Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/cx1g5onsIc-hAAu8dnSh1N5rp3U.roa
File: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (raw, json)
Hash identifier: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=
Subject key identifier: 73:1D:60:E6:89:EC:21:CF:A1:00:0B:BC:76:74:A1:D4:DE:6B:A7:75
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 019420686F247EE89053286F8659859378D6
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/cx1g5onsIc-hAAu8dnSh1N5rp3U.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41706
IP address blocks: 91.142.135.0/24 maxlen: 24
193.30.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6f:24:7e:e8:90:53:28:6f:86:59:85:93:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=731d60e689ec21cfa1000bbc7674a1d4de6ba775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:80:0d:89:2a:22:5f:b7:7e:db:28:5b:0d:d6:
99:60:c5:e5:d7:40:fe:9d:30:42:bc:0e:f7:2e:f3:
6c:4b:f9:be:0c:de:49:7b:7d:1b:f7:be:5a:8b:bb:
d1:3c:77:ac:8f:e0:dd:da:d6:f8:6f:e8:b7:1c:9a:
db:68:c0:3c:ba:6e:84:8d:2d:59:0e:e5:28:23:bd:
f5:72:60:66:a3:fa:a4:83:28:14:fc:60:70:f8:ed:
db:ba:a2:52:63:57:b5:18:af:13:dc:c2:5e:c5:86:
b5:1e:d1:0c:e8:ac:9c:de:0d:b2:21:e9:7d:07:f0:
78:a4:89:4f:8a:76:f2:81:00:79:bd:88:32:38:72:
a7:9e:dd:c4:d0:f3:9d:95:14:ac:f6:5f:32:f5:71:
f6:74:06:ea:7b:56:9a:a6:14:a6:be:18:0b:b6:24:
24:37:e2:22:dc:be:40:39:29:3f:01:bd:13:9d:76:
eb:af:aa:48:20:85:4d:e0:c1:36:8c:3f:91:7c:5f:
36:7a:05:5a:e2:77:5f:28:6b:82:95:87:84:90:ca:
04:9d:eb:e6:4b:84:38:e9:68:08:ff:93:ec:41:9a:
9e:a9:e3:e7:e9:c9:f7:cd:83:da:94:46:8b:ef:56:
22:53:81:86:f5:52:d9:bc:f2:e1:36:09:d2:b7:f7:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1D:60:E6:89:EC:21:CF:A1:00:0B:BC:76:74:A1:D4:DE:6B:A7:75
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/cx1g5onsIc-hAAu8dnSh1N5rp3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.135.0/24
193.30.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:66:80:71:a4:c5:a4:6c:0e:28:f8:ef:45:c8:4b:f9:2a:22:
ef:23:50:3b:99:6a:76:8f:1f:83:fb:fc:b6:1e:75:ce:29:5c:
76:74:e0:18:bd:d4:18:13:91:9c:d1:14:ae:c0:c5:bd:7f:7b:
1e:d6:7d:28:f4:dc:cb:9b:87:e3:76:e0:e8:54:0a:25:b5:82:
6d:f9:8d:c4:b6:43:cb:ed:50:ca:5f:56:8e:b5:85:2b:dd:38:
05:69:a0:bf:88:0e:e1:fa:1c:f7:d7:ab:7e:4f:53:eb:70:62:
b4:85:2a:ef:93:2e:44:d2:63:2c:c3:69:9e:dc:24:5d:c5:f3:
67:fe:ce:cd:87:fd:16:a0:33:18:48:ac:79:5e:24:91:19:d6:
db:bd:47:8c:00:b6:c4:d1:d3:37:08:72:1c:fb:48:17:14:bf:
4b:68:90:1a:63:32:ea:1d:f0:8c:69:3e:15:d9:e0:7c:d3:b7:
38:70:d1:f1:dc:c1:28:a1:12:05:f8:ab:26:ca:0f:d0:ef:25:
32:c9:fc:66:a5:31:3b:a4:3e:56:a6:19:fb:5d:83:ce:f0:f8:
56:ee:cd:a6:05:8c:9f:53:52:71:f4:95:98:6c:a2:1b:84:80:
3e:88:22:7f:fb:66:68:84:4c:37:8d:70:48:72:29:24:20:00:
db:1d:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net