Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/Aa9R_Libiqvgoa4YWWk8r3SzA0k.roa
File: Aa9R_Libiqvgoa4YWWk8r3SzA0k.roa (raw, json)
Hash identifier: wG5zYELHiZDPN6IPcQ73blie+D4kfwhoHNSgUdlo0n8=
Subject key identifier: 01:AF:51:FC:B8:9B:8A:AB:E0:A1:AE:18:59:69:3C:AF:74:B3:03:49
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 01961EA2DC3036B20EA5FBCF5BA2551FD1AF
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/Aa9R_Libiqvgoa4YWWk8r3SzA0k.roa
Signing time: Thu 10 Apr 2025 07:38:31 +0000
ROA not before: Thu 10 Apr 2025 07:38:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20738
IP address blocks: 79.170.40.0/21 maxlen: 21
79.170.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:a2:dc:30:36:b2:0e:a5:fb:cf:5b:a2:55:1f:d1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Apr 10 07:38:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01af51fcb89b8aabe0a1ae1859693caf74b30349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:57:d7:04:30:df:64:8c:55:24:4b:42:7b:
51:94:52:7b:02:97:5f:20:99:5c:e1:b0:5b:bd:3b:
b7:4f:0e:54:db:27:60:32:e1:a2:4d:b5:d0:47:05:
a2:97:b9:f2:46:49:b9:e9:4f:b9:a8:e4:4a:e0:b8:
f5:26:dc:7f:8f:d8:ca:bc:0e:b2:bb:f1:0b:c5:e0:
35:f6:79:ba:11:12:b3:27:4c:f2:61:37:1f:66:db:
ed:9a:bc:be:ad:bc:aa:a7:e8:5d:f4:6c:62:c4:bd:
66:d6:5a:0e:3a:b3:aa:8f:44:26:df:cf:f1:9d:10:
e6:65:4c:48:c9:e3:55:56:67:ce:c5:cf:ab:88:5f:
df:df:85:b3:13:57:18:a1:24:4f:ad:ff:9c:37:1d:
8f:69:9f:bf:db:02:f4:c5:6d:8a:d5:06:7b:75:5a:
e4:e2:a5:00:3d:81:70:9a:ed:f6:a2:d5:e5:60:8d:
ed:d3:e0:59:f7:f4:49:c7:17:5d:49:bc:7f:7e:59:
a2:aa:0f:05:d6:f9:ef:4f:8c:5e:c2:f5:4c:7b:45:
4b:c2:7d:4c:e2:91:6d:79:a4:5d:2f:38:2b:db:eb:
2e:9e:22:4a:a3:0b:f2:99:b5:79:35:c8:4a:87:4b:
e7:24:54:bb:e5:9c:66:f5:19:b7:2c:6f:de:8b:47:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AF:51:FC:B8:9B:8A:AB:E0:A1:AE:18:59:69:3C:AF:74:B3:03:49
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/Aa9R_Libiqvgoa4YWWk8r3SzA0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.40.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:ae:a8:1b:17:81:82:56:e6:17:5f:6b:18:e7:20:b9:db:d4:
f2:92:ec:9d:5b:cc:f2:8d:d1:ad:a1:6c:c0:5e:d8:11:86:f3:
59:90:50:f9:17:2b:f1:05:8c:76:fc:37:7d:1b:03:b3:e1:5e:
19:23:13:18:2c:69:56:ff:2d:df:61:af:1e:1a:20:b3:78:58:
66:4f:6c:45:75:9b:a4:92:76:28:a0:b3:ab:db:28:0b:6f:d2:
b0:e1:3a:7b:62:ae:5e:ff:55:5f:2c:37:fa:12:e7:af:7a:01:
31:b4:ce:58:aa:16:42:b0:28:34:e6:4c:26:9c:7c:7f:d8:ea:
3d:52:3b:8f:5a:eb:58:23:7c:a4:04:26:d2:83:35:47:cc:bb:
41:68:37:ce:66:f2:14:33:c6:cb:1d:b2:40:91:20:11:f2:d3:
7b:db:c6:04:4c:91:95:2e:dd:86:6c:a1:2f:af:b0:41:7d:9c:
62:e3:6e:a4:73:cc:09:29:e0:74:1c:ab:5e:46:7f:cd:30:c2:
56:48:06:f3:21:22:9a:ca:27:0e:40:6c:9d:77:1b:0a:8d:24:
5a:bb:4e:d8:69:5b:22:33:90:0c:bd:c9:87:af:a6:0c:f6:c7:
39:35:43:f5:82:48:68:85:f5:5e:97:a3:92:a6:2d:72:f5:a1:
8e:3b:ea:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net