Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa
File: VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa (raw, json)
Hash identifier: HsIDoGOSVnTIqa9qpiTR9Xg//0nmdy2yaZaBVdQZxQc=
Subject key identifier: 56:DC:23:3F:C0:A6:B5:37:8B:59:55:BD:37:AA:3E:2B:FA:A7:2B:00
Certificate issuer: /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial: 0194221F5F3225B989CDBF4830253996351F
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa
Signing time: Wed 01 Jan 2025 13:47:48 +0000
ROA not before: Wed 01 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43207
IP address blocks: 91.229.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5f:32:25:b9:89:cd:bf:48:30:25:39:96:35:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56dc233fc0a6b5378b5955bd37aa3e2bfaa72b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:f8:2d:85:9e:84:cf:2d:fb:27:0e:57:8a:
c2:f9:a5:fa:05:2f:de:61:c4:7d:df:53:11:ab:18:
b1:7a:fd:2f:f4:87:e3:a8:71:da:44:55:3e:2b:ef:
60:59:88:c1:1f:86:b7:68:d9:00:21:5e:2c:fc:fd:
4e:df:ff:0a:d4:d5:e0:4d:42:e3:d3:26:5f:70:f7:
35:e0:90:a8:a9:14:3c:12:f3:40:1a:97:e7:fe:2b:
39:65:78:95:32:2f:c1:70:c1:72:b6:88:1a:fe:c3:
41:10:bb:14:bf:62:fc:f0:5f:b1:94:4e:69:7c:3e:
11:19:de:3a:a7:f4:20:07:41:4c:60:6e:ee:63:c1:
e3:e1:4b:5a:63:c0:fe:d6:8c:3b:dd:b1:95:e8:90:
4b:a9:81:ca:53:d3:3e:b5:0c:c6:c5:5c:87:d5:b3:
30:01:f7:32:0a:1d:33:db:d0:bf:e1:13:d5:d7:88:
6a:57:22:49:cf:c1:13:f3:f8:a3:1c:0c:c0:15:12:
c5:c9:6f:0a:29:b6:cb:77:ec:0c:38:50:d3:83:3d:
47:d0:29:9a:c3:6f:7f:a7:e9:dd:6c:1e:3b:67:6f:
7b:1a:e9:38:b6:34:22:ef:cf:d1:f3:09:27:01:51:
eb:00:73:17:2e:e1:37:db:6c:b4:4f:85:14:89:c4:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DC:23:3F:C0:A6:B5:37:8B:59:55:BD:37:AA:3E:2B:FA:A7:2B:00
X509v3 Authority Key Identifier:
keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:83:c2:9c:d9:f1:70:2a:6d:96:c1:21:75:d3:6f:a6:d6:29:
59:1d:0d:db:fa:04:93:b3:67:f3:56:af:1a:03:8a:b0:ed:8c:
10:b0:03:de:19:ba:a4:39:0f:a1:23:83:7b:03:43:03:b3:5e:
21:64:64:2a:94:e1:02:b5:6b:64:5c:cd:b8:af:d2:e8:15:a3:
7c:21:b2:b7:4d:cf:e5:60:72:9a:a1:3b:47:a0:9d:80:60:48:
f2:86:18:fb:2a:13:73:8f:1e:c9:ce:ae:11:83:3c:5f:47:23:
c3:39:b4:f7:a0:32:58:25:c4:2c:38:ad:47:47:df:5b:71:93:
a9:7f:a7:a8:d8:45:88:88:d0:44:83:98:47:30:f8:5c:1e:f7:
d1:05:25:cf:58:f7:38:cb:b5:87:34:b3:26:c2:a0:93:9a:3d:
6f:3b:5b:ac:c5:ee:7f:7d:8f:4b:7f:7c:00:7e:01:42:93:92:
98:b2:4c:a2:00:a4:f6:b8:2c:02:4a:e9:5f:f0:e4:2b:b4:95:
14:f0:f8:39:8b:e6:ea:80:f4:4b:0d:78:d0:df:c5:d5:cb:a3:
0d:d9:db:10:e3:d3:16:c9:ed:96:f2:a3:29:4e:f6:3b:94:27:
4a:d4:7f:0a:1c:b9:3c:a9:82:7d:51:ae:b1:b1:7b:ae:93:34:
ea:c3:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net