Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/pgkZmq53mdBn0axql3jHx0EQjb0.roa
File: pgkZmq53mdBn0axql3jHx0EQjb0.roa (raw, json)
Hash identifier: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=
Subject key identifier: A6:09:19:9A:AE:77:99:D0:67:D1:AC:6A:97:78:C7:C7:41:10:8D:BD
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019422FC346408C662E2944A592F40B77591
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/pgkZmq53mdBn0axql3jHx0EQjb0.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60178
IP address blocks: 79.143.86.0/24 maxlen: 24
87.236.213.0/24 maxlen: 24
87.236.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:34:64:08:c6:62:e2:94:4a:59:2f:40:b7:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a609199aae7799d067d1ac6a9778c7c741108dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:30:bf:90:ea:90:1d:26:6b:16:94:e6:12:
ae:c3:28:de:1a:92:9f:03:80:dd:86:66:2b:72:79:
fd:8b:cb:99:10:53:7b:2a:ed:63:a3:7c:37:78:14:
58:f9:ff:4a:f6:a5:44:c8:86:44:ba:68:06:2d:1a:
e9:96:82:5e:0a:d2:29:56:f5:2b:6f:7d:f1:3f:f2:
4e:55:d0:4b:19:bb:f8:fb:a4:2a:86:ae:39:27:df:
2b:48:b2:5d:3b:3d:bf:6a:97:da:a6:3d:75:68:e2:
bb:96:6a:56:5d:e5:ef:68:13:1b:9d:1d:71:2d:67:
13:74:cf:08:5a:b7:08:07:a7:40:a0:6f:14:2c:43:
b4:6e:be:7b:0f:39:0a:3e:67:5f:29:3f:5a:38:ee:
83:37:f5:8c:0f:98:93:5b:26:56:7c:3c:8d:1b:4a:
92:a0:82:f9:49:db:ac:22:9b:91:41:4b:44:e5:16:
34:59:5a:d4:0b:e8:d3:a4:77:c8:e1:9a:34:eb:55:
7e:f6:d7:3f:49:05:f4:ce:f5:96:7b:e0:1a:01:61:
09:8b:53:b7:18:30:96:34:81:90:84:e0:ea:67:57:
bd:26:f3:11:be:5f:be:d6:e5:f0:61:f9:ee:ef:cb:
f2:9e:a0:5b:ba:28:b6:0f:5e:24:bb:f6:1a:9b:4e:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:19:9A:AE:77:99:D0:67:D1:AC:6A:97:78:C7:C7:41:10:8D:BD
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/pgkZmq53mdBn0axql3jHx0EQjb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.86.0/24
87.236.213.0-87.236.214.255
Signature Algorithm: sha256WithRSAEncryption
30:41:02:92:e0:d7:ec:1a:78:87:89:a2:87:e2:9a:f1:b6:f0:
0e:2a:35:6c:02:37:f2:17:05:64:d9:f7:d5:d2:a0:52:af:23:
11:7c:c4:3a:e6:40:d5:ef:50:ad:23:e3:76:59:af:09:64:f9:
18:a0:86:29:cb:8a:3b:ae:49:00:a6:89:82:db:5a:5d:3f:c9:
26:4a:99:39:a0:70:b4:2c:77:1e:32:88:3a:72:f6:b4:96:85:
5d:b7:80:6a:6a:8a:a7:83:f7:0e:7a:b6:bf:15:85:83:dd:6c:
e7:76:d8:6d:95:cc:69:1a:e1:7a:e5:c8:94:4b:ef:d0:02:f5:
2a:c8:f1:7a:06:81:62:c2:db:7b:b4:6b:16:21:bc:6e:73:56:
c4:84:9e:06:0d:1e:d8:da:63:90:5a:66:6e:fd:a0:75:4e:5d:
e2:35:1b:84:f5:7a:13:6f:f4:8e:97:ba:87:99:47:b0:83:3a:
88:fc:64:da:29:7d:7b:c1:c9:da:81:5c:5a:b0:86:ed:75:ad:
c0:65:5a:7e:8d:32:4e:51:b7:9a:ac:ed:52:23:08:5b:1e:3b:
a3:48:30:d7:d1:8d:aa:73:bd:e8:8c:e0:c4:07:82:cd:9c:ec:
bf:c6:f8:0a:7e:6d:ca:2c:aa:ce:77:ae:de:03:14:57:99:a1:
8e:45:38:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net