Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa
File: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (raw, json)
Hash identifier: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=
Subject key identifier: B5:36:7C:0A:11:D5:22:C5:7D:BE:CB:1D:25:14:70:A6:FB:7B:EC:87
Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Certificate serial: 019422203F0078EB57FF3EE7B1D92727CD0C
Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57445
IP address blocks: 91.232.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3f:00:78:eb:57:ff:3e:e7:b1:d9:27:27:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5367c0a11d522c57dbecb1d251470a6fb7bec87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:83:1f:76:66:38:3a:ce:9d:45:b6:96:01:
b6:4f:bb:0f:a1:cb:08:90:2a:45:b3:46:8e:a5:0c:
32:e7:16:72:d9:41:b5:25:62:9d:66:b4:2b:e2:89:
24:df:ae:ba:77:89:7f:41:24:d2:5b:33:81:aa:a5:
c6:56:8c:a3:ab:b4:b8:ba:58:65:4d:4a:a0:db:78:
5d:b8:be:33:8a:66:1b:44:95:e2:bf:10:e8:90:ab:
29:96:7c:ad:bc:60:77:1b:e5:97:48:fe:73:e5:e1:
cf:16:e1:ac:0d:e0:12:ee:4b:18:03:96:f0:94:55:
d1:0f:a8:17:25:f7:66:27:73:a3:34:87:cb:74:f8:
42:07:85:34:6c:32:4a:6b:79:33:a6:27:98:c5:eb:
b0:73:75:0a:a3:67:c9:8f:c0:7f:70:53:e0:ec:ab:
b1:06:ff:ac:2a:7d:59:14:5e:a3:37:01:87:14:bd:
7a:2d:69:d9:3b:33:ac:51:13:6a:d0:a8:22:9c:70:
5c:15:fc:5f:e4:c7:d5:e6:c6:93:13:8f:3c:38:c6:
42:b3:62:bc:55:93:ce:d4:50:b1:f2:17:6e:fc:6e:
e1:fa:b2:8d:4c:8e:12:b6:78:c4:06:6b:86:75:88:
6d:ce:32:33:4e:b4:a1:f2:2d:7c:b9:0a:fa:36:bd:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:7C:0A:11:D5:22:C5:7D:BE:CB:1D:25:14:70:A6:FB:7B:EC:87
X509v3 Authority Key Identifier:
keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.26.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d8:ff:8d:cb:2b:ac:2f:d7:3f:96:de:6a:3f:0b:2d:a9:d3:
21:20:44:94:c5:67:55:1a:71:45:a5:62:42:23:f0:a5:aa:4e:
14:6b:91:d4:19:53:4d:f7:e0:dc:0c:44:d3:27:c5:01:a1:b7:
15:81:b5:ae:96:3b:a5:fe:2e:03:a0:93:54:af:e3:80:8d:7e:
08:94:c9:63:a7:9c:c3:2e:63:80:e1:48:78:1e:5c:d1:c0:af:
43:b2:75:82:62:c7:a4:89:b1:66:03:17:35:5e:24:3b:7f:7b:
8b:42:76:81:b5:71:fb:ec:2e:7c:5c:94:e0:b3:3e:03:7e:ea:
eb:4c:1d:3f:93:f5:78:ea:f2:c4:58:99:45:ea:53:c6:c4:8b:
3c:fd:06:be:bd:e5:c9:02:f5:94:3a:f2:09:94:d9:e6:0a:ad:
b1:b1:e5:21:d4:90:da:c3:a9:89:8f:3d:c6:28:d0:6b:8a:fc:
b9:72:b8:7a:fa:5a:23:6e:dd:32:f3:3c:f8:65:90:fa:29:54:
fb:a2:66:ee:b9:6d:07:17:f4:30:19:84:f5:40:5c:cd:87:f8:
b6:1b:2e:b1:81:4d:16:fa:6b:da:42:cc:ce:2c:54:d5:26:3e:
d9:97:54:1e:5d:32:ef:80:7d:76:05:8d:6c:99:e8:0a:10:68:
ab:40:97:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net