Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/ThB5ArM42WkjWUEQcQYsflTBSWo.roa
File: ThB5ArM42WkjWUEQcQYsflTBSWo.roa (raw, json)
Hash identifier: bddz7FyKEk1/5lgcU0RqcQHG7LiGlbilafV868t6FT4=
Subject key identifier: 4E:10:79:02:B3:38:D9:69:23:59:41:10:71:06:2C:7E:54:C1:49:6A
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019421B1B8FB6BF81172862A610E568289AA
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/ThB5ArM42WkjWUEQcQYsflTBSWo.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2876
IP address blocks: 91.195.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b8:fb:6b:f8:11:72:86:2a:61:0e:56:82:89:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e107902b338d9692359411071062c7e54c1496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:a9:80:d1:db:6e:4b:04:e8:1c:a0:f3:de:
70:30:c7:02:be:00:6e:73:7e:40:50:29:bc:21:c8:
f1:f6:f9:fd:de:4f:3e:33:e5:94:71:d5:c4:30:2b:
be:d4:a8:5c:97:85:11:29:a2:d3:71:07:3e:55:36:
57:b0:fd:15:8a:65:d5:da:0e:10:c5:ef:7f:bb:14:
97:33:52:89:36:38:f9:f2:dc:b3:45:7c:06:52:4a:
05:e5:7a:9a:26:8e:f7:93:e0:2f:dc:42:19:a1:19:
56:b9:98:7b:65:ea:5f:06:f7:76:f3:f2:94:86:7f:
1b:22:ec:5c:a8:6e:07:0d:94:95:ba:52:f8:3e:03:
3a:de:80:71:87:70:fb:eb:d5:61:f8:ee:92:db:8e:
0e:af:6d:45:f7:03:6c:b6:39:b6:29:5e:f2:84:9f:
af:9c:bb:1a:46:5e:82:44:41:c0:08:f4:e4:50:1a:
e6:d5:a4:0b:97:47:44:d3:3a:ff:69:c5:df:25:57:
9e:80:b1:c2:83:7a:88:6f:21:49:40:58:a9:b1:e7:
69:73:56:cd:a9:8d:9e:0d:d6:94:04:a3:d5:f2:b2:
94:2f:b3:a8:18:9e:ea:1e:62:94:e8:09:32:7b:90:
52:dc:1a:6c:b8:68:b9:86:b8:87:31:e0:77:f4:87:
4b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:10:79:02:B3:38:D9:69:23:59:41:10:71:06:2C:7E:54:C1:49:6A
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/ThB5ArM42WkjWUEQcQYsflTBSWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.195.0/24
Signature Algorithm: sha256WithRSAEncryption
77:48:ef:b8:81:04:90:0a:93:68:cc:60:91:12:d2:39:ef:99:
04:0a:49:9e:a2:54:99:0b:19:78:5f:cb:5a:59:f9:ba:e1:e1:
dd:6d:a6:8e:b6:ff:cf:0d:de:74:d5:07:32:64:f1:94:05:ae:
22:bc:0d:6b:9e:44:51:a4:d6:83:f8:f2:ef:33:d6:f7:fc:01:
c2:f5:45:c5:12:0c:56:ed:cb:28:53:30:06:90:05:7c:ef:ee:
f8:17:4c:eb:6b:d7:62:54:41:5b:1c:d3:f3:5e:3d:dc:aa:77:
11:97:33:46:a5:16:5a:0c:9e:0b:47:a3:86:dc:6b:3d:7a:c1:
84:ed:f4:d7:97:1a:6f:3b:65:44:b7:e1:28:14:df:73:bb:68:
2f:80:8b:e9:47:9c:96:37:02:74:d6:fd:94:78:97:46:9b:b1:
a9:2f:25:66:6b:40:29:3c:b9:aa:4b:95:b2:2c:a7:e1:0f:5f:
72:09:6a:20:4f:35:6c:6a:da:db:f8:95:0d:31:56:6b:86:95:
b1:75:ac:19:3a:98:0a:a5:80:a0:2e:e2:e4:0d:02:d0:30:db:
50:27:d9:9d:41:e6:99:65:66:a0:ea:9a:7f:b7:c2:98:04:e4:
88:75:c0:09:7e:09:57:cc:ef:b8:18:0c:2d:6f:39:00:ef:dd:
d6:af:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net