Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/vLREmzKS7ARNQ8r2dAo92bSwFOE.roa
File: vLREmzKS7ARNQ8r2dAo92bSwFOE.roa (raw, json)
Hash identifier: I+ZNUqrukd4BTvdK3vQp+SBz+2MVzX88vJMJ1QUiiVE=
Subject key identifier: BC:B4:44:9B:32:92:EC:04:4D:43:CA:F6:74:0A:3D:D9:B4:B0:14:E1
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 0195B57F8B8CB166126CB98DB85D99055020
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/vLREmzKS7ARNQ8r2dAo92bSwFOE.roa
Signing time: Thu 20 Mar 2025 21:39:49 +0000
ROA not before: Thu 20 Mar 2025 21:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198249
IP address blocks: 91.199.98.0/24 maxlen: 24
91.234.160.0/24 maxlen: 24
185.17.68.0/22 maxlen: 24
185.169.84.0/22 maxlen: 24
185.221.41.0/24 maxlen: 24
2a04:500::/29 maxlen: 29
2a09:f00:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b5:7f:8b:8c:b1:66:12:6c:b9:8d:b8:5d:99:05:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Mar 20 21:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcb4449b3292ec044d43caf6740a3dd9b4b014e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:9e:e5:8d:b2:eb:be:49:e3:a0:a5:dc:7f:
2f:12:03:9c:28:b6:f9:4d:c5:82:d3:1b:fd:10:b3:
a0:00:7f:b3:d0:41:6d:2a:2f:8e:9d:e6:3e:a3:67:
92:b1:71:da:37:a2:09:a0:38:e1:54:4a:11:6e:68:
da:d1:22:9f:37:16:1c:94:d6:ee:8d:ba:2d:b9:9a:
40:89:f2:d5:68:3a:5c:f2:b2:d1:1c:e9:ac:b1:de:
a7:c3:f4:b9:e9:26:68:0c:57:de:ba:4a:50:06:46:
21:a0:76:72:26:a0:36:59:db:82:cf:9e:60:d0:03:
39:a1:8f:eb:88:67:fd:38:cd:bd:8d:31:c6:72:b1:
f4:e1:6f:93:7a:4e:99:e8:dc:2c:9f:48:2b:dd:c4:
9d:5f:7d:0e:9d:14:ab:51:59:18:38:13:30:6b:a4:
4c:b4:0a:23:0d:97:81:c0:9f:d4:91:fd:7a:9b:84:
5f:26:3b:ec:cb:a6:a6:a7:10:1d:8b:a1:b3:af:09:
69:56:52:96:9e:8c:6f:b4:1f:9e:99:33:1e:95:cd:
3c:c1:28:cc:0f:2e:09:99:87:11:48:6a:6a:a4:32:
87:60:b4:3b:b5:f2:d9:38:6d:ff:d5:81:d7:f7:1d:
ec:56:62:d9:69:47:98:b3:dc:f6:ca:3f:60:96:74:
e2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:44:9B:32:92:EC:04:4D:43:CA:F6:74:0A:3D:D9:B4:B0:14:E1
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/vLREmzKS7ARNQ8r2dAo92bSwFOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.98.0/24
91.234.160.0/24
185.17.68.0/22
185.169.84.0/22
185.221.41.0/24
IPv6:
2a04:500::/29
2a09:f00:c::/48
Signature Algorithm: sha256WithRSAEncryption
0e:68:db:1e:17:a2:4f:d8:d4:a5:6e:30:93:4b:2c:60:71:d6:
95:eb:99:95:e1:7e:81:21:67:44:55:83:d3:62:c8:c6:c6:e1:
7a:2c:ca:d7:21:c7:d3:e1:ec:4c:4b:35:5b:2a:09:5a:48:80:
25:41:ca:bb:0d:b6:1a:bf:41:f8:21:c3:c4:fd:8e:f1:50:05:
85:ca:68:a0:35:0a:c8:9f:2e:9a:f1:37:e1:e7:62:5a:b3:df:
f4:c6:08:75:3e:fd:6d:4c:74:2c:0d:24:a4:38:33:c3:46:85:
c9:58:fa:e0:99:0e:34:17:46:fb:cd:d4:44:17:d0:fb:39:a7:
7d:50:0b:ab:84:8f:03:61:82:b8:08:00:98:09:31:8e:08:63:
aa:9a:70:c6:ab:bd:55:70:61:af:64:7f:90:d8:04:0c:fd:6c:
60:23:10:ac:e5:74:e7:49:b6:df:e5:c0:ff:96:47:49:3c:c9:
61:fb:d6:60:06:97:27:29:ea:18:23:80:73:32:2b:b7:35:d0:
97:4a:ac:68:dd:87:40:04:bb:70:65:8e:02:54:c8:cc:80:ef:
0b:7b:cf:fa:ed:18:a8:cd:5d:9b:f7:04:6c:32:5b:6f:5d:38:
33:fb:2f:41:41:75:e8:fc:d9:be:6b:8e:86:ac:9b:46:c0:1c:
a0:55:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net