Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/SR9wQfEl4hsimVx-_CLVSWn9NLA.roa
File: SR9wQfEl4hsimVx-_CLVSWn9NLA.roa (raw, json)
Hash identifier: 9+X16EqRYxx0KZ3SyD6WKcNWmq57GkzdE/2ZqmRpGZI=
Subject key identifier: 49:1F:70:41:F1:25:E2:1B:22:99:5C:7E:FC:22:D5:49:69:FD:34:B0
Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial: 019424B360898D9E6A90ED75DE3145302C5B
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/SR9wQfEl4hsimVx-_CLVSWn9NLA.roa
Signing time: Thu 02 Jan 2025 01:48:42 +0000
ROA not before: Thu 02 Jan 2025 01:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64426
IP address blocks: 109.206.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:60:89:8d:9e:6a:90:ed:75:de:31:45:30:2c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Validity
Not Before: Jan 2 01:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=491f7041f125e21b22995c7efc22d54969fd34b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:a6:7c:8e:b4:3b:ae:c5:fd:64:ae:6a:c7:
e0:e4:14:fc:2a:7d:43:33:25:ec:ca:60:33:0e:77:
cb:69:9a:74:3d:29:d9:58:26:99:a3:2a:52:4b:c0:
20:38:eb:d9:97:b4:0b:11:81:81:fe:77:58:b4:a3:
d2:83:5b:db:67:67:b6:54:bb:fc:dd:d3:bc:65:24:
c9:a1:a8:a3:2c:5b:f2:31:62:84:ad:e1:0b:92:b5:
c3:39:2c:63:c3:41:7c:76:5e:86:09:04:71:e3:43:
97:2d:d6:ef:7a:98:c6:9f:54:02:69:34:aa:45:f8:
0b:c1:ed:ff:04:de:e6:b7:6a:a6:18:4c:35:05:6c:
fe:a9:b8:5b:f1:f2:b4:50:aa:fd:78:2d:1d:4f:52:
33:f8:65:01:0e:9e:0c:bc:08:87:cc:09:5a:90:9d:
53:f0:8d:c4:36:c4:82:41:07:84:b0:67:0f:d2:82:
6b:f4:4b:0d:3b:ee:b2:aa:94:38:bf:44:7b:7d:00:
d4:5f:4c:24:41:21:22:9d:eb:c7:85:2d:45:24:2f:
e9:0e:78:92:b3:61:e5:98:33:be:26:81:64:d1:54:
76:3f:e1:c4:1c:d7:db:d2:63:9f:b1:7c:b5:4b:6e:
db:03:97:cd:4f:9f:70:e9:00:37:79:9a:fb:5d:c9:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1F:70:41:F1:25:E2:1B:22:99:5C:7E:FC:22:D5:49:69:FD:34:B0
X509v3 Authority Key Identifier:
keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/SR9wQfEl4hsimVx-_CLVSWn9NLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6c:f9:56:46:f6:8b:f2:50:8e:d3:f8:ed:77:02:d9:c9:fc:
d3:e9:26:d6:83:65:86:c5:73:03:2b:37:2b:f6:58:d1:eb:1b:
b9:3a:e2:40:50:d0:d9:67:32:5e:b7:fe:8e:25:75:b7:55:0c:
a8:55:fc:ea:b2:57:ac:ce:64:0e:bb:6c:23:66:53:b6:72:56:
6a:d4:79:dd:80:f7:b1:de:a4:b6:a2:85:74:b5:df:c1:1e:c6:
87:03:00:82:47:08:95:56:9c:1b:46:0d:78:aa:7b:6a:af:58:
f9:bb:48:fa:ce:7e:cb:d1:f5:83:63:a3:17:04:00:ff:46:ab:
21:14:04:d0:d3:2b:40:0c:8c:a5:e5:c6:e5:bd:00:b4:4f:a1:
f8:6c:59:63:e8:7e:72:90:9f:d6:19:b4:9f:64:5a:9a:ee:94:
89:9a:c5:11:34:3b:f8:ff:ae:e7:28:d4:68:94:b5:c4:56:e2:
e8:8f:f8:c6:13:96:0e:c9:fb:00:6d:8d:40:c6:23:50:dc:e3:
bb:37:3e:fb:ba:50:8b:d8:8b:6c:09:cc:3c:3a:04:01:38:ae:
df:f9:67:1e:61:fc:4e:9b:9c:ce:56:25:df:80:37:5d:be:a8:
3c:27:fd:a3:be:fd:36:2d:09:28:4f:5e:30:8b:be:93:67:21:
f1:94:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net