Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/y0q_mnHeqqODRkh3mN1XsHcA07o.roa
File: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (raw, json)
Hash identifier: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=
Subject key identifier: CB:4A:BF:9A:71:DE:AA:A3:83:46:48:77:98:DD:57:B0:77:00:D3:BA
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 0194221FC9B588CE17F6F617513EEF64D9DF
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/y0q_mnHeqqODRkh3mN1XsHcA07o.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43868
IP address blocks: 91.217.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c9:b5:88:ce:17:f6:f6:17:51:3e:ef:64:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb4abf9a71deaaa38346487798dd57b07700d3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:d1:a7:1f:18:46:58:03:58:80:aa:95:55:
1e:5e:33:f5:f2:80:3f:5d:d7:a4:7e:d7:f1:ce:ff:
f8:7c:65:eb:02:58:ce:1e:ee:b5:bf:51:f5:8c:51:
91:03:4a:de:cf:78:87:36:65:1a:95:09:9e:e1:50:
fb:af:dc:ad:68:f9:d1:54:88:ac:1f:fa:96:36:f7:
bb:3a:2c:0b:34:8c:a1:2d:a2:9c:f4:37:06:80:75:
e9:89:22:2a:f5:80:03:87:a3:4a:be:4a:3d:25:0e:
99:f0:94:86:bd:53:c6:f3:6f:ab:b9:a9:87:dc:c8:
eb:94:ce:4d:f9:e5:b5:48:92:7c:00:60:14:5c:cd:
88:47:8c:60:15:77:99:36:c6:f4:f8:16:37:6f:d2:
92:04:bd:26:07:93:25:f1:d6:ad:64:2d:6e:18:0f:
13:91:dd:f8:0f:4d:20:48:1e:ba:9a:50:2b:8d:13:
a6:1c:41:03:95:4d:18:47:90:00:94:cf:9a:9b:b2:
f1:d4:64:35:96:f6:71:4f:69:02:58:56:6f:8c:99:
44:d9:55:4a:ec:d2:60:d0:02:a1:18:ef:45:cf:b3:
14:1a:6d:bd:57:bd:96:e3:0f:f7:a0:71:85:4c:a9:
89:cb:66:94:a9:09:b3:39:c3:b3:06:b7:1b:ac:5d:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4A:BF:9A:71:DE:AA:A3:83:46:48:77:98:DD:57:B0:77:00:D3:BA
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/y0q_mnHeqqODRkh3mN1XsHcA07o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:7b:5a:a5:e8:29:ce:2e:05:85:e5:f7:2f:87:10:3d:99:38:
de:fa:9b:ef:16:70:ce:51:18:b9:41:bd:d1:17:78:9b:2a:de:
77:c4:ce:36:c8:37:66:2e:72:69:6c:7f:2e:11:47:89:98:68:
1c:4b:9b:e2:1d:23:e0:c4:bc:61:a1:61:7c:ad:09:e1:82:5f:
3f:d4:8d:0d:ed:e4:77:c3:26:af:79:f2:96:c9:9a:a9:2c:58:
4d:6a:d8:bd:e1:03:cb:1e:16:f8:3e:fe:91:a3:cf:74:9e:c9:
9d:a1:03:3b:3b:70:6d:0e:f9:82:e5:30:67:68:98:3a:98:89:
bc:46:43:01:e3:fb:af:21:32:b7:7e:52:9b:1f:52:b2:33:a5:
5f:d0:2f:e1:c9:34:68:03:5a:a9:53:54:0e:87:4c:9b:8d:47:
b5:ce:d0:8a:b8:69:8e:6b:1f:1f:f8:d3:b2:b9:d6:01:cb:b2:
bd:ed:2b:6e:e0:9c:62:21:b1:59:c9:90:39:62:3b:8f:89:9b:
1e:24:84:56:ba:2e:18:c3:98:e0:1c:07:a0:a0:9d:54:ce:71:
6e:aa:5b:38:0b:2b:30:56:f1:d7:62:05:c1:ee:cd:39:dc:70:
10:d0:c5:5f:bf:30:69:c6:6d:c3:21:5a:84:03:7f:6c:12:99:
58:5e:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net