Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa
File: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (raw, json)
Hash identifier: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=
Subject key identifier: 57:66:38:77:E4:CB:98:D1:47:27:89:42:96:C7:38:11:19:DE:5C:8B
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019428253CB748A670437BA35E0A963A9005
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa
Signing time: Thu 02 Jan 2025 17:51:56 +0000
ROA not before: Thu 02 Jan 2025 17:51:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203684
IP address blocks: 91.199.9.0/24 maxlen: 24
91.199.18.0/24 maxlen: 24
91.199.27.0/24 maxlen: 24
91.199.30.0/24 maxlen: 24
109.95.60.0/24 maxlen: 24
109.95.61.0/24 maxlen: 24
109.95.62.0/24 maxlen: 24
185.186.240.0/24 maxlen: 24
185.187.86.0/23 maxlen: 23
185.187.86.0/24 maxlen: 24
185.187.87.0/24 maxlen: 24
2a11:7700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:3c:b7:48:a6:70:43:7b:a3:5e:0a:96:3a:90:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 2 17:51:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57663877e4cb98d14727894296c7381119de5c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:38:3f:ec:96:64:ab:08:1a:2a:c4:43:ab:a5:
07:60:40:76:7c:e7:eb:fd:af:ab:35:2a:5e:1b:56:
0f:de:77:e1:31:bd:d6:cf:ec:fc:a0:85:46:9b:bd:
f5:27:67:08:b1:99:1a:af:e9:b6:dd:3f:5a:ae:67:
c7:2c:1d:a0:87:82:bb:90:27:ae:b7:eb:65:95:b7:
01:24:1d:38:7c:09:03:e1:90:96:f8:c2:be:a4:68:
9c:be:18:ce:c4:03:e0:5b:98:cc:8d:53:02:7d:53:
1c:a4:25:9a:26:21:59:4c:14:b3:69:44:9b:1c:4b:
de:0a:41:2e:e3:a7:d2:0d:57:81:3e:c5:c6:e0:26:
9f:93:a8:af:ab:5e:0b:ae:55:7c:31:3e:00:a1:ff:
4f:67:a7:a1:ee:7f:be:7c:08:4b:e0:db:c0:46:a2:
38:13:05:36:5b:8b:f3:c3:cd:99:47:d9:69:ae:c0:
53:ee:11:d9:a0:8a:b0:97:e3:36:13:88:0e:e7:7e:
3e:f9:4d:12:82:f9:6d:00:2d:7c:f8:e1:83:16:c3:
c6:8a:71:49:71:32:9d:65:79:a4:30:a3:52:53:62:
ee:31:ac:87:c1:ae:94:d7:01:f8:00:b0:7c:0f:56:
68:76:e5:6f:39:95:bc:a0:48:90:de:90:aa:92:48:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:38:77:E4:CB:98:D1:47:27:89:42:96:C7:38:11:19:DE:5C:8B
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.9.0/24
91.199.18.0/24
91.199.27.0/24
91.199.30.0/24
109.95.60.0-109.95.62.255
185.186.240.0/24
185.187.86.0/23
IPv6:
2a11:7700::/29
Signature Algorithm: sha256WithRSAEncryption
7c:7d:88:a1:a7:29:6e:a4:00:53:00:3a:00:36:0a:cc:54:16:
90:82:21:a1:9f:42:b4:ab:e4:29:9a:a0:7d:79:5a:22:d1:e4:
40:79:70:d4:03:44:b6:e9:89:bd:e2:1f:26:a8:ba:eb:fd:95:
42:36:9a:4d:fa:3f:4f:6f:d5:58:02:10:5a:1b:07:11:ef:9b:
39:56:8a:c6:46:be:ee:8a:e4:db:cd:bf:67:46:89:55:49:2f:
f7:36:72:6c:4c:67:de:55:8a:c8:2b:f8:82:68:10:5f:dc:19:
51:e4:ac:6d:04:c0:e2:3f:dd:aa:81:cb:89:0e:dc:51:91:02:
c6:9a:8d:fb:63:27:83:c0:b7:0d:80:c7:9c:76:37:d1:39:83:
ef:e8:4d:85:3e:b8:73:32:12:ad:ee:38:e0:67:7d:01:c2:fc:
d6:18:52:aa:17:41:0a:84:2d:89:32:88:4e:ed:c4:6e:ee:ab:
73:10:cf:e0:84:22:91:dc:99:03:01:eb:96:86:d4:01:08:d7:
b6:b5:ba:f3:21:63:77:a0:6b:f8:84:ec:45:b2:a3:b0:9d:f2:
a8:04:f8:ed:cf:c3:05:b5:fd:b9:5c:da:ce:f6:7c:79:7d:34:
a2:bf:3d:9c:df:a1:e6:b4:4d:b6:63:87:de:15:02:75:8f:25:
41:f1:21:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:46 2025 by rpki-client on console.sobornost.net