Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/Z83LhYm-PBD2EJey8r2-Hu3Pv9o.roa
File: Z83LhYm-PBD2EJey8r2-Hu3Pv9o.roa (raw, json)
Hash identifier: 0oaVoHp1lfPB8j/dx+/RSOuNiG+gm/WhxI6jUsMwbjg=
Subject key identifier: 67:CD:CB:85:89:BE:3C:10:F6:10:97:B2:F2:BD:BE:1E:ED:CF:BF:DA
Certificate issuer: /CN=7870561798e5c8a26707620df082ef3778d7163d
Certificate serial: 01942068735E1DABF700FC272F27852ABBE9
Authority key identifier: 78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/Z83LhYm-PBD2EJey8r2-Hu3Pv9o.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49964
IP address blocks: 91.220.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:73:5e:1d:ab:f7:00:fc:27:2f:27:85:2a:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7870561798e5c8a26707620df082ef3778d7163d
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67cdcb8589be3c10f61097b2f2bdbe1eedcfbfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:32:3a:7f:2c:d6:47:a0:2e:71:b6:95:bf:
f1:ba:8c:a4:6b:4c:81:9a:15:47:7c:58:c6:b0:ca:
20:5e:66:42:ea:76:f9:94:f5:74:80:58:c8:99:41:
7b:3c:a4:60:4f:a7:bd:15:d2:52:1b:06:e9:df:80:
d7:80:65:e0:67:2b:ec:a6:44:a3:8e:11:10:8b:1c:
71:b6:9f:10:40:db:2b:84:ec:eb:69:42:69:f0:53:
87:23:f6:97:4d:09:12:56:0c:cb:46:9a:7c:c4:db:
36:e2:eb:b0:bc:3d:bc:ee:c3:15:06:72:78:f3:61:
20:db:69:69:a6:0c:d8:a4:d1:d1:6a:a2:e1:b2:8e:
cd:30:eb:e1:33:ac:01:6d:ee:06:67:cd:7a:3e:a9:
30:e2:4f:07:54:38:80:70:ce:ed:96:39:3f:2a:82:
3a:79:7e:89:2c:62:29:5f:3c:cc:fb:00:96:a3:f3:
0e:1c:bd:31:e5:cb:5a:8a:3c:a6:51:1b:67:65:f2:
0d:09:fb:8c:9c:7d:2e:52:85:55:a1:44:b5:92:11:
70:5f:2f:96:82:37:35:4d:14:84:c7:96:5a:b4:98:
f3:1b:5c:67:2e:5b:5e:12:97:98:89:47:65:61:1b:
78:89:66:ac:f6:73:4e:d7:a2:49:eb:7f:dc:13:f6:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:CB:85:89:BE:3C:10:F6:10:97:B2:F2:BD:BE:1E:ED:CF:BF:DA
X509v3 Authority Key Identifier:
keyid:78:70:56:17:98:E5:C8:A2:67:07:62:0D:F0:82:EF:37:78:D7:16:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBWF5jlyKJnB2IN8ILvN3jXFj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/Z83LhYm-PBD2EJey8r2-Hu3Pv9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/feee89-1805-4bbe-a7dd-dacfbf367b1a/1/eHBWF5jlyKJnB2IN8ILvN3jXFj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.102.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ec:fb:69:d0:c5:71:b3:86:aa:38:e7:54:77:1a:5e:70:c7:
5c:fa:7f:fb:50:86:d9:53:d7:0c:eb:30:8f:e7:c7:2d:04:28:
c2:22:59:2c:b5:d5:5e:f4:1e:d1:36:b0:c8:0e:50:71:5e:72:
a2:58:e7:d6:32:d2:e6:e1:e2:2e:76:d8:97:8e:26:16:e9:f7:
76:1d:19:42:d3:94:1a:b5:da:0f:bb:5d:27:9a:93:4b:0d:01:
43:e0:ae:46:52:e1:28:06:73:4b:b1:45:da:83:a7:ee:38:e3:
94:87:b3:6e:31:22:56:db:1f:da:23:e4:0b:1d:ff:a5:e4:3f:
6b:67:d8:53:73:0c:d1:52:e1:d8:e2:a3:1f:95:1a:88:e1:5d:
ec:53:4c:5e:41:95:e2:5f:df:bd:52:de:c0:4b:cf:0c:a4:05:
3d:b6:d5:4a:25:31:32:ce:82:b9:7f:ca:6c:b6:18:19:be:95:
e9:e5:d2:94:c1:b4:a4:15:3d:ad:1b:2c:ad:b2:83:6d:60:27:
c6:67:8b:be:83:7e:c2:f7:b1:06:56:80:c4:da:4c:64:60:75:
28:ec:f7:57:b9:26:f4:a6:da:aa:a2:12:9a:ca:06:8a:e8:21:
e2:bc:a7:e5:b9:80:e9:01:16:b2:d6:2a:96:43:18:50:87:8b:
ff:4d:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net