Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa
File: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (raw, json)
Hash identifier: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=
Subject key identifier: 80:A6:FD:0D:D7:11:8F:8A:18:A9:96:85:7D:9C:0A:67:A1:FC:B9:CF
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019428256CE931A7BBE7C1729AD5F20972EC
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa
Signing time: Thu 02 Jan 2025 17:52:08 +0000
ROA not before: Thu 02 Jan 2025 17:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199274
IP address blocks: 91.239.26.0/23 maxlen: 24
176.112.192.0/19 maxlen: 24
185.22.60.0/22 maxlen: 24
194.177.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:6c:e9:31:a7:bb:e7:c1:72:9a:d5:f2:09:72:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Jan 2 17:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a6fd0dd7118f8a18a996857d9c0a67a1fcb9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:52:72:54:30:38:d0:2b:03:47:c4:17:89:
1d:cc:1c:cb:93:8a:ad:ec:77:98:55:75:1b:83:3e:
56:3f:d1:9c:af:72:2e:33:8c:85:a4:18:1b:32:14:
07:d3:88:84:92:7c:b7:3d:48:42:1e:47:a0:28:fb:
f7:64:af:0b:7d:5b:ff:7f:84:22:78:81:08:55:8f:
be:a0:b7:55:1e:e7:95:da:a2:6c:a3:b0:db:61:93:
0e:b2:3a:ae:d9:0a:b3:e0:7c:ab:57:78:f3:39:67:
3c:78:cc:8b:5e:f1:1c:e1:f2:98:d7:2f:e0:3e:f0:
0f:39:63:09:be:e3:87:7b:a7:d9:87:28:ff:09:0d:
1e:73:a4:bc:99:68:11:41:59:24:83:3b:b9:78:02:
c8:c5:ba:8b:a3:fa:67:5d:21:82:8e:54:6e:2f:0a:
9a:21:91:0f:db:be:1a:d5:31:fc:68:b3:46:9a:80:
87:18:8e:c6:ba:8f:2b:02:49:8f:5c:35:5d:e4:1a:
9c:53:b3:25:aa:ef:16:dc:28:af:01:6d:23:6d:16:
30:fc:29:fb:f4:c6:07:36:81:7e:17:e1:b7:f9:fd:
9a:54:37:41:e7:b9:04:8f:34:fa:b5:18:82:28:2d:
33:f7:f5:4d:2c:88:92:a3:20:97:76:86:40:6e:34:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A6:FD:0D:D7:11:8F:8A:18:A9:96:85:7D:9C:0A:67:A1:FC:B9:CF
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.26.0/23
176.112.192.0/19
185.22.60.0/22
194.177.20.0/22
Signature Algorithm: sha256WithRSAEncryption
77:00:0d:d4:e0:43:97:ed:f4:3d:ae:23:d1:7d:24:d5:8f:43:
ab:53:df:a6:5e:d2:27:9c:e3:ab:c9:46:07:5e:84:c4:81:57:
31:71:1c:12:d3:95:0d:1c:fd:85:09:ef:d1:fe:60:b7:79:8d:
1c:60:bb:ca:9d:5c:92:a5:9c:06:6d:36:f4:dd:e2:46:84:d6:
28:08:0c:d1:7f:1d:f5:bf:7e:b5:9f:19:09:d9:84:52:a5:12:
4c:7a:63:9b:3d:4f:47:41:7f:b3:bc:a6:22:c2:94:2e:7c:9d:
be:51:ee:2e:f1:a7:d9:4c:0a:5a:c2:44:6d:59:9c:66:b1:8b:
a3:e6:e6:43:68:db:f0:db:7a:ec:b1:0c:d2:d9:92:a9:f6:0a:
83:fc:02:41:de:dd:3f:33:04:24:d5:b1:e1:ed:79:cb:91:d6:
08:bd:ea:81:7e:68:cd:63:a7:c4:3b:6d:36:f0:fd:98:53:ed:
ae:0f:c3:5d:45:00:20:2c:15:b0:20:cd:4e:c1:bf:1c:e5:54:
3c:95:ce:78:b5:71:95:78:8f:86:e4:e2:b8:e9:6d:00:72:09:
23:89:43:d8:b2:dc:f0:10:40:71:cd:c7:5b:15:af:69:a2:ab:
3a:0b:98:1d:5e:fb:a9:2e:a1:fd:ee:ac:5b:15:c6:8e:d4:64:
81:9e:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net