Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/3VQe7QDcz0QAFxD8CVAikTb77a4.roa
File: 3VQe7QDcz0QAFxD8CVAikTb77a4.roa (raw, json)
Hash identifier: kuPhDq2LDMp5DIdwzFCO0R0rYHy09PUdoUn4lTcSWVc=
Subject key identifier: DD:54:1E:ED:00:DC:CF:44:00:17:10:FC:09:50:22:91:36:FB:ED:AE
Certificate issuer: /CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Certificate serial: 019425216C86D4CDC4A27C003C6C07041452
Authority key identifier: B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/3VQe7QDcz0QAFxD8CVAikTb77a4.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28865
IP address blocks: 91.235.104.0/24 maxlen: 24
91.235.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6c:86:d4:cd:c4:a2:7c:00:3c:6c:07:04:14:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e7f71bcf52ed6d05b7eb3b741ec7906e77dcca
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd541eed00dccf44001710fc0950229136fbedae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:0b:7b:12:5e:d3:e4:8c:03:ea:43:bc:d2:
ff:35:ec:b5:04:4b:d9:bb:20:6e:56:70:8a:7c:27:
4a:30:f1:72:e5:f4:00:a5:96:95:42:67:26:97:a7:
47:7a:e4:20:c8:36:27:cf:7d:34:92:99:7e:98:4a:
43:fb:29:ec:34:05:b5:46:70:23:fa:48:c1:1a:d9:
ed:05:0f:c5:c0:96:91:42:95:2c:e8:9a:a7:f6:68:
52:58:89:25:ce:7c:f9:49:75:dd:07:24:28:3c:7e:
28:32:14:e7:23:35:6e:ac:48:80:4d:d6:3b:9a:e5:
74:05:51:65:88:f2:2a:5b:c4:cf:b1:1e:6d:1d:dc:
0a:28:ee:78:de:0c:02:c1:13:72:b9:10:d1:f9:d3:
de:c1:b2:fa:f2:85:97:5a:5b:45:cf:b7:a2:3d:45:
d5:f0:6d:4d:e1:c2:dd:ab:90:55:cf:a8:ed:dc:fe:
6c:8b:67:82:c6:c8:96:70:59:cf:31:71:a2:fb:96:
47:fa:c3:a9:76:76:4b:a3:7a:51:86:47:33:f4:e1:
48:7a:94:e3:39:bf:ef:f4:db:c0:fe:d5:92:b6:b2:
bf:ac:d9:36:ce:b6:9e:2d:f6:af:50:91:3f:28:92:
6c:2a:ef:e7:b8:6a:db:5c:6d:c3:cb:9d:73:b5:90:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:1E:ED:00:DC:CF:44:00:17:10:FC:09:50:22:91:36:FB:ED:AE
X509v3 Authority Key Identifier:
keyid:B9:E7:F7:1B:CF:52:ED:6D:05:B7:EB:3B:74:1E:C7:90:6E:77:DC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uef3G89S7W0Ft-s7dB7HkG533Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/3VQe7QDcz0QAFxD8CVAikTb77a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f1695-7ad6-4d24-806d-b5cd13d9184c/1/uef3G89S7W0Ft-s7dB7HkG533Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.104.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:15:fc:00:e8:c9:d4:28:f1:b8:d7:66:22:32:09:aa:9e:42:
77:43:87:1b:6a:2a:2f:7d:ba:26:75:3a:43:2a:37:8e:39:69:
52:39:24:3d:47:b5:0a:a9:46:20:67:19:23:b8:bb:82:be:8c:
36:19:de:6e:d4:19:9b:bb:07:f4:2c:4b:0c:d8:32:ac:24:0a:
f3:80:39:67:a7:f9:5e:08:8d:d4:3b:ca:fd:4e:fc:1f:64:d4:
af:a0:5c:94:de:3d:d7:30:d0:a0:ed:59:2c:5c:ac:8c:ba:09:
cc:ff:87:4f:9d:aa:99:f8:a9:8b:7c:3d:3c:4d:e6:76:08:03:
f1:1f:f1:ee:5c:ae:8d:33:42:38:c6:8b:ff:b3:b0:3d:e6:25:
b6:c0:13:f3:63:8b:79:fa:07:7b:8c:e9:6a:44:86:4b:ea:b4:
86:c1:6a:b6:a2:43:b0:52:27:05:f7:9f:6d:11:29:b3:0a:84:
e6:9e:5b:84:e4:ed:3c:16:54:9d:37:18:23:0d:67:ea:1b:9e:
50:46:99:3e:19:78:80:09:00:5e:51:a0:05:dd:cf:51:36:5a:
92:5d:69:e9:e3:cd:d6:97:37:e7:99:9b:80:a0:64:e2:75:9e:
be:53:3f:a4:03:a7:02:13:7c:2f:46:8c:82:24:d2:24:3a:20:
e5:cb:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net