Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/ePKBy3s7DCa8LCYPrDuLad8LQds.roa
File: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (raw, json)
Hash identifier: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=
Subject key identifier: 78:F2:81:CB:7B:3B:0C:26:BC:2C:26:0F:AC:3B:8B:69:DF:0B:41:DB
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 01961E02A5778D8F4BAB9CE3FF12E8993983
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/ePKBy3s7DCa8LCYPrDuLad8LQds.roa
Signing time: Thu 10 Apr 2025 04:43:31 +0000
ROA not before: Thu 10 Apr 2025 04:43:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198716
IP address blocks: 91.236.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:02:a5:77:8d:8f:4b:ab:9c:e3:ff:12:e8:99:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Apr 10 04:43:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f281cb7b3b0c26bc2c260fac3b8b69df0b41db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:56:61:6b:23:cb:f3:76:ca:bb:e3:8b:d8:
36:12:4a:50:c4:8b:8a:90:90:04:09:d5:64:80:3d:
ed:47:3f:e0:00:f6:57:30:cd:fd:d9:43:58:6f:9e:
b4:db:b4:a5:96:74:44:ed:f1:f1:86:08:41:ca:7e:
f6:6b:b0:e5:ee:3d:40:e7:69:8b:36:04:43:04:c2:
b7:5c:64:54:96:f6:ac:5b:ad:82:f3:20:1f:0a:c9:
b8:b8:d7:8a:94:79:ad:b6:d7:ec:21:e6:10:54:e3:
bd:a9:fc:41:48:ab:6c:42:bb:f4:1b:e0:1a:d0:34:
0f:b2:e6:c5:05:45:44:1e:00:0d:df:74:00:64:2b:
be:24:cc:9e:01:94:c2:0f:5d:90:eb:e6:bd:33:d3:
64:c0:7e:89:f6:11:d9:30:bd:4e:ec:2d:ad:0d:71:
f1:0e:0f:b5:34:6d:8b:7d:8a:97:ef:76:c5:1a:69:
e9:42:dc:f8:a8:44:68:af:53:cf:80:2b:d9:03:d8:
dc:d0:74:d5:89:4f:5c:6b:a5:26:60:d9:e9:27:c2:
a0:68:be:e2:8e:ae:65:0d:5b:1b:32:fa:5c:a9:ea:
28:3d:0f:7c:ea:03:0d:72:ef:e1:a7:84:e3:fc:55:
f7:79:89:b8:3d:58:87:62:1d:88:7d:c6:fd:dc:46:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:81:CB:7B:3B:0C:26:BC:2C:26:0F:AC:3B:8B:69:DF:0B:41:DB
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/ePKBy3s7DCa8LCYPrDuLad8LQds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.235.0/24
Signature Algorithm: sha256WithRSAEncryption
56:99:05:c8:e6:b0:e4:42:1f:b7:a7:3c:b1:e2:a8:c6:79:b9:
99:c3:c8:c6:2f:e5:40:18:cf:71:f1:7f:00:5e:5a:b0:5f:66:
45:8d:a2:9b:64:c1:80:18:93:af:32:0c:f7:23:28:8f:58:24:
d1:9c:0b:64:8c:29:92:e8:f0:97:c6:b8:2a:31:dc:03:2b:4d:
27:58:72:2c:4d:3f:06:5a:62:e5:41:60:41:db:0d:53:36:8a:
76:b4:cf:9a:d9:57:08:a8:12:ed:ca:6e:3a:8f:e9:aa:7f:a1:
f4:13:98:55:3e:9b:57:a8:4a:44:00:5f:d4:6a:58:3b:15:5d:
8f:87:47:64:0b:91:f0:55:f2:b7:e5:7d:34:87:e1:a6:2f:b0:
c2:7a:a2:53:31:12:06:95:98:eb:63:2b:12:7d:eb:34:27:fd:
9a:ca:a6:7d:96:cc:ff:23:db:e6:03:00:71:08:ae:2d:10:d1:
0c:19:90:c3:a9:1c:41:bf:79:f9:02:0d:a0:8a:dd:f4:81:cf:
40:9d:02:a3:cb:e3:87:e1:36:67:e8:40:0a:2f:e7:40:a7:6e:
8a:51:e9:31:34:0d:bf:b4:c9:bc:65:ce:0a:ad:50:a2:49:ee:
75:73:74:0a:72:32:69:f7:a8:b5:27:90:9b:af:13:e9:df:24:
69:9c:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net