Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/f3raIBer4Wbe3buOh8JkfhD4mEA.roa
File: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (raw, json)
Hash identifier: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=
Subject key identifier: 7F:7A:DA:20:17:AB:E1:66:DE:DD:BB:8E:87:C2:64:7E:10:F8:98:40
Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial: 01942445725A7A1C1DCE3E32F5A24D69EB65
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/f3raIBer4Wbe3buOh8JkfhD4mEA.roa
Signing time: Wed 01 Jan 2025 23:48:38 +0000
ROA not before: Wed 01 Jan 2025 23:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202013
IP address blocks: 91.103.80.0/24 maxlen: 24
91.103.81.0/24 maxlen: 24
91.103.82.0/24 maxlen: 29
91.103.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:72:5a:7a:1c:1d:ce:3e:32:f5:a2:4d:69:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Validity
Not Before: Jan 1 23:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7ada2017abe166deddbb8e87c2647e10f89840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:94:d8:9f:76:0b:65:16:59:06:5c:39:b9:
32:85:2f:4f:b7:cf:01:e3:13:dd:ba:3e:c0:a5:b6:
94:3b:9b:6b:5f:dd:6a:7d:91:23:c0:27:35:76:e7:
ba:1a:1f:bc:da:33:cc:43:f8:49:4b:9a:31:17:46:
be:f3:66:43:64:f9:30:8e:ba:09:87:81:80:53:d7:
af:2f:06:cb:84:3c:3e:db:73:27:ac:f4:9d:f5:04:
6d:88:4f:9e:4e:e7:95:56:92:6f:a1:74:06:e5:23:
41:ce:94:58:fa:8e:b3:60:e3:ae:3a:7d:00:86:26:
33:14:65:d8:0c:e6:22:ff:46:9d:98:17:2c:30:ce:
83:e2:a7:33:32:d7:7c:e7:fc:15:2a:77:f1:7f:dc:
ce:10:f6:0a:6a:0c:f6:f9:b3:2d:4b:fd:f3:1f:ff:
2a:b3:88:08:0c:cd:ef:ba:e0:fa:90:1f:f1:87:58:
95:cf:f7:68:aa:ef:f1:95:18:b5:70:50:65:74:48:
d8:53:c5:92:6f:6c:3a:95:c2:43:ea:b3:bd:19:2c:
52:77:2d:41:5b:53:4b:80:57:f4:45:a7:c3:51:1c:
f2:b2:eb:f6:c9:6f:04:4a:56:a6:70:54:85:41:fa:
c8:cf:36:5d:f3:61:35:96:d6:24:37:76:b7:51:da:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:DA:20:17:AB:E1:66:DE:DD:BB:8E:87:C2:64:7E:10:F8:98:40
X509v3 Authority Key Identifier:
keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/f3raIBer4Wbe3buOh8JkfhD4mEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.80.0/22
Signature Algorithm: sha256WithRSAEncryption
05:0e:bc:ae:fb:fe:b6:6f:9b:87:78:5c:0f:33:87:24:fc:40:
c6:4c:0b:cc:16:4c:cd:0d:1f:fc:e3:ce:0f:9e:8b:4b:3e:30:
e3:4b:38:6b:2c:9b:8f:3f:c4:d7:35:14:47:1a:60:c9:b6:97:
23:10:6e:91:c7:8b:93:04:e4:24:a1:cd:cb:18:12:04:b4:5a:
52:5c:a1:2c:13:f0:db:5c:fb:88:2e:92:9c:82:de:cb:22:6d:
0e:e5:0f:09:6c:af:6e:2f:81:81:88:70:38:c9:7a:c4:95:18:
ee:20:68:c8:ab:63:f2:0d:40:6f:ce:23:49:6f:cc:fd:73:0c:
95:e3:1d:39:21:6d:c8:65:a7:7e:6a:8f:63:68:a1:bc:05:34:
91:fa:c7:68:3e:5f:77:82:7b:7b:b9:76:c9:a3:5a:cd:c6:6e:
48:17:67:0f:20:8d:7d:0f:9e:0d:db:8c:e3:4b:6f:01:a1:c1:
06:39:f6:52:0e:18:97:b8:cb:8a:11:63:fc:52:33:f4:be:97:
f7:4a:a2:1c:a4:cd:8b:42:e7:86:13:89:96:03:7d:8c:c7:78:
dc:c2:43:c9:9c:36:a2:1a:4a:f5:15:72:ea:c7:ac:67:4c:35:
e5:1e:e2:8d:e1:1f:53:be:47:13:98:5b:21:70:98:16:24:db:
ca:e0:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net