Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/y4FE1rBXMFm62wHyyCqUymbJNYs.roa
File: y4FE1rBXMFm62wHyyCqUymbJNYs.roa (raw, json)
Hash identifier: MR4VvjpI1G7xCd6u/lSzNw5eAzME4oCWzew3Uw7zWlY=
Subject key identifier: CB:81:44:D6:B0:57:30:59:BA:DB:01:F2:C8:2A:94:CA:66:C9:35:8B
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 01960E8F61FFFC87ED95F5A37B2CA4FA3685
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/y4FE1rBXMFm62wHyyCqUymbJNYs.roa
Signing time: Mon 07 Apr 2025 04:43:19 +0000
ROA not before: Mon 07 Apr 2025 04:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200467
IP address blocks: 91.235.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:8f:61:ff:fc:87:ed:95:f5:a3:7b:2c:a4:fa:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Apr 7 04:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb8144d6b0573059badb01f2c82a94ca66c9358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:ba:02:cb:e1:3e:ab:8f:ab:b0:6c:f2:f3:
94:46:0a:3f:af:b6:05:56:29:0d:41:4c:43:ad:1f:
36:70:cb:ad:59:9a:29:91:7d:4e:e1:ff:c2:6d:26:
2d:9c:c1:b7:a3:80:30:8f:e0:ce:b5:a3:ae:d9:d8:
cc:a4:4f:03:d6:21:b1:93:c8:92:6e:7f:30:56:59:
fe:61:06:11:97:1e:cc:b8:82:63:d9:a9:5d:29:d8:
ea:5b:85:ca:d1:f9:1f:07:d4:2d:f1:8f:fb:d1:c3:
3b:75:2a:e7:a4:16:bf:17:a0:76:ae:86:a4:65:2c:
b5:99:66:13:06:51:fc:7e:3c:c6:07:60:4e:1a:9c:
81:b2:e8:82:35:e5:57:7f:72:f1:06:bd:ee:9b:e5:
aa:ef:93:65:8d:dd:93:49:15:61:2f:1d:10:f7:9d:
b3:bb:f4:d0:6e:6e:91:11:65:99:94:d3:09:f0:fa:
27:6b:2f:4c:f7:b1:a9:44:7b:a5:d1:4f:8a:06:94:
f1:08:09:4e:23:50:8c:89:8a:ef:b2:ad:2a:93:6a:
05:ca:f8:26:5a:4d:6a:a1:37:d5:9c:1f:25:45:ed:
39:24:92:ac:25:5a:54:f5:9b:7e:60:e8:9e:24:5e:
e3:dd:a3:c7:25:df:f8:33:3b:9b:c1:7e:a4:e0:4c:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:44:D6:B0:57:30:59:BA:DB:01:F2:C8:2A:94:CA:66:C9:35:8B
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/y4FE1rBXMFm62wHyyCqUymbJNYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.14.0/24
Signature Algorithm: sha256WithRSAEncryption
66:59:85:b3:2d:7a:07:f5:de:3f:05:ec:d0:ed:27:c6:79:95:
02:7e:f0:9e:e0:89:c7:e5:91:e6:65:0e:02:4d:b7:d9:e0:ed:
08:65:82:43:e2:2d:12:8e:89:60:f9:d3:d0:a7:da:8f:ae:bd:
cf:ec:73:4e:84:88:ef:46:39:18:ed:35:96:bb:8e:04:e7:93:
51:47:99:f6:fe:c6:7a:1f:f0:8f:53:14:ab:23:6b:47:c5:9f:
89:1b:aa:0d:f7:47:0d:7d:2c:97:9a:5f:66:79:d3:a2:2b:06:
05:d7:2f:c4:fa:86:c0:55:6f:0b:4b:f2:34:f6:ce:3a:51:e0:
60:9f:6a:a3:2e:1a:cb:50:62:61:2a:93:e1:67:a8:5d:e6:2a:
06:03:4b:cf:1c:cc:73:3a:2d:37:64:64:be:31:73:bc:76:b6:
fb:87:df:5a:87:e5:9f:6a:57:18:78:09:11:36:85:11:e3:c2:
e9:41:fa:64:1b:ea:c0:a6:96:09:f0:d5:e7:3a:d0:78:ad:c6:
52:c9:dd:82:13:ce:44:14:80:bc:ea:37:91:a3:cb:24:ea:34:
70:15:1b:fb:51:cd:ab:f9:43:db:6f:94:27:b9:95:76:75:72:
c3:d7:14:41:36:30:49:e2:5f:84:eb:cf:62:74:0c:68:63:8c:
60:01:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net