
07:9d:d1:60:8e:d5:a1:98:f7:a5:4b:2f:6d:32:7c:7d:e7:d6:
1b:f5:d7:84:70:b3:1c:7c:7e:f9:61:85:f2:8f:69:52:63:d2:
f9:7b:29:59:8a:2a:14:d7:e5:92:7a:4c:90:0c:01:b6:22:ff:
c6:2e:82:ab:cd:38:44:b2:c7:e2:9c:89:4a:f5:1b:8e:f6:5c:
ab:f4:77:bd:39:9f:9c:5b:af:ec:a5:36:bb:c1:24:ef:4c:45:
81:59:2d:44:c9:89:67:3a:20:b4:99:2d:c7:8a:33:c1:59:3a:
6c:73:61:be:3f:06:09:6c:7e:65:09:65:f4:b9:f4:d9:ea:8e:
d0:48:2a:49:59:e2:31:45:5e:51:73:e4:2f:75:01:49:95:43:
c3:10:05:b6:11:8c:eb:da:2d:1a:0a:93:4c:d6:91:55:ff:19:
42:a7:14:03:17:9a:f4:a1:2d:15:c4:00:ed:21:41:2b:07:88:
07:99:67:43:bd:fc:94:27:5d:07:12:b9:25:aa:ab:4e:eb:5c:
9b:9e:91:4b:4b:ee:a2:46:61:f6:fa:e0:b4:2d:ea:09:d5:80:
47:4e:19:13:c1:17:e8:41:fc:78:5a:66:4e:b8:c5:c7:86:1a:
99:d9:6f:77:8d:5b:75:39:d4:fb:83:60:a1:60:d0:3f:85:35:
b9:79:bc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net