Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/8FXx6e-u5uU4oX7I2qEVdoZijzg.roa
File: 8FXx6e-u5uU4oX7I2qEVdoZijzg.roa (raw, json)
Hash identifier: wEhTzMM4+HaPiSo3UljIAbk1aEVV4QI7TvJR33027+I=
Subject key identifier: F0:55:F1:E9:EF:AE:E6:E5:38:A1:7E:C8:DA:A1:15:76:86:62:8F:38
Certificate issuer: /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial: 019428266BB6CE8D09D49C1CEACC31AAC3DE
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/8FXx6e-u5uU4oX7I2qEVdoZijzg.roa
Signing time: Thu 02 Jan 2025 17:53:14 +0000
ROA not before: Thu 02 Jan 2025 17:53:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56461
IP address blocks: 91.224.176.0/23 maxlen: 24
188.191.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:6b:b6:ce:8d:09:d4:9c:1c:ea:cc:31:aa:c3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Validity
Not Before: Jan 2 17:53:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f055f1e9efaee6e538a17ec8daa1157686628f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:8f:6e:18:d2:90:7e:4c:9f:23:43:87:69:
1a:93:16:32:7d:e3:5b:06:e9:61:23:79:de:00:c1:
ce:c2:c2:09:ad:7d:53:a3:6b:08:2a:e3:6c:78:dd:
e1:b4:df:27:46:9e:ae:cd:41:d6:92:5e:fd:56:0e:
60:9f:fb:46:11:94:89:d0:30:72:89:ea:b2:20:d9:
86:8b:93:c1:11:ea:5f:48:a8:10:3a:21:f7:1f:fa:
9e:1b:db:d1:9e:08:47:3c:00:73:3b:c8:bf:ad:39:
df:de:9c:f0:54:ae:fb:05:51:f2:d7:b7:51:93:86:
b3:1e:cf:99:90:13:f4:f7:f5:54:24:e1:d5:d8:17:
8c:26:db:ef:9a:20:33:95:b3:d0:4b:ca:a2:f7:72:
93:38:ab:bb:fe:14:a8:9e:ef:3b:f4:14:38:3c:7f:
8e:28:1d:f5:1f:5d:74:4a:1b:9b:89:d2:29:3a:b1:
b2:a5:51:5a:81:18:06:8d:42:80:90:0a:fa:67:03:
b5:19:0b:08:f7:1e:7f:9c:bc:bf:b3:83:13:d5:1b:
96:43:9d:a8:e2:2a:24:d0:4b:3d:ce:1b:b9:1b:54:
67:dc:a0:26:40:fb:70:f0:61:b7:d1:fc:12:56:8e:
38:98:bf:b7:cc:15:28:24:72:8b:f4:42:72:9b:bf:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:55:F1:E9:EF:AE:E6:E5:38:A1:7E:C8:DA:A1:15:76:86:62:8F:38
X509v3 Authority Key Identifier:
keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/8FXx6e-u5uU4oX7I2qEVdoZijzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.176.0/23
188.191.176.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:43:79:87:2d:9a:f3:a6:02:51:ab:17:78:b2:b8:17:39:6d:
b5:fe:03:9d:64:e8:e1:48:43:a2:45:44:9c:21:ef:71:c8:1d:
ca:73:38:ba:26:2f:27:9b:85:40:f6:81:88:b6:db:b1:7a:e4:
71:89:69:ff:c6:05:4d:25:84:f6:1e:db:c7:48:a8:15:b7:01:
0f:ce:4d:5e:d6:f6:06:69:1f:88:8a:47:2b:85:77:39:11:4e:
ed:52:d9:50:20:42:7e:13:57:01:db:13:10:9a:b2:f6:4f:cd:
67:46:45:4c:31:15:8a:64:e6:1c:61:89:ec:dc:14:63:6c:b0:
24:98:0e:54:c7:db:64:fb:13:bd:43:b9:7b:d8:e0:cd:f4:ae:
72:ef:77:c0:32:f6:06:ed:da:54:a1:b6:64:dc:a8:78:dc:59:
87:6a:1c:00:6f:74:d2:65:59:63:ae:df:fb:56:d4:bf:bd:21:
cb:8d:2e:f7:d5:31:60:5f:a6:da:db:66:77:7b:7b:50:9d:d2:
fb:03:0b:2f:05:b2:a9:1e:5f:dc:6c:61:85:cf:e5:0a:66:3a:
9c:a4:c0:1a:03:68:ff:ff:4b:b2:4f:0b:9b:6d:03:cd:5a:8e:
80:b8:e7:0b:96:9d:de:e8:96:be:23:77:f1:19:41:65:e6:89:
fd:78:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net