Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/FE9TisHKbwT-TG7WXc-HdjPStqc.roa
File: FE9TisHKbwT-TG7WXc-HdjPStqc.roa (raw, json)
Hash identifier: pRwsqMoq8wG5C6fvp0aFlXXk9XmPop41EHqaLEOgfSc=
Subject key identifier: 14:4F:53:8A:C1:CA:6F:04:FE:4C:6E:D6:5D:CF:87:76:33:D2:B6:A7
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019425222D6D14B308E70FD0319000603B80
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/FE9TisHKbwT-TG7WXc-HdjPStqc.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198746
IP address blocks: 91.238.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2d:6d:14:b3:08:e7:0f:d0:31:90:00:60:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144f538ac1ca6f04fe4c6ed65dcf877633d2b6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:47:e3:3a:a8:87:88:ad:f9:77:6d:00:0e:
ce:23:77:4e:15:04:c1:2f:95:65:d2:ef:71:97:94:
81:79:c7:8d:e7:8d:4c:5c:b1:28:b6:cc:34:7d:87:
0c:02:0c:78:9d:f9:07:22:2d:91:82:2b:fc:ee:6d:
8c:aa:37:de:28:ad:d5:6a:73:7f:9f:ff:a9:eb:e4:
71:77:dc:f5:c6:75:85:f3:df:85:c7:a3:93:35:be:
fc:62:60:92:eb:74:07:e6:7d:dd:c1:4a:c3:ae:c5:
03:55:9d:53:ab:ca:e9:ef:cc:c3:80:40:f9:59:be:
68:2e:6d:77:1a:91:44:c5:27:b5:3a:ec:d5:4d:05:
32:02:40:38:d1:4b:ab:01:8c:c9:f9:54:69:d8:2e:
c5:db:df:6f:99:d2:7e:d7:d0:ee:65:8b:00:5d:f6:
56:55:9b:e2:30:ea:5a:63:dc:5d:9f:95:8d:0b:8e:
84:be:d3:bc:da:ce:b6:cd:06:3b:b4:fb:27:a1:af:
05:ae:65:6a:1a:2a:3f:c1:91:f8:b4:b0:d4:9d:e5:
85:9d:23:8f:81:97:ed:cd:51:3f:43:92:cd:3a:e3:
17:7b:3c:a4:95:9a:50:99:33:fc:fa:1e:03:b5:6e:
2c:c3:80:ca:54:59:28:f1:77:d1:cd:4e:49:41:79:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:53:8A:C1:CA:6F:04:FE:4C:6E:D6:5D:CF:87:76:33:D2:B6:A7
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/FE9TisHKbwT-TG7WXc-HdjPStqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.254.0/24
Signature Algorithm: sha256WithRSAEncryption
08:74:e7:6a:de:51:f7:d1:b0:1b:5b:77:04:87:6b:38:e2:c5:
cb:25:b2:84:ea:c8:f0:16:b1:5a:d6:c6:33:32:3b:72:48:41:
6d:87:93:e6:6a:b2:c0:dd:b0:cf:36:30:7d:25:82:c7:c3:7b:
b8:9e:32:0f:99:c1:49:e8:5d:7d:cc:ee:aa:ee:dd:ac:7d:d1:
55:20:0b:21:33:2a:e0:da:09:6e:d9:60:eb:23:92:61:e6:81:
82:63:8d:5b:bf:e2:64:a2:15:55:61:1e:ea:92:dd:31:2a:74:
32:00:31:13:08:06:96:40:51:91:55:a5:df:00:44:09:9a:be:
ac:5e:c7:d8:7d:96:66:28:f2:67:e1:c2:44:1b:02:04:eb:32:
d4:f1:24:4b:34:b4:ac:1d:eb:87:1b:c4:fd:1b:d7:37:38:59:
fd:6f:b5:38:8e:5f:25:e9:61:28:b0:78:45:3f:d5:4a:51:da:
2b:d1:b9:ad:5f:a4:9b:ad:15:72:f5:e5:d3:6f:d3:b5:6b:5f:
6b:89:90:5a:fc:6b:91:bc:39:a5:b6:8f:bc:0c:7a:81:75:da:
ab:ca:cc:99:5c:be:0b:2e:ef:fe:a0:ed:8b:26:99:a3:6e:36:
6f:cd:c7:24:b3:c8:f8:ab:5d:0c:b3:04:f3:14:fe:2b:33:1b:
13:05:82:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net