Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa
File: 6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa (raw, json)
Hash identifier: ynSoGLNXCvZga5FxofhRDHQzU/lO6RFc2BKWCKFwLDc=
Subject key identifier: E8:1F:4A:0E:66:A8:27:7A:CE:85:DF:83:5D:0D:FC:9D:A2:34:0F:86
Certificate issuer: /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Certificate serial: 01941FFA464EAA9554B6A1D07189F38F404B
Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49525
IP address blocks: 91.212.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:46:4e:aa:95:54:b6:a1:d0:71:89:f3:8f:40:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e81f4a0e66a8277ace85df835d0dfc9da2340f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:9a:44:7c:09:27:42:30:18:8d:e9:e2:37:
6a:3e:6f:b6:55:2f:1b:d2:c1:ee:2c:13:8d:bb:eb:
b0:34:c0:9e:de:fe:0e:ab:d2:6e:3a:cc:f7:87:af:
02:b8:d5:a0:e6:fa:18:64:f0:0d:aa:04:82:c9:19:
7c:bb:d1:4e:8a:8d:4e:21:30:ec:c1:53:d1:8c:e4:
eb:2b:47:a8:c8:b2:44:d0:44:29:72:30:4e:dd:50:
bb:7b:0f:18:af:0c:4a:74:ca:59:6f:24:79:83:9a:
80:51:1a:f5:ad:fe:74:d1:61:2c:27:6f:95:6f:d7:
c2:bb:9d:81:7b:ab:77:af:5f:47:1b:d9:ff:b4:f6:
a1:51:39:5d:b3:d0:0a:31:7c:d7:db:8e:3f:93:f8:
e0:7d:59:4d:00:bb:5a:64:a9:bb:6f:b9:92:f5:25:
0b:3a:ad:9d:65:1f:6c:0b:38:41:01:3c:c1:22:33:
01:51:4e:14:e9:23:ea:59:42:a9:4d:04:8b:d5:d2:
00:b4:e6:ae:ef:2e:84:cb:43:85:2d:a8:ec:ad:04:
87:5f:18:21:60:82:15:7d:31:41:f8:1e:c8:d4:d2:
f9:0b:a5:1e:ae:50:8f:82:1c:a0:b1:8a:8a:f0:2a:
57:48:d8:75:84:53:96:31:a5:a8:dc:d4:58:70:90:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1F:4A:0E:66:A8:27:7A:CE:85:DF:83:5D:0D:FC:9D:A2:34:0F:86
X509v3 Authority Key Identifier:
keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.234.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4c:ef:7b:ce:21:f4:f2:e4:0c:c6:6c:69:31:b9:ce:c4:e3:
68:28:d7:ab:80:8d:4e:65:21:b8:4a:fd:fb:40:b7:e3:1a:e3:
dd:a4:f2:a2:f0:53:4c:1e:e9:38:78:bd:99:7c:f8:3a:cc:f7:
8c:96:b7:74:d2:4a:3e:c6:76:7a:ef:d0:93:4d:2e:36:aa:dd:
0a:38:82:c6:4f:04:ae:90:7b:d9:4e:ce:a0:8a:99:56:48:42:
88:02:6b:c8:d3:ce:03:49:9f:e9:8f:59:61:91:6a:57:fd:8b:
8a:60:1b:7f:7a:b2:25:f0:da:c4:1b:3e:93:b6:29:2d:2f:36:
36:98:0c:a3:c2:3e:03:d6:58:04:33:0e:dd:e6:29:69:b0:df:
45:f7:76:16:6f:f7:8f:9a:31:95:0e:d5:eb:1e:ce:e1:ca:73:
60:5c:4f:b0:1d:9a:5c:fb:a4:92:6d:bc:dc:01:0e:06:5b:fe:
03:b6:58:82:96:a8:69:9e:b9:60:7f:65:0a:c5:82:63:13:c3:
a3:83:44:7c:a2:9b:fd:80:bd:e5:3d:5d:39:a8:30:e1:90:62:
89:85:44:04:b5:c8:24:86:48:c8:9e:7f:8e:bc:65:53:aa:28:
e3:98:5e:6f:f2:7e:a2:e6:4f:d2:ec:5d:b5:d7:eb:d0:1e:f3:
8f:ad:c1:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+kZOqpVUtqHQcYnzj0BLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMmNhOWI5YTlhMTkzMjI3OTk3NzRlN2ExNzlmNGFhNzJj
YzM3NDEwHhcNMjUwMTAxMDM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODFmNGEwZTY2YTgyNzdhY2U4NWRmODM1ZDBkZmM5ZGEyMzQwZjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/GaRHwJJ0IwGI3p4jdqPm+2VS8b
0sHuLBONu+uwNMCe3v4Oq9JuOsz3h68CuNWg5voYZPANqgSCyRl8u9FOio1OITDs
wVPRjOTrK0eoyLJE0EQpcjBO3VC7ew8YrwxKdMpZbyR5g5qAURr1rf500WEsJ2+V
b9fCu52Be6t3r19HG9n/tPahUTlds9AKMXzX244/k/jgfVlNALtaZKm7b7mS9SUL
Oq2dZR9sCzhBATzBIjMBUU4U6SPqWUKpTQSL1dIAtOau7y6Ey0OFLajsrQSHXxgh
YIIVfTFB+B7I1NL5C6UerlCPghygsYqK8CpXSNh1hFOWMaWo3NRYcJCBpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgfSg5mqCd6zoXfg10N/J2iNA+GMB8GA1UdIwQY
MBaAFHwsqbmpoZMieZd056F59KpyzDdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQt
ZTRjYzA0NWFiOWZmLzEvNkI5S0RtYW9KM3JPaGQtRFhRMzhuYUkwRDRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQtZTRjYzA0NWFiOWZm
LzEvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TqMA0G
CSqGSIb3DQEBCwUAA4IBAQBzTO97ziH08uQMxmxpMbnOxONoKNergI1OZSG4Sv37
QLfjGuPdpPKi8FNMHuk4eL2ZfPg6zPeMlrd00ko+xnZ679CTTS42qt0KOILGTwSu
kHvZTs6giplWSEKIAmvI084DSZ/pj1lhkWpX/YuKYBt/erIl8NrEGz6TtiktLzY2
mAyjwj4D1lgEMw7d5ilpsN9F93YWb/ePmjGVDtXrHs7hynNgXE+wHZpc+6SSbbzc
AQ4GW/4DtliClqhpnrlgf2UKxYJjE8Ojg0R8opv9gL3lPV05qDDhkGKJhUQEtcgk
hkjInn+OvGVTqijjmF5v8n6i5k/S7F211+vQHvOPrcG8
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net