Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/gFEXxLFUU8a__opADc1vfw8jMw8.roa
File: gFEXxLFUU8a__opADc1vfw8jMw8.roa (raw, json)
Hash identifier: GCpDj9Bn6kn9jlHLv2Vqxyqzwpl4Us46FPPhGtO7UYE=
Subject key identifier: 80:51:17:C4:B1:54:53:C6:BF:FE:8A:40:0D:CD:6F:7F:0F:23:33:0F
Certificate issuer: /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial: 019420D60370A5E224F5ED03AFD11BBE10DF
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/gFEXxLFUU8a__opADc1vfw8jMw8.roa
Signing time: Wed 01 Jan 2025 07:48:03 +0000
ROA not before: Wed 01 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12785
IP address blocks: 91.223.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:03:70:a5:e2:24:f5:ed:03:af:d1:1b:be:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805117c4b15453c6bffe8a400dcd6f7f0f23330f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:32:0f:9c:5b:5f:61:b3:31:57:f8:2a:28:
0f:52:0f:2c:08:d6:22:41:a0:4a:83:00:bd:6f:9c:
c4:a6:aa:fd:38:33:74:5a:11:85:2a:b3:4a:ab:45:
62:98:38:87:af:f4:bd:13:ff:1a:7a:19:55:a5:f4:
a9:42:f3:b4:d4:ba:28:f7:a8:ce:92:01:05:76:f2:
79:fc:ff:0a:31:7f:7e:be:af:cb:07:83:59:61:e3:
74:fe:43:17:06:3c:d6:c6:88:77:3f:c1:b4:ee:be:
b7:7f:e6:60:a3:14:a7:ae:dc:a5:96:3b:57:bf:cb:
2b:d5:b7:c0:db:9d:ec:e9:a9:e7:2b:c6:63:0c:b1:
4e:d6:9c:6a:83:cf:ce:8f:5f:d9:65:a6:47:80:e6:
e8:2c:ab:9d:df:00:9b:0f:d8:58:96:eb:2e:ca:ec:
1c:a3:a9:21:30:fd:14:ce:52:dc:bb:c7:a0:f8:7c:
b0:2a:36:9c:e8:25:44:48:19:a9:55:3a:73:2e:a1:
69:b8:e9:00:a6:58:86:c3:a0:93:be:40:c8:d5:9b:
51:a5:8a:b7:ab:32:6a:22:0f:6d:6e:a0:a8:e6:2e:
e9:c8:2d:ff:b5:e8:20:44:12:7d:e0:21:2c:97:23:
3d:f6:6b:00:db:77:56:a1:18:a6:07:ba:9f:e6:dd:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:17:C4:B1:54:53:C6:BF:FE:8A:40:0D:CD:6F:7F:0F:23:33:0F
X509v3 Authority Key Identifier:
keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/gFEXxLFUU8a__opADc1vfw8jMw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.230.0/24
Signature Algorithm: sha256WithRSAEncryption
73:4c:47:c6:8b:c4:47:b9:c3:01:f7:c4:c6:d5:36:8f:71:25:
09:d5:07:d0:0c:aa:db:88:b5:9d:87:25:e0:ce:60:e1:2d:77:
d4:c5:3f:55:4b:3d:89:0c:4a:79:0a:e8:86:61:68:55:40:e4:
38:31:d2:1e:51:5e:9e:de:40:30:5d:20:f5:ce:ad:ea:14:42:
34:aa:54:59:c9:aa:20:1f:b3:54:7b:04:7c:73:26:aa:3b:0c:
b0:6f:aa:4e:de:33:72:50:31:fd:53:db:35:b2:71:80:cd:de:
1d:8d:d3:ef:a3:f0:69:0c:d4:62:3c:53:60:a7:40:c8:74:40:
60:00:0b:3a:7d:1c:0b:7d:10:7b:ac:d9:39:0f:29:0b:a2:90:
cc:43:50:b2:56:37:6c:56:01:e1:49:90:ca:19:b4:f3:5c:54:
e3:f3:92:53:37:21:22:4f:de:86:ab:10:26:68:a8:96:90:12:
cf:b3:77:f7:e7:9b:33:63:d9:c6:7d:c1:95:06:15:4a:87:05:
cb:60:f1:71:d1:fe:09:25:53:d3:1f:99:ed:9e:be:27:a4:40:
ec:66:2e:d4:bb:6d:7b:bf:68:27:7c:b4:66:75:fb:39:24:a0:
a9:07:a7:c9:eb:b3:20:8e:68:c0:bc:c1:96:06:4f:88:7a:e3:
36:ec:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net