Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/4C0OXayjBs5jaM2cyHhqCBjs15k.roa
File: 4C0OXayjBs5jaM2cyHhqCBjs15k.roa (raw, json)
Hash identifier: Z1AW2ktKl7nH/pif3t4jJj3aESh4kYBCdiYTjw37+0A=
Subject key identifier: E0:2D:0E:5D:AC:A3:06:CE:63:68:CD:9C:C8:78:6A:08:18:EC:D7:99
Certificate issuer: /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial: 0194228D2555DBD9FB9BA84808191DFCEA2F
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/4C0OXayjBs5jaM2cyHhqCBjs15k.roa
Signing time: Wed 01 Jan 2025 15:47:43 +0000
ROA not before: Wed 01 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199040
IP address blocks: 91.216.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:25:55:db:d9:fb:9b:a8:48:08:19:1d:fc:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
Validity
Not Before: Jan 1 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e02d0e5daca306ce6368cd9cc8786a0818ecd799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:0b:6a:20:24:d2:84:75:c9:ad:8d:63:e1:
64:eb:7e:3e:e0:12:7b:88:a1:2b:46:37:e4:5e:65:
5e:f8:12:85:60:84:f2:6b:6f:a2:c0:a4:8d:1d:79:
82:ba:f7:8e:84:b0:66:a3:ea:bd:9e:35:d8:f1:8d:
96:76:13:f6:af:ee:1f:9d:8d:73:17:fd:41:2d:e8:
e1:26:8a:0e:d0:52:ae:bd:f3:04:ad:36:76:e8:50:
37:0b:b2:07:4c:de:8b:c5:31:61:44:fa:c8:67:72:
a9:f0:38:b8:d6:86:a9:07:02:f1:c8:ab:4a:1a:0d:
79:c7:1b:db:a2:fc:a0:83:45:93:2f:17:d4:09:4c:
67:86:a5:30:fc:63:22:10:4c:17:48:e6:5d:3d:14:
6c:12:9a:1c:6f:6f:21:bf:c5:8b:a6:19:39:5d:63:
9b:10:05:ae:e3:62:c2:f0:6d:30:3a:9f:b1:8f:df:
c3:65:66:32:d4:3f:9a:08:8b:fd:53:4d:1f:d4:f7:
27:4e:59:ef:a1:65:78:c1:b4:fe:d5:5c:0e:3e:ff:
10:92:40:d7:e2:d9:43:66:50:11:fb:0e:54:61:88:
c5:98:38:ed:e5:32:91:54:42:f9:19:d8:0e:df:17:
cf:80:79:ae:dd:e8:01:b8:11:d8:8b:9c:38:33:28:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2D:0E:5D:AC:A3:06:CE:63:68:CD:9C:C8:78:6A:08:18:EC:D7:99
X509v3 Authority Key Identifier:
keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/4C0OXayjBs5jaM2cyHhqCBjs15k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:af:7c:56:9b:b0:7a:fd:ad:73:38:00:68:78:98:60:d4:1c:
1f:2e:6d:97:b7:4a:fd:27:ec:a1:b8:5d:e7:65:55:70:1c:70:
66:8e:9c:c5:50:6c:9a:d6:bf:39:e8:2e:11:50:2c:84:8b:b3:
4e:bc:b4:4a:e7:b4:29:df:92:b2:06:47:fb:49:e4:12:2f:b3:
7e:48:a1:7b:81:fa:bc:31:88:dd:c4:9d:36:e8:78:dd:a9:9b:
fd:0d:63:d6:b3:06:a9:26:83:b1:8f:60:44:64:93:3b:8b:d9:
04:a1:79:08:c5:0d:00:0d:8c:d1:5b:b6:59:08:8f:19:aa:81:
f0:6f:06:07:e7:25:2f:25:0a:d8:b2:c4:2b:90:55:8b:f0:5b:
56:17:b6:bb:6b:db:13:ac:be:67:a0:e5:6a:30:64:43:ee:de:
d1:34:54:22:d7:f7:1b:70:40:15:e3:a6:cf:93:21:84:d7:50:
68:9c:91:c8:08:9f:13:a0:d5:fe:5e:82:77:53:1c:11:8d:b3:
03:8a:18:17:4b:89:af:c0:3b:91:7c:82:57:ba:07:15:3f:8a:
68:d2:e1:b3:b8:80:cf:d5:31:2d:5b:02:67:a7:cf:61:45:62:
37:e1:f1:49:4f:a7:51:9b:f5:c3:d4:a4:01:34:17:92:22:33:
7e:36:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net