Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kGuaXeFXRy7zk4r_fksHu1gERzY.roa
File: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (raw, json)
Hash identifier: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=
Subject key identifier: 90:6B:9A:5D:E1:57:47:2E:F3:93:8A:FF:7E:4B:07:BB:58:04:47:36
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0195BDF4C4B466E5D5F62A9C3AC2F8988A50
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kGuaXeFXRy7zk4r_fksHu1gERzY.roa
Signing time: Sat 22 Mar 2025 13:04:49 +0000
ROA not before: Sat 22 Mar 2025 13:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43317
IP address blocks: 91.209.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bd:f4:c4:b4:66:e5:d5:f6:2a:9c:3a:c2:f8:98:8a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Mar 22 13:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=906b9a5de157472ef3938aff7e4b07bb58044736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:92:fe:01:78:a0:ce:22:27:09:a3:f8:e7:
d8:b6:0a:a5:29:a5:53:f5:08:1a:9f:bc:1a:c8:c5:
03:c7:37:f3:4c:e5:fd:ec:ca:c4:39:74:a6:86:97:
5f:d1:5f:33:69:23:41:29:6d:d0:3b:9d:72:53:4a:
ea:9d:6c:00:b0:84:02:f0:aa:62:2c:64:bb:cc:ab:
a5:3c:d9:2d:8a:72:af:85:5a:ba:a4:7d:a8:b0:2a:
95:e2:db:c9:4f:06:fc:20:d7:18:74:9d:ca:15:8b:
a7:e0:a2:cf:a9:fd:42:37:28:91:94:22:96:88:5e:
d6:46:91:60:04:be:2c:a8:5f:d2:fc:0c:06:d3:ba:
15:84:74:87:18:19:2c:89:47:a6:e7:d4:8e:d0:1c:
ba:0f:c9:d9:0f:e7:da:e2:f4:23:6f:12:b3:5d:ba:
48:68:38:54:6b:89:3b:20:ba:b7:5a:55:6d:31:82:
fa:33:60:25:f9:17:89:63:bb:42:d9:62:4d:55:72:
42:82:4e:0d:8b:b6:af:c6:2d:aa:a4:21:b8:3f:c8:
1c:48:97:df:5c:41:59:ba:b0:44:55:21:6b:ee:dd:
f5:a8:21:18:95:5a:32:95:96:c6:ff:c5:87:5c:56:
06:c7:1d:db:b6:06:41:52:d7:3c:72:82:d9:cf:44:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6B:9A:5D:E1:57:47:2E:F3:93:8A:FF:7E:4B:07:BB:58:04:47:36
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kGuaXeFXRy7zk4r_fksHu1gERzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:2f:f1:fa:14:13:a8:7d:6f:3f:53:a1:03:09:1a:dc:0c:15:
c1:44:6b:d1:70:b8:0e:56:35:fc:62:32:4a:02:9b:37:85:da:
7f:7f:09:96:9c:62:e4:24:c8:ea:18:88:07:98:a1:27:87:fa:
c2:5e:51:e4:26:c7:7b:3b:24:ae:57:c4:8d:8b:89:57:aa:d4:
c2:d0:fa:3f:82:a2:84:a6:a7:65:3c:15:5b:cb:57:c6:9e:4d:
de:1d:a1:a8:82:28:d1:76:1e:50:a7:97:dd:6c:32:88:71:f8:
36:3a:1c:85:4d:a4:2a:9d:b1:23:1c:0f:8a:71:51:65:98:0e:
ea:2f:1a:ae:ba:2c:23:08:6b:01:b3:38:ff:0e:f1:b2:93:8b:
4d:64:a1:15:bf:6e:4d:6a:65:6e:33:bd:bd:30:af:d4:13:c9:
bd:97:51:9c:30:8e:78:33:dc:aa:9f:4f:2a:02:f6:cf:31:e7:
be:cc:81:77:4d:b9:7e:70:84:05:83:6d:89:37:33:db:a8:7a:
f7:94:ea:f4:e6:df:3a:d6:4e:83:1b:5f:d7:67:33:57:9e:4a:
f2:73:39:92:f6:c9:34:14:a2:a5:e3:c5:e2:ed:7b:6e:8f:75:
fd:9a:8b:cc:d3:9a:58:24:d7:81:86:4c:80:f1:c2:69:12:0d:
c2:27:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net