Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa
File: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (raw, json)
Hash identifier: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=
Subject key identifier: 26:C6:F4:05:1F:54:37:E7:5C:CA:30:EC:C6:46:8E:DF:E6:2F:96:DC
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 0194282632867ADA7B44744514C3165912B9
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa
Signing time: Thu 02 Jan 2025 17:52:59 +0000
ROA not before: Thu 02 Jan 2025 17:52:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48810
IP address blocks: 91.238.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:32:86:7a:da:7b:44:74:45:14:c3:16:59:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 2 17:52:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c6f4051f5437e75cca30ecc6468edfe62f96dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:da:ab:18:5b:8f:fb:95:fc:7f:86:26:d7:
56:7d:68:13:f2:bd:5f:3c:d2:41:51:91:78:e9:0a:
e3:02:8f:3e:96:20:35:37:ec:66:8a:e7:1e:41:79:
ea:c8:cf:04:2f:be:76:18:c1:99:89:83:c2:38:82:
ec:34:10:54:d8:ef:e4:1a:66:aa:db:c8:3f:49:a1:
e9:07:2a:09:6e:1c:d9:34:bb:04:d5:7d:93:f0:4f:
10:64:7c:42:80:e8:e7:6f:fe:6b:ee:a2:45:a8:4f:
63:86:ba:c9:15:09:fa:b5:d4:67:0b:50:41:85:6a:
ab:d2:a5:8b:ed:f3:8e:c9:9e:ad:97:ba:e8:c6:13:
15:b1:a1:40:ef:cd:6b:3a:24:80:86:72:5f:bf:8f:
25:e4:9c:cf:b4:50:e9:38:aa:69:07:46:40:f9:b3:
a2:b1:8c:e8:f6:1e:47:f4:d2:08:8d:a7:d5:60:13:
7a:87:28:a3:c6:47:97:78:fe:67:b0:d1:65:97:49:
d3:8b:cc:2d:b2:07:d0:fd:cf:90:5e:b3:70:44:94:
93:3b:8e:b3:12:50:03:a4:72:5e:1f:1d:dd:02:1d:
a2:b5:71:f4:3e:67:31:13:dd:dc:08:d0:55:c9:42:
32:7b:68:79:30:3e:ea:b1:86:6d:f9:d1:35:ae:02:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:F4:05:1F:54:37:E7:5C:CA:30:EC:C6:46:8E:DF:E6:2F:96:DC
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.37.0/24
Signature Algorithm: sha256WithRSAEncryption
92:90:92:2b:68:c6:4c:ce:f9:f2:dc:fd:92:74:c8:3e:57:7a:
e2:9f:d7:73:b1:5c:ee:f4:34:f2:78:da:24:1d:62:82:e3:ea:
d3:f0:65:eb:01:76:3a:ba:97:97:cf:34:2c:0f:36:d1:c1:57:
1c:7b:58:90:00:6b:57:ea:f3:71:8f:d8:ca:1a:7d:54:09:d7:
4f:50:98:a7:97:a0:89:6c:e8:f8:e7:7a:4d:15:11:bf:01:8b:
72:7a:fc:48:68:33:97:0b:c9:fb:62:e1:2f:98:1f:c6:2a:ea:
c8:2c:6f:90:ba:4c:5c:60:2f:a4:25:eb:19:a5:c5:b0:4f:8c:
7e:05:cb:8a:1f:2a:37:14:6b:46:9f:c5:62:7b:86:f3:fa:61:
90:d3:57:2b:7a:fd:b6:4a:b6:f2:56:b4:dc:f7:68:98:fb:47:
a1:4d:cd:ad:88:1e:5b:03:47:dc:74:80:e8:9d:a7:4a:dc:11:
46:a6:ea:d5:6d:83:05:31:86:24:dc:06:56:13:83:56:74:32:
b8:df:b2:70:da:c0:8a:d1:0b:b7:d5:ed:e5:e1:7b:da:df:11:
5a:a5:bd:da:96:f6:eb:dc:54:f7:aa:dc:33:87:7d:28:7a:c5:
fe:3b:a4:e7:24:f8:5c:4e:47:48:5e:22:e2:42:27:20:82:ea:
73:51:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net