Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa
File: p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa (raw, json)
Hash identifier: fmxxB5F2kwLUu456RKJpssuFKFMbicdIEkOy2yPaKKo=
Subject key identifier: A7:F4:C3:33:2C:E5:43:9C:E6:B6:5C:8E:17:1C:ED:BC:91:30:D8:74
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 0194236A235662452C2095728B021D9F4407
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58194
IP address blocks: 91.239.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:23:56:62:45:2c:20:95:72:8b:02:1d:9f:44:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f4c3332ce5439ce6b65c8e171cedbc9130d874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:40:27:bc:6a:aa:76:44:f8:fb:87:5b:fd:
12:8b:37:32:27:08:70:92:ac:71:17:6f:f9:02:f1:
c6:ee:d7:a6:74:b9:13:17:c7:4a:ef:78:68:90:13:
eb:39:5e:79:a3:3b:98:81:38:51:3a:e2:be:d4:3d:
ee:4e:f3:5f:5a:9b:02:f5:65:2a:e5:fd:ad:52:b8:
e0:9a:7b:31:23:97:f3:c0:62:93:4f:85:79:95:88:
23:e3:5d:f6:ba:79:fd:50:43:bd:03:74:86:20:12:
91:56:ae:79:f7:a6:19:86:88:e3:20:e0:6b:15:fc:
ea:ed:1a:e2:03:99:1d:5a:0b:4c:66:d0:3a:c7:c7:
cb:af:b3:be:fb:c6:1e:9f:35:63:eb:a9:48:b7:59:
0e:df:d9:af:7c:a4:76:a6:44:35:63:26:8c:2f:42:
a3:89:10:30:d3:5a:74:d6:a1:9e:8c:55:11:db:fc:
ff:93:80:af:16:62:ea:db:b5:6a:09:91:ba:cc:c9:
72:f9:a1:93:07:85:5d:33:c9:5b:47:25:af:1f:19:
44:ba:16:3f:96:7f:05:ad:f3:bb:60:48:de:84:53:
0c:49:2a:2f:3d:a6:99:88:e3:7d:6b:bf:d8:9f:ca:
e0:8d:f0:60:7b:cc:e8:54:80:ef:cf:f8:cf:7d:8d:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F4:C3:33:2C:E5:43:9C:E6:B6:5C:8E:17:1C:ED:BC:91:30:D8:74
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/p_TDMyzlQ5zmtlyOFxztvJEw2HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9a:10:ff:86:d1:59:9a:73:bb:b7:54:ef:67:f4:78:1f:63:
b8:fe:3e:54:76:c6:ee:bc:31:4a:1e:e7:6d:06:0f:39:7b:ca:
16:7b:df:6b:d2:ed:dd:52:a1:6d:f4:cf:e1:6f:1d:cc:54:3b:
a9:a8:eb:8a:f6:9e:b8:87:3f:8a:56:2a:27:2d:1d:f3:cf:ab:
0a:af:7c:f8:65:34:bb:1c:e5:f5:7c:e6:a5:e0:27:71:82:af:
4f:46:26:0b:c6:c7:b7:f2:07:13:01:9a:1e:d3:3d:a1:1e:e8:
e6:63:35:4f:e6:4d:05:e0:04:60:5d:66:92:8d:e2:cf:4b:7a:
98:81:39:65:24:0c:9e:f9:14:c9:7b:39:e7:de:27:3e:26:71:
69:ed:af:1a:a5:62:2f:e0:9c:6a:d9:16:10:21:e2:ab:2a:36:
3e:19:34:11:c0:d7:d3:d5:aa:eb:ae:b0:3b:28:48:bf:ff:5f:
d0:40:52:34:3a:b7:e4:6b:c8:d8:f3:14:3f:e8:e8:3d:32:b8:
c0:cb:be:67:d9:71:1d:d7:cc:18:44:14:61:55:3d:cf:8f:5c:
a7:46:8c:13:4e:f2:38:22:bb:ac:73:e7:0c:70:98:16:fe:14:
c5:1f:88:ce:7c:80:4c:a3:0d:b8:9b:02:93:6e:d1:3a:d6:9c:
8f:b3:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net