Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/NvJ8oLDEBqhT1H-zCdKolqnypws.roa
File: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (raw, json)
Hash identifier: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=
Subject key identifier: 36:F2:7C:A0:B0:C4:06:A8:53:D4:7F:B3:09:D2:A8:96:A9:F2:A7:0B
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 01941FFA21D01B67C02CE243A4F7BECFD354
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/NvJ8oLDEBqhT1H-zCdKolqnypws.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196837
IP address blocks: 91.223.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:21:d0:1b:67:c0:2c:e2:43:a4:f7:be:cf:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36f27ca0b0c406a853d47fb309d2a896a9f2a70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:d8:15:aa:38:4b:91:6f:6d:9d:ad:21:69:
ae:59:44:01:1e:0d:86:08:5e:da:d4:5c:b6:79:b9:
e9:45:5a:a2:72:4b:25:a4:74:83:47:1c:96:af:5a:
b8:f8:5f:ca:d3:73:f1:17:7b:51:d7:20:c5:eb:d5:
dc:3f:4c:5c:6c:d7:c0:97:1d:c2:e6:d2:ed:3b:4e:
5f:32:6d:4f:8e:93:e3:cd:ac:10:a3:d7:7a:db:1a:
ea:4e:5c:7f:a4:13:5e:e8:d7:2c:46:f2:14:e2:80:
15:14:5a:77:bf:d4:a5:5f:3b:3a:e7:d6:df:1a:02:
e5:74:3c:2f:a9:a0:0a:28:80:55:bd:a4:59:96:4e:
85:a1:2a:bb:2c:17:b7:60:a6:a7:0d:be:d2:5f:07:
4b:36:74:fe:66:a4:c1:8c:ac:2b:50:4b:1f:90:11:
8f:1b:f2:5f:b8:ed:9c:4e:50:5b:4a:ef:39:34:cd:
78:64:60:2f:22:fb:d8:56:a3:b7:2f:ec:51:db:94:
43:78:ec:0a:a3:1a:40:2b:79:8f:6d:63:4f:df:1a:
e7:10:b8:5f:cc:ca:86:d7:70:c8:e6:ab:7f:d1:df:
2e:1a:33:fb:3e:7e:ab:40:04:33:1c:b5:e8:db:b3:
92:a9:2d:a4:65:5a:28:c2:db:4d:5a:7e:3c:00:3e:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:7C:A0:B0:C4:06:A8:53:D4:7F:B3:09:D2:A8:96:A9:F2:A7:0B
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/NvJ8oLDEBqhT1H-zCdKolqnypws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a8:16:43:50:5c:6a:98:26:8c:9c:6c:fb:9e:9a:1c:f1:5d:
c2:0d:ad:9a:02:6b:f0:e7:a8:f2:a8:bf:d0:e9:97:8d:a4:e4:
47:55:13:b2:8a:9f:28:4b:ed:d8:30:e1:28:a2:3e:0a:37:cf:
1c:a7:0c:1f:b0:ee:d0:ff:c1:e1:1e:ec:0b:8c:7b:cc:77:65:
89:f7:3e:30:3e:d3:8c:1e:44:cf:e6:5c:eb:bb:35:3d:e6:a0:
4e:4f:7c:f5:00:93:13:11:96:b0:e2:b0:37:18:04:9d:4f:d5:
28:af:8e:22:42:88:b0:a6:2b:c3:4b:2e:e5:92:4b:12:8a:7d:
64:8f:e1:d9:47:8a:be:c3:28:fd:4e:8e:34:eb:b9:fe:d5:d8:
cb:27:59:94:27:5e:f6:08:99:b3:ba:a9:78:39:d8:48:fb:60:
93:d4:6c:d1:56:27:99:a4:ee:af:fa:70:fc:3b:83:33:25:15:
9d:d4:51:26:14:03:1f:f2:17:9e:b1:c8:83:dd:3e:9a:f1:65:
c7:0b:28:78:cf:7d:ea:8e:ab:11:3c:ea:68:7e:93:2e:25:b9:
12:72:b1:60:29:b4:d2:86:ce:19:da:3d:80:7a:e8:1a:d0:62:
ac:70:50:2d:0c:a2:ff:ca:16:47:a9:70:10:88:d2:64:ab:3e:
9b:06:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net