Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/hnZH6pIFSGLaypOQJtt6BM-t6wI.roa
File: hnZH6pIFSGLaypOQJtt6BM-t6wI.roa (raw, json)
Hash identifier: dZt7cTrfXwwIuah9TNCVUQR8yCfWj6swdtcp5F7aYmU=
Subject key identifier: 86:76:47:EA:92:05:48:62:DA:CA:93:90:26:DB:7A:04:CF:AD:EB:02
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FACD2924AA8B44BEFBC3814AAD72A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/hnZH6pIFSGLaypOQJtt6BM-t6wI.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 91.239.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ac:d2:92:4a:a8:b4:4b:ef:bc:38:14:aa:d7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=867647ea92054862daca939026db7a04cfadeb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:f0:c1:0a:b0:32:b6:41:1d:71:00:53:e8:
7e:ec:05:46:73:8c:23:73:2a:f5:41:8a:d4:31:c3:
e6:11:f4:a4:24:dd:5b:53:5e:ec:d2:b0:e5:48:af:
e2:16:67:a5:60:44:58:42:62:47:91:0c:53:0b:ca:
70:ea:9c:15:93:fd:d6:33:cc:8b:f4:88:8c:f3:81:
b3:62:17:6b:9d:b3:82:ef:a8:93:0f:38:1b:52:ce:
4b:7c:65:77:73:0a:95:27:de:8e:d0:39:03:1c:6c:
15:c5:c1:88:97:c0:31:b4:34:29:12:03:a0:5d:d3:
78:97:ed:84:49:25:d3:8f:4d:95:69:a0:75:d9:06:
a0:18:3b:90:6a:90:91:6d:cc:23:52:c3:36:52:76:
22:6e:5a:de:2b:d0:19:ec:7a:be:13:2d:60:97:5a:
64:a9:c4:30:83:27:67:51:20:f8:48:d5:6a:51:e4:
89:9b:5d:61:2c:aa:4c:e1:a5:c8:31:44:98:4e:1d:
37:fd:be:f1:23:f9:3a:8d:be:a5:e7:67:a4:17:8c:
bf:0a:dc:3a:a3:fc:4c:41:3b:0b:c8:af:33:22:e6:
63:8f:5b:e5:36:5d:8e:2b:43:86:f2:9f:01:b8:f1:
68:a0:4b:ee:d2:ae:ea:75:0a:23:3b:95:e7:ba:c6:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:47:EA:92:05:48:62:DA:CA:93:90:26:DB:7A:04:CF:AD:EB:02
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/hnZH6pIFSGLaypOQJtt6BM-t6wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0e:40:d3:6f:22:36:33:14:13:99:6e:cb:ed:2f:d1:a1:62:
4e:00:d0:42:3e:99:ca:30:c4:25:07:23:a9:48:cd:4a:da:4b:
dc:e7:13:d4:21:f0:c6:65:15:42:d9:94:c3:a2:98:e2:7d:a5:
95:5d:29:1b:9b:1e:f6:5b:06:dd:38:26:24:ac:e4:38:35:52:
8d:39:e5:5d:af:69:1c:3a:c6:d1:27:8d:2b:c7:8a:c1:52:6e:
93:6f:f1:78:ca:cb:30:7b:0c:ef:47:27:84:aa:cd:27:b4:ea:
6a:60:4e:a3:9f:9e:40:4c:f6:a8:c7:90:09:2b:73:8a:2e:38:
d4:dc:01:a7:93:23:31:4e:99:94:e7:16:03:96:c9:16:28:38:
60:4e:14:64:ed:fc:4a:14:ea:86:0a:9d:3f:98:0d:2c:b9:59:
d4:69:72:d6:20:b3:57:a5:68:95:28:d8:d7:6a:5a:b1:bc:5d:
6c:58:81:87:2f:9e:a0:a4:e3:4f:22:88:0f:d8:67:1a:c0:de:
33:fa:f1:23:74:6f:e0:c7:10:af:2b:80:ff:a2:a1:8b:99:2e:
86:97:e9:17:26:ce:8e:91:42:ec:15:46:42:36:7e:fb:52:14:
7c:8f:03:00:b3:87:4f:93:e9:97:51:fd:04:7e:2a:ba:78:d2:
06:ff:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net