Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa
File: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (raw, json)
Hash identifier: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=
Subject key identifier: EA:E4:6E:10:2E:C9:A0:25:0F:3E:57:F3:7E:AE:92:50:AE:F1:52:FA
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019423D7F97C711D1E8EB6183572DC145A3E
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21430
IP address blocks: 91.234.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f9:7c:71:1d:1e:8e:b6:18:35:72:dc:14:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae46e102ec9a0250f3e57f37eae9250aef152fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:2e:63:41:d0:ad:e5:6d:31:3e:8f:5e:27:
7e:0a:db:58:5e:26:7d:36:6b:d5:2d:38:14:c1:81:
23:20:bb:73:3b:02:1d:1f:9b:58:40:25:36:76:4d:
ee:50:b5:5c:f7:25:a9:4b:f9:55:09:a4:54:cf:0d:
9a:bb:32:02:b2:fc:e4:dd:0e:82:3f:e8:23:c0:19:
f7:f4:de:17:06:35:4d:52:65:d9:1b:d0:80:c1:56:
52:43:80:52:63:33:fe:9c:10:51:87:ac:ae:0a:a9:
01:95:1b:3c:97:e3:12:05:ab:07:b0:24:f5:d1:ec:
d9:6d:80:33:08:b2:19:31:ea:48:75:2b:36:4d:45:
3b:5c:38:ba:5c:a5:fc:b9:ab:68:0f:e5:1c:3b:64:
26:89:53:32:ec:b0:29:cf:d7:a6:1f:da:4d:29:f6:
e2:79:20:66:11:62:3d:36:e0:9f:d1:ca:ac:c6:39:
30:f5:67:e1:79:5f:dd:58:04:42:d8:45:29:0d:a4:
db:e0:3a:1e:d2:f4:e0:33:46:87:a4:72:fd:14:ad:
9f:80:8d:6e:a9:9d:88:4b:fb:c1:c7:99:4b:60:6e:
bf:22:a0:26:47:d8:b7:f2:d0:bd:93:95:11:34:59:
bd:9d:fb:1e:df:06:e6:2a:0d:aa:dc:03:33:7a:e8:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:6E:10:2E:C9:A0:25:0F:3E:57:F3:7E:AE:92:50:AE:F1:52:FA
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:19:a6:7c:d4:44:8c:fe:49:3e:5e:90:9e:58:ac:df:d8:b3:
5d:c4:ce:39:fc:c5:f7:20:0c:9e:80:c6:83:da:07:69:31:f7:
b1:bf:94:16:9b:fc:8f:76:8b:1e:bb:1d:77:2a:71:1f:ba:cc:
ad:e4:61:29:d2:3f:52:b4:d9:a5:ae:0f:ad:03:a4:1f:dc:e4:
a9:f5:7a:fa:77:0e:5d:6b:d8:f1:08:ee:c9:f6:48:07:74:95:
ba:92:c3:22:d5:56:35:e6:85:f3:05:71:80:cf:ba:c1:ca:a5:
63:71:ed:d1:1c:72:c0:98:67:10:8a:a2:08:6c:04:54:f3:e7:
66:b3:0b:f7:dc:de:6f:f8:ca:68:e1:59:92:cd:68:b0:44:16:
18:46:bf:08:0b:36:d7:24:5c:c0:20:6a:f2:fb:56:90:9a:56:
63:f6:da:2e:ff:75:cd:b1:2f:52:20:a5:e7:56:e8:18:7a:01:
6d:e4:40:7c:04:d4:80:78:7a:e8:5e:33:62:f6:17:a2:11:20:
7b:99:9c:24:ad:a2:9b:e8:cd:00:24:3d:a1:4a:fb:89:af:71:
72:ed:0d:5e:11:c3:ac:92:16:09:c5:22:64:e4:49:93:e7:d7:
9b:bb:4d:a1:bb:d3:44:44:5d:4e:d9:a1:c0:dc:22:78:0c:f5:
ae:18:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net