Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/u1q93eogqq8ewSFI28D24ujX7vQ.roa
File: u1q93eogqq8ewSFI28D24ujX7vQ.roa (raw, json)
Hash identifier: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=
Subject key identifier: BB:5A:BD:DD:EA:20:AA:AF:1E:C1:21:48:DB:C0:F6:E2:E8:D7:EE:F4
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 0194258EABC150DCA516705FE5977652996E
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/u1q93eogqq8ewSFI28D24ujX7vQ.roa
Signing time: Thu 02 Jan 2025 05:48:14 +0000
ROA not before: Thu 02 Jan 2025 05:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57850
IP address blocks: 91.209.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ab:c1:50:dc:a5:16:70:5f:e5:97:76:52:99:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Jan 2 05:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb5abdddea20aaaf1ec12148dbc0f6e2e8d7eef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:58:40:4f:58:d6:fe:12:cb:ba:ae:02:c1:
b2:fc:0e:15:4c:f9:8d:74:c2:6f:9e:2a:63:13:2e:
82:c5:4e:7d:b7:64:25:3b:ff:c8:f0:43:54:05:d3:
e3:df:ca:f4:4f:09:c2:01:1c:a8:21:01:53:e6:ed:
20:82:ec:c6:b9:b4:ec:1b:46:05:72:25:f9:89:7d:
52:ba:28:b1:ea:e6:6f:85:33:55:d0:30:01:bd:e7:
64:a1:2b:af:2c:27:10:93:d2:29:0c:6f:5c:63:f5:
d8:a1:a5:9e:07:8e:b1:e8:82:b6:32:3e:35:d9:93:
7f:14:bf:04:30:5b:12:25:03:b9:9d:83:91:b7:ce:
92:a0:9a:0f:97:93:34:96:f8:fa:b1:84:32:5e:cb:
5b:96:7f:c3:99:b1:98:50:da:78:50:5e:2e:5a:d1:
c7:dc:bf:18:12:1d:0b:d3:c3:b8:c0:74:c4:e9:24:
37:e2:d3:a0:53:c2:39:a8:c4:6f:b5:b6:b2:09:2a:
6c:1e:f7:d6:6e:2f:dc:96:dd:49:c5:23:de:2a:31:
f1:d8:a5:fb:aa:e0:95:6c:4b:ef:0a:3b:f2:f2:15:
0b:50:f0:8f:98:e4:02:85:94:ab:df:22:ee:15:72:
95:f0:c2:75:a2:d8:ad:38:35:6e:62:73:63:d7:03:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:BD:DD:EA:20:AA:AF:1E:C1:21:48:DB:C0:F6:E2:E8:D7:EE:F4
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/u1q93eogqq8ewSFI28D24ujX7vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.60.0/24
Signature Algorithm: sha256WithRSAEncryption
31:69:71:22:ba:5b:91:58:14:d8:7a:42:ae:7b:ae:75:70:b9:
9b:1e:c0:a2:58:ee:a0:45:5f:39:b4:20:c4:99:a2:0c:36:1c:
2f:30:ab:d6:d9:85:a6:c4:b9:53:85:ff:aa:66:ab:74:e6:5c:
13:23:d2:fc:a1:f0:f2:2c:42:38:4a:9c:52:e9:a7:1c:f2:64:
b3:51:52:f8:5f:f9:66:df:23:31:ac:97:63:1e:90:87:8a:26:
06:ce:07:82:8d:94:45:cf:04:53:7d:05:11:e1:27:f2:ea:4d:
e6:42:4b:a4:1b:ed:3b:6a:d6:70:56:8f:63:4e:ac:84:54:b1:
7a:17:c7:94:5a:b8:a3:b2:01:7f:80:13:71:ca:00:27:eb:44:
86:1a:9e:29:c9:b8:cb:df:d9:b9:6d:33:9b:b1:3a:66:c3:89:
14:bc:66:67:03:fd:9d:ab:03:fb:d2:f3:94:ef:fc:51:c0:cf:
e8:da:6e:73:47:1d:0b:5c:21:60:94:a4:f6:b3:6a:ac:5d:f8:
92:75:7f:45:6f:77:eb:a2:75:a3:6b:5d:94:16:66:a7:56:be:
a5:36:ab:c6:e5:1c:b6:d5:61:68:9c:ce:ee:aa:d0:21:e9:eb:
be:4a:db:2d:b7:93:5d:c9:cc:80:9a:24:50:3e:07:51:0e:2d:
4b:53:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net