Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/BxEUAThM-kvROTVKplPSESs7hAg.roa
File: BxEUAThM-kvROTVKplPSESs7hAg.roa (raw, json)
Hash identifier: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=
Subject key identifier: 07:11:14:01:38:4C:FA:4B:D1:39:35:4A:A6:53:D2:11:2B:3B:84:08
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 0194258F7B1ED1E36D9E705045DB641035F0
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/BxEUAThM-kvROTVKplPSESs7hAg.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44189
IP address blocks: 91.199.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7b:1e:d1:e3:6d:9e:70:50:45:db:64:10:35:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07111401384cfa4bd139354aa653d2112b3b8408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:30:41:33:9e:5e:a3:ce:9f:d6:a3:58:66:
6b:0b:42:74:05:76:45:19:c2:b6:a9:d8:69:de:48:
e6:0a:69:14:e1:73:14:3f:69:e9:82:67:6d:6a:39:
df:01:d5:25:9d:08:c4:6c:13:92:ef:59:ac:0e:71:
ea:5f:b6:de:7f:31:c7:3b:0b:ea:ac:98:1a:26:1e:
54:18:4f:be:49:a4:b0:3f:54:82:a7:2f:ea:23:e0:
fa:ea:b7:64:33:30:97:c4:77:9e:24:b1:28:4a:84:
db:82:7e:9d:82:67:fa:1c:01:79:e1:75:3e:c8:7f:
fe:b4:7a:4e:bb:a5:3d:37:7e:2e:8a:8e:39:dc:bc:
2a:7a:91:ee:3f:14:48:da:39:fc:37:02:93:26:eb:
cc:fe:bc:01:78:c6:a1:d8:7e:88:f8:93:e4:63:4c:
46:f6:73:f5:ae:16:86:09:82:34:30:43:13:94:d1:
29:d0:df:95:f7:7f:1d:a1:3e:55:24:ef:28:65:c1:
0f:cc:bf:18:f6:92:96:b3:6d:a0:db:6d:d6:3f:6b:
7a:1c:c3:4b:5f:59:d4:00:c1:a3:25:ed:4d:e5:87:
62:6e:8b:90:7b:8b:36:7c:49:f9:92:da:bf:52:61:
8e:80:a0:27:e7:e7:80:99:e3:0c:60:c7:fb:0c:4e:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:14:01:38:4C:FA:4B:D1:39:35:4A:A6:53:D2:11:2B:3B:84:08
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/BxEUAThM-kvROTVKplPSESs7hAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.39.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c5:24:a6:9f:0a:b7:c5:94:ef:ee:df:84:46:a8:ca:19:cd:
a5:f5:46:a1:6e:7c:df:c5:47:9a:3b:fa:46:1d:0c:06:f8:9d:
4f:03:05:a5:33:4b:d9:86:6e:cb:e0:17:71:51:e6:a2:b5:02:
3e:ea:98:95:1a:5e:f0:0d:55:7e:32:9f:f9:15:f6:a1:fc:34:
2a:22:7d:7a:d7:1b:38:3c:16:a2:00:cc:a1:a3:c1:8e:17:a6:
fb:a0:40:d4:d6:0f:1e:2e:8c:a5:75:77:e0:b3:4d:ae:60:b3:
c6:98:bb:35:d2:92:30:42:80:f3:dc:32:59:b6:3b:a0:5f:ef:
aa:44:e0:99:f1:02:bf:bc:ef:a9:fa:ff:ba:6a:ba:cb:dc:33:
db:e8:e9:34:22:4e:6c:3c:c4:9b:91:a6:9f:cf:b8:6c:9d:a4:
82:f8:ee:0a:e7:6a:2b:95:96:39:3e:bb:1f:be:ca:73:0a:a9:
8e:7e:df:2b:0d:99:c7:86:8c:21:b7:86:9d:da:1d:7f:98:f0:
22:e1:ea:26:9f:bd:b7:8a:c6:c9:71:04:48:50:d4:3e:13:77:
04:a3:82:d6:a4:18:e3:b2:81:22:cb:22:e0:73:32:a9:fb:fd:
f4:fe:eb:b2:d2:14:4c:00:d3:d4:f9:0b:06:da:ce:83:43:c7:
5c:62:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net