Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa
File: BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa (raw, json)
Hash identifier: hSczRhljFIoa/6OnEWTHUCmzoj5N2dcbKHbecT1X5S0=
Subject key identifier: 06:F6:44:21:6F:F7:AD:0C:BB:DC:FD:90:7C:9F:81:14:2C:0B:72:A6
Certificate issuer: /CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Certificate serial: 0194236A4B9DE0C80F415636BCCF5DCD38E8
Authority key identifier: 79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62344
IP address blocks: 91.216.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:9d:e0:c8:0f:41:56:36:bc:cf:5d:cd:38:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bb370b0c9a06fd82cb7100d903859b09f50333
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06f644216ff7ad0cbbdcfd907c9f81142c0b72a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:fb:8d:c1:94:f1:a9:32:92:59:98:5f:73:
76:08:0b:f8:c4:11:e2:d8:62:ad:97:e4:4e:6d:73:
8a:6c:f5:9a:5f:86:f1:56:77:f4:75:1e:8b:97:87:
ac:4d:88:1c:39:d8:b5:18:f7:1f:a0:10:bb:e8:69:
30:ec:86:04:36:c3:aa:76:6c:b3:83:24:d2:1a:aa:
cc:c7:d4:4f:50:59:59:52:49:cc:a6:05:f8:d4:1a:
49:8d:b6:f6:94:b0:25:e1:7c:bc:ce:fa:42:b7:0c:
93:6b:04:3c:51:64:39:76:89:ef:c4:bf:65:88:86:
30:1a:e0:7c:16:67:95:94:e3:84:8c:51:87:28:9d:
93:a3:a7:12:26:2f:2d:83:c5:9d:f0:da:4d:53:65:
71:4e:27:a9:d7:21:2e:44:49:88:a3:2f:1e:a8:50:
6b:f2:b6:a0:fc:a4:61:8d:1f:cc:92:d3:83:4b:94:
cf:06:15:41:62:00:51:43:ea:5c:34:4c:53:f1:1b:
20:50:a3:9e:29:9c:de:44:f1:d9:d8:3b:ba:74:9e:
45:6c:ec:20:a0:ab:79:d6:53:1f:6f:f3:f8:c7:b2:
d1:41:18:b0:1c:8a:e1:46:32:32:47:42:13:c4:b3:
20:db:a2:6e:c6:5e:aa:85:13:0b:20:58:ad:a3:68:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:44:21:6F:F7:AD:0C:BB:DC:FD:90:7C:9F:81:14:2C:0B:72:A6
X509v3 Authority Key Identifier:
keyid:79:BB:37:0B:0C:9A:06:FD:82:CB:71:00:D9:03:85:9B:09:F5:03:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/BvZEIW_3rQy73P2QfJ-BFCwLcqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7ef2ee-c40d-4b22-a18f-53f25d436e2c/1/ebs3CwyaBv2Cy3EA2QOFmwn1AzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0d:91:c3:69:b7:5b:c3:c2:46:0a:01:72:83:e7:f0:da:b0:
9c:af:33:4d:63:3e:ed:4d:94:17:7e:58:eb:5e:a9:11:31:f6:
25:d4:bb:e3:2a:84:cc:72:41:00:b9:0c:5e:5b:d9:4b:7a:17:
88:4c:a9:a6:30:9d:1c:89:60:74:bd:6d:a9:ff:5e:77:51:0f:
d9:88:e4:fe:93:76:3a:91:fc:ce:52:65:18:e1:d5:0c:57:88:
09:a6:e9:cd:80:d5:83:9b:f5:49:c5:ad:e0:41:e5:9e:83:86:
49:ad:1e:fa:d2:82:51:45:e0:24:58:07:39:a7:60:0e:aa:02:
cd:2e:45:cb:d0:7e:73:82:f1:67:1b:34:2c:ee:7f:b8:02:97:
36:89:0f:cd:5b:c9:9c:62:61:19:d7:c6:de:d5:f3:e6:28:3e:
55:8b:0a:46:95:46:bf:5f:99:00:d3:8c:51:8f:e4:a6:22:2a:
ff:5b:7a:cb:6e:5f:13:6f:c4:3b:1b:75:d4:55:06:ea:24:cd:
3e:78:af:ea:80:b1:cf:88:5e:83:c5:06:5b:aa:f2:12:aa:4c:
9a:9e:c8:d3:06:53:eb:c1:3a:1e:ed:c6:c1:da:f5:f2:6b:2b:
79:96:b1:55:af:5b:92:48:9e:d2:e6:60:25:27:9f:9d:08:b1:
82:8d:6b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:39 2025 by rpki-client on console.sobornost.net