Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/o-s15NWoSVwgSNMQIfsWarrXXGg.roa
File: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (raw, json)
Hash identifier: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=
Subject key identifier: A3:EB:35:E4:D5:A8:49:5C:20:48:D3:10:21:FB:16:6A:BA:D7:5C:68
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019423D711EAAB03272816FD98659A94C658
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/o-s15NWoSVwgSNMQIfsWarrXXGg.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43942
IP address blocks: 91.200.128.0/22 maxlen: 22
91.200.128.0/24 maxlen: 24
91.200.129.0/24 maxlen: 24
91.200.130.0/24 maxlen: 24
91.200.131.0/24 maxlen: 24
91.223.155.0/24 maxlen: 24
212.84.48.0/21 maxlen: 21
212.84.48.0/24 maxlen: 24
212.84.49.0/24 maxlen: 24
212.84.50.0/24 maxlen: 24
212.84.51.0/24 maxlen: 24
212.84.52.0/24 maxlen: 24
212.84.53.0/24 maxlen: 24
212.84.54.0/24 maxlen: 24
212.84.55.0/24 maxlen: 24
2a01:4840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:11:ea:ab:03:27:28:16:fd:98:65:9a:94:c6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3eb35e4d5a8495c2048d31021fb166abad75c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:27:d4:43:31:46:36:98:7c:aa:16:61:df:
a2:41:ba:2a:1f:2a:08:a4:f8:3b:7b:78:1d:b3:c6:
f8:8c:56:b2:b1:3e:c9:6e:af:8e:7a:7a:30:65:76:
4b:95:29:ba:44:52:15:70:bf:8e:17:f2:cc:6c:4f:
a4:da:24:17:9c:5d:d8:4c:4e:13:d6:2d:81:77:33:
73:4b:bc:b1:42:84:4e:31:5c:99:64:22:bc:96:51:
d3:c9:a4:eb:db:c8:75:0d:a3:f8:3d:e0:12:1c:31:
f6:00:2c:19:7c:94:d1:1b:a7:8a:f9:94:cf:81:60:
01:5f:62:6c:c0:86:87:01:5c:e0:aa:ef:c8:b0:22:
8d:be:d9:fd:3d:17:d4:23:1d:09:60:f8:74:1d:8c:
88:73:2b:58:aa:8b:db:c7:4d:9e:60:29:39:60:93:
95:f5:a1:65:4a:cc:29:20:f7:0d:5f:43:35:7b:91:
98:50:9d:ca:1e:7a:55:09:81:8e:28:34:86:f0:2b:
92:c5:9d:36:06:48:75:7e:7e:ac:cf:ba:d1:7a:50:
61:30:d0:0e:96:1a:1a:d2:79:4b:cf:64:57:e8:46:
b3:c2:38:e5:69:2d:47:06:c7:e7:37:c1:ed:ef:75:
4f:17:70:4a:16:07:98:aa:1c:8b:44:17:26:e6:9d:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:35:E4:D5:A8:49:5C:20:48:D3:10:21:FB:16:6A:BA:D7:5C:68
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/o-s15NWoSVwgSNMQIfsWarrXXGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.128.0/22
91.223.155.0/24
212.84.48.0/21
IPv6:
2a01:4840::/32
Signature Algorithm: sha256WithRSAEncryption
5d:db:41:8b:ba:a8:8c:3b:63:c2:7c:a2:c4:cc:6e:3d:49:9d:
fa:66:ff:55:2d:58:8d:34:46:da:5c:d3:73:6f:91:09:1b:d4:
3f:f7:b3:d5:42:11:c3:a1:03:70:48:c8:23:0c:2f:1f:e7:0e:
e1:fb:2f:dc:6f:d5:c3:9b:b1:95:aa:c0:ad:35:af:8d:90:2a:
e4:b3:05:ae:5b:68:5a:4b:39:11:bd:cb:12:d2:94:51:26:20:
90:a9:59:f6:69:3a:cd:8b:54:05:96:d2:ca:cc:ae:d5:3d:c5:
ca:64:bd:6e:92:e7:f1:f3:11:72:99:6b:7d:09:40:1b:f4:86:
a7:0c:8d:62:72:f7:b6:6e:cd:5c:40:db:00:83:0d:0f:6d:1c:
d7:eb:2b:cc:08:3b:a6:cf:1b:48:c3:ef:2a:fa:f8:a2:fa:d1:
44:71:eb:43:8c:bf:32:d3:e4:e5:07:ee:0f:d8:b1:b8:97:be:
ec:21:26:0d:67:f9:a7:d1:5a:ef:f6:1b:86:ba:7e:81:7f:6d:
d3:2a:18:ac:48:32:5d:2f:be:0a:e1:16:48:b6:25:32:4e:5e:
bc:79:8c:d8:46:ea:7a:1d:78:81:ea:12:d2:49:45:dc:38:aa:
5d:8a:35:37:88:1e:21:03:f4:9d:7c:90:83:75:4e:6b:82:f5:
be:55:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net