Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/X5Fww_8KGev_5n5MWd8zbg2gmXc.roa
File: X5Fww_8KGev_5n5MWd8zbg2gmXc.roa (raw, json)
Hash identifier: DIztrJ51Kpwe3HNc07UEuOz1jm3MBQvVt7F7Mikk1H4=
Subject key identifier: 5F:91:70:C3:FF:0A:19:EB:FF:E6:7E:4C:59:DF:33:6E:0D:A0:99:77
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019425FC054DF97C1964148BDE4303867FAE
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/X5Fww_8KGev_5n5MWd8zbg2gmXc.roa
Signing time: Thu 02 Jan 2025 07:47:40 +0000
ROA not before: Thu 02 Jan 2025 07:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196716
IP address blocks: 91.213.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:05:4d:f9:7c:19:64:14:8b:de:43:03:86:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 2 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f9170c3ff0a19ebffe67e4c59df336e0da09977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:70:3c:32:59:9c:c1:be:56:29:fa:92:e3:
9c:b5:42:ab:ae:5e:a0:41:29:b2:8b:ec:a6:d4:0f:
5b:68:71:56:74:2e:67:92:e1:e2:94:53:11:0d:68:
17:c7:ea:f7:e9:9b:43:8e:dd:85:26:d8:4c:53:57:
c0:ad:a1:5e:39:3c:ab:70:49:3a:f3:83:57:59:56:
42:91:a2:1d:f9:46:a2:c2:58:72:03:48:92:b6:15:
d9:d1:15:fb:1a:48:67:98:7c:66:4d:cb:3e:a9:a5:
63:ca:7c:d8:f1:aa:94:2a:c6:9f:6e:97:bc:df:fc:
cd:8c:39:ae:83:02:66:0b:9e:8b:11:57:af:47:60:
a9:7e:1f:ab:ae:b0:23:98:60:8f:02:dd:ec:00:30:
0f:d6:9f:ea:08:d4:cd:a0:a8:ea:9d:7f:71:52:b1:
9b:8e:27:4d:72:84:5e:e1:e1:e1:fa:4e:8f:77:5b:
99:05:13:b1:79:28:dd:ba:9b:f2:a1:60:58:27:c5:
7d:dc:ab:61:97:fc:15:34:b4:b4:d7:93:29:f9:ca:
12:1b:38:5c:e3:1b:c1:9a:54:41:26:82:9c:8e:89:
ff:c0:23:6f:64:d0:50:19:95:af:93:9f:b4:2d:9c:
8d:2e:02:27:9e:88:3b:18:b4:39:7d:20:3d:86:7f:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:70:C3:FF:0A:19:EB:FF:E6:7E:4C:59:DF:33:6E:0D:A0:99:77
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/X5Fww_8KGev_5n5MWd8zbg2gmXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.125.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4c:e2:5d:03:c9:0c:bd:94:61:00:73:a8:6a:69:06:45:87:
16:e4:1b:17:2a:2d:80:75:f8:2f:53:31:31:3c:65:6d:a9:98:
f5:72:40:db:01:11:ba:22:f0:d1:8f:82:28:5d:ab:00:7b:e6:
b1:b2:de:2a:a3:f6:db:61:08:a1:47:47:3f:97:bf:1c:e1:ab:
b7:4c:92:0b:df:d0:93:45:77:32:9b:3a:4a:34:e0:65:31:d0:
41:a6:9b:81:1a:1a:df:8c:b9:0c:a5:41:39:d8:75:d9:cb:e7:
48:af:0c:ba:45:e0:5b:90:48:ba:88:8d:2a:54:fc:96:1a:27:
5a:a3:20:4d:87:f8:de:4e:c8:ae:1b:21:b1:b2:3a:ac:71:0b:
a9:2b:02:0d:57:22:a4:9f:2e:d2:5b:94:9c:f2:e9:bf:c1:0c:
76:a0:ff:25:a8:96:ed:ae:b1:2c:d8:43:0f:e3:cb:96:63:82:
0f:8f:77:78:7f:fa:7f:ca:b0:f1:aa:2f:91:81:7c:79:59:b1:
e7:69:83:f3:9a:09:dd:19:41:73:1c:af:61:c7:fb:f8:1b:84:
7c:9b:b6:36:ef:bc:cc:9e:a9:02:6c:f8:bb:73:69:bc:90:5b:
91:8a:8a:42:4e:dd:a2:b1:37:95:c2:63:f9:42:25:22:42:6a:
5a:31:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net