Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa
File: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (raw, json)
Hash identifier: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=
Subject key identifier: FA:1A:B2:10:6C:28:9C:21:98:F4:AD:8B:DF:C3:F0:EF:FC:C9:57:F9
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 019422FB6298C57B0BAF84DEE5DFDDB956EA
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa
Signing time: Wed 01 Jan 2025 17:48:07 +0000
ROA not before: Wed 01 Jan 2025 17:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43125
IP address blocks: 91.194.82.0/23 maxlen: 23
91.194.82.0/24 maxlen: 24
91.194.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:62:98:c5:7b:0b:af:84:de:e5:df:dd:b9:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Jan 1 17:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa1ab2106c289c2198f4ad8bdfc3f0effcc957f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:7e:e4:64:38:75:ba:2c:d9:27:45:18:53:
d3:1d:37:8a:b3:ce:93:e1:52:f3:db:88:b1:2b:7e:
a8:48:44:91:1f:b1:07:7c:34:67:92:f0:82:db:d4:
61:98:54:75:a2:82:34:40:6e:b7:4c:e8:7f:ec:49:
dd:e5:9e:e7:b7:55:3f:98:bf:fe:13:3d:c2:94:9f:
41:e2:83:1b:1b:50:20:c4:bc:5f:91:8f:a8:9e:21:
3e:3d:55:d1:9b:96:c5:51:28:d4:0b:48:e8:28:63:
01:bf:a1:2d:9a:0d:d6:29:41:8e:8c:28:c0:15:88:
e3:21:d3:f6:c5:40:09:ea:eb:63:68:7f:55:95:4d:
cb:0a:26:09:d1:18:d6:24:1d:df:10:6d:56:84:2b:
2e:bf:24:ae:f1:41:6a:ec:dd:de:ca:57:44:d7:35:
99:17:9f:87:54:e5:49:43:98:45:1b:15:dd:9e:8a:
67:38:65:fe:aa:e0:5d:2c:ca:cb:a6:53:63:e3:0a:
04:6f:3f:78:49:92:1d:7d:4d:d4:16:c5:22:12:69:
fc:24:df:32:60:bd:d2:34:d0:8c:95:ca:62:60:5f:
ab:1d:e8:72:9d:10:5d:66:8e:26:0b:8a:aa:5a:95:
e9:bc:24:04:91:38:38:6f:28:eb:81:0d:9d:ba:b0:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:B2:10:6C:28:9C:21:98:F4:AD:8B:DF:C3:F0:EF:FC:C9:57:F9
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.82.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:b7:0f:86:6a:68:4e:64:6c:91:f7:16:04:ce:bb:0c:a0:e4:
f5:2a:d6:dd:17:84:0e:23:1c:c4:7f:c3:f0:85:25:f5:e5:3d:
84:fb:65:69:55:d3:74:ef:fb:00:03:5c:2e:87:27:39:30:af:
9c:71:02:6b:81:71:29:db:d8:bd:94:4a:46:0d:ef:e1:89:d6:
2f:83:03:88:3a:64:21:bb:2c:ce:bd:2f:51:b8:8f:6f:57:f4:
63:54:e8:48:d3:a9:e7:60:c7:5c:98:73:a0:26:4b:65:71:86:
37:80:d7:7d:3d:98:13:8d:08:25:c6:d3:d2:4f:3c:7d:87:90:
26:f6:0e:fb:23:6e:26:29:b2:d7:b3:bc:c8:65:17:53:94:5f:
92:5c:5d:5d:a0:f9:20:b2:a2:d4:2f:c4:46:0d:47:f8:51:52:
5f:f8:d3:30:1e:0b:72:13:81:ff:9e:cf:33:db:b9:fd:8f:77:
53:4b:6a:8a:19:40:a3:03:26:22:18:53:70:21:6c:e4:ed:38:
f5:6c:ff:10:7f:5b:56:c5:bc:23:b9:d9:03:4a:f7:6b:9d:35:
1c:15:2b:ee:f1:ae:d9:0e:bd:9b:f7:05:16:e9:49:e2:10:1f:
41:f9:76:a0:ef:cb:41:47:25:15:b3:54:f2:33:68:34:e2:83:
ef:34:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net