Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa
File: 1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa (raw, json)
Hash identifier: t1w40I15hLlr7dv8d0uJE/Dz2j4qqNVpP8R3SOXwVvk=
Subject key identifier: FA:EC:F6:40:B1:83:FD:97:75:2F:91:58:7C:12:37:70:2E:97:1C:CF
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 019423D7C8783C68C375B50FC034EC6E74D7
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa
Signing time: Wed 01 Jan 2025 21:48:51 +0000
ROA not before: Wed 01 Jan 2025 21:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34393
IP address blocks: 91.218.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c8:78:3c:68:c3:75:b5:0f:c0:34:ec:6e:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faecf640b183fd97752f91587c1237702e971ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:0c:76:f1:05:e0:a0:1e:ee:3c:55:e8:cb:
14:8b:8d:25:f5:9c:66:e0:9c:6d:23:86:7f:78:2f:
98:fd:d5:43:65:50:3a:00:da:b7:07:9b:3e:8a:c0:
5e:0d:f0:ff:24:08:65:4b:d0:0c:91:3d:bd:22:d4:
f2:39:80:f2:3e:61:cf:b0:b5:85:fa:df:60:9b:d0:
4f:87:0d:40:24:44:25:33:18:53:0b:30:c7:e3:02:
75:cb:a5:01:a4:ac:58:f5:bf:67:a4:c6:da:2f:8f:
73:5f:7e:ac:37:26:4f:ae:ed:a0:90:38:a2:51:03:
be:73:40:af:a8:b8:93:0a:6a:8a:a8:d1:49:b8:f6:
7b:c5:ad:a8:b3:ab:4f:ce:29:a6:42:32:50:a0:c0:
de:81:45:20:8a:6a:f5:16:c4:79:15:79:43:96:ac:
43:01:1d:5b:e2:ae:49:01:62:cd:2e:6a:c4:9f:64:
d4:9c:d9:db:1e:cf:df:f3:21:da:e7:33:58:bc:41:
58:0b:b0:2a:63:1d:59:be:f3:0c:c2:b4:8b:8b:ae:
a0:66:87:4f:b2:6a:12:c6:c7:67:77:d4:da:a8:22:
29:63:76:b8:87:3d:59:27:03:9d:ac:35:68:fc:51:
c9:db:6f:a9:18:c2:f0:36:df:7a:ec:8e:d9:00:2d:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EC:F6:40:B1:83:FD:97:75:2F:91:58:7C:12:37:70:2E:97:1C:CF
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/1-uz2QLGD_Zd1L5FYfBI3cC6XHM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.241.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d4:cd:17:b6:bf:54:bc:3d:ca:98:d8:13:c4:35:c4:a0:56:
fb:ba:a5:94:c1:5f:e2:dd:c2:22:37:db:df:9f:4b:36:b7:02:
e0:b2:e4:d0:0c:e9:fd:ba:c0:ff:00:71:ed:66:25:f7:37:44:
1d:5f:ec:8a:0f:8f:c2:df:77:93:86:ed:21:ef:bc:b0:81:e0:
de:46:e3:23:42:b1:f4:23:2a:25:af:a2:67:b6:7b:c0:82:20:
65:10:66:52:98:06:73:eb:fd:0c:76:51:c6:ed:d7:01:7c:ab:
e9:0a:2e:18:68:5f:6b:31:74:07:1f:55:5d:e6:c3:f4:b3:19:
f2:25:c5:24:4a:d4:16:23:ab:cf:3e:35:1b:f4:03:cc:d3:f0:
83:b6:63:f0:c3:57:eb:15:eb:6a:3e:5d:fb:81:6e:9a:ea:70:
35:72:a3:c6:5e:b4:d8:f0:61:3a:41:d3:a9:6e:12:25:19:44:
8b:8f:04:2d:7a:14:97:ce:f9:d4:b9:5b:3e:e5:be:7a:42:94:
4b:2d:6d:a2:79:ce:16:2b:d3:44:0e:d3:64:9f:c3:65:58:8d:
5a:c7:8e:05:62:30:8d:26:2d:21:90:07:67:99:cd:f9:ea:7a:
63:14:1e:93:a7:ab:7f:52:a5:20:29:6a:58:dc:ef:2b:29:52:
fd:d8:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net