Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kSbrErDwhkA4GKrIo69PNBWOdlQ.roa
File: kSbrErDwhkA4GKrIo69PNBWOdlQ.roa (raw, json)
Hash identifier: R6Jmy/gE1DJZ1wWlidx7QcKIYKoQaQOBzDdrtIZILIE=
Subject key identifier: 91:26:EB:12:B0:F0:86:40:38:18:AA:C8:A3:AF:4F:34:15:8E:76:54
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAE0251BC3F59C2868E72606DF458
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kSbrErDwhkA4GKrIo69PNBWOdlQ.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 91.238.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:02:51:bc:3f:59:c2:86:8e:72:60:6d:f4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9126eb12b0f086403818aac8a3af4f34158e7654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:22:f6:16:6f:0f:32:82:17:43:3b:1e:6d:
e0:92:29:73:14:c4:b8:5f:de:1f:ba:80:a9:9a:1e:
68:86:d6:90:38:e1:be:ba:20:11:7e:fc:a5:24:85:
91:22:c9:5b:53:bb:28:87:79:18:76:6a:ef:e5:10:
4c:cc:7a:50:5e:31:06:d4:af:c2:c3:65:bf:cc:87:
97:29:3b:6d:07:09:0a:80:df:c2:16:95:5e:23:76:
85:f3:95:3c:6d:00:7e:61:54:fb:6c:8e:9d:fa:bb:
46:8f:2a:cc:bb:31:b2:3c:3f:62:e5:fa:ae:0d:16:
0c:4e:ed:0e:2a:ee:d6:ae:a4:bb:2f:2a:1e:4c:31:
9e:f3:c6:3f:d6:c0:61:a4:9d:14:4e:a9:43:30:c1:
fb:3f:35:89:25:49:c8:70:71:c5:27:c7:c1:e6:cf:
70:5f:41:43:e5:52:16:09:fd:d1:57:2d:ab:cc:f3:
66:66:7b:7a:8f:5e:af:fe:b5:ef:cd:e5:1b:c7:95:
6e:c7:d7:14:2c:be:6e:7a:69:81:b2:c6:3c:0a:78:
49:9b:34:c1:5d:58:16:8e:53:cd:d6:41:df:b1:1f:
c4:35:44:85:34:c9:6d:49:11:56:c2:d6:cb:ce:2e:
4d:68:90:3c:52:e2:c3:d2:fe:dd:8f:7c:ff:41:f6:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:EB:12:B0:F0:86:40:38:18:AA:C8:A3:AF:4F:34:15:8E:76:54
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kSbrErDwhkA4GKrIo69PNBWOdlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.93.0/24
Signature Algorithm: sha256WithRSAEncryption
80:05:07:ec:35:29:f7:3d:be:94:ee:61:e7:70:a9:b8:2b:62:
f8:15:5f:4f:f9:3a:cc:c5:47:17:21:cc:8b:fc:8a:f7:12:d9:
b2:d4:74:0c:c5:4a:6b:e2:a0:a2:ce:ad:74:8d:5d:e4:86:a9:
7f:65:1d:39:74:64:b4:94:8d:9c:88:3d:3c:b9:0c:5b:00:e5:
3a:8b:c5:10:bc:95:af:2c:0d:a4:61:1c:85:88:67:19:16:b0:
3d:8a:00:da:c5:5d:03:a2:3d:03:88:2c:e5:31:6d:89:e2:68:
b8:ab:81:ba:fd:e5:86:06:ea:60:4b:3b:8d:98:b4:14:52:ae:
7d:ad:0d:83:e9:93:f4:51:27:45:46:bc:25:ea:1e:ed:62:6e:
6a:83:9c:20:ec:64:a8:03:ab:e3:fd:12:72:cd:84:11:02:1e:
07:40:c8:23:e3:d7:5a:69:0e:29:55:59:b3:e2:05:5d:00:15:
59:e6:ec:ca:4c:43:aa:62:e9:28:89:b8:ad:c5:1d:99:f4:d6:
7d:a1:32:1f:48:11:56:99:db:a6:35:ad:9d:6d:aa:7d:94:ef:
01:67:bc:17:26:7c:d4:f1:6b:26:c1:a0:fd:de:00:b4:c2:d2:
35:8c:9a:4b:e8:c2:40:b6:d3:16:7c:81:aa:50:8e:39:e8:27:
bf:cf:e1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net