Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/IC8rrkeuZ3TqcdV591D01mfbwHc.roa
File: IC8rrkeuZ3TqcdV591D01mfbwHc.roa (raw, json)
Hash identifier: 7tBT71N8NPjqdd9xF1vrNPm9jbI3kLMX+SeUrC9ethY=
Subject key identifier: 20:2F:2B:AE:47:AE:67:74:EA:71:D5:79:F7:50:F4:D6:67:DB:C0:77
Certificate issuer: /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial: 019423D7C6ADFE6D8AF11636DDD3DB62DB93
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/IC8rrkeuZ3TqcdV591D01mfbwHc.roa
Signing time: Wed 01 Jan 2025 21:48:51 +0000
ROA not before: Wed 01 Jan 2025 21:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198251
IP address blocks: 91.232.240.0/24 maxlen: 24
91.232.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c6:ad:fe:6d:8a:f1:16:36:dd:d3:db:62:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=202f2bae47ae6774ea71d579f750f4d667dbc077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:5c:4b:8a:f5:02:69:2a:53:a8:0f:58:d7:
fc:0d:56:52:ba:68:b7:7c:e7:3d:ce:6b:3a:1b:ae:
67:d1:07:83:b7:94:73:1d:f0:95:dd:e6:b7:62:2b:
3e:cb:8f:b7:21:da:30:af:91:cb:c2:00:f9:73:1e:
bb:44:27:f7:bc:4d:28:5a:7e:65:7c:f2:84:68:06:
a1:a7:25:3a:8a:c5:9d:d7:d2:35:91:ee:f5:1f:6e:
56:93:39:1d:40:be:df:df:27:e5:39:f2:8d:6b:5f:
fa:37:71:bf:18:53:e6:1e:23:e7:0d:ba:02:1f:1e:
1b:e5:a1:fe:43:5f:99:ff:f6:c2:2a:f3:9c:cd:c0:
3c:cd:e9:6e:0f:d9:00:5b:79:7e:bf:53:d8:d1:9e:
2d:e6:2f:94:21:78:80:c9:b1:d2:00:09:21:2f:fc:
b0:9a:9a:b0:0b:b9:ce:fa:3f:56:b9:67:aa:48:50:
d5:b0:3e:a2:7e:e6:f6:d1:35:2b:58:c1:95:28:bf:
99:13:f2:e5:3f:39:0b:3f:c9:bb:a8:15:74:82:19:
8f:4b:e3:46:c1:e2:b8:4e:8f:7b:cf:63:e7:f4:e1:
6b:22:cd:c6:45:a0:d3:51:42:8d:fd:3c:16:f7:ed:
c3:99:85:b4:9c:9c:42:ef:9c:b7:e3:5e:67:2e:76:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2F:2B:AE:47:AE:67:74:EA:71:D5:79:F7:50:F4:D6:67:DB:C0:77
X509v3 Authority Key Identifier:
keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/IC8rrkeuZ3TqcdV591D01mfbwHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.240.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:81:23:4c:13:9c:61:12:e4:7b:71:83:ee:c9:31:a8:4b:be:
f6:7c:55:56:2e:ca:c0:6f:94:a2:59:ce:80:e1:6d:d5:4c:2e:
81:07:79:e7:c1:d8:96:51:4c:ba:b2:96:ca:df:30:04:82:da:
a2:b2:58:77:76:c7:2c:22:64:47:40:aa:f1:fb:86:90:35:3d:
d6:a3:30:ab:06:2c:a1:56:69:f9:4b:12:fe:eb:23:7e:b1:37:
11:1f:7e:1d:00:77:2e:b3:20:bb:48:1d:3e:b0:2a:8d:8f:1b:
c4:71:1e:80:65:88:84:37:de:d9:ab:ed:01:2c:0e:33:be:3b:
d8:0c:81:64:c5:48:9d:98:68:b8:0e:e4:e6:38:63:fa:54:aa:
53:8f:e6:64:c6:cb:3b:d9:bd:2c:3f:a1:8f:b3:fa:75:0d:52:
80:c9:f8:c3:aa:28:69:f8:d7:b5:ad:a9:1e:74:4f:6f:9c:b5:
89:19:bb:f0:eb:74:f5:06:29:c7:6d:b7:9c:85:e8:80:54:fc:
bf:99:e8:83:b7:c6:69:fe:b9:17:b5:02:02:84:31:80:50:76:
8e:60:7a:0f:f6:d4:ff:8c:d1:fc:56:ee:f5:f5:85:9c:24:3d:
e8:d1:9a:b9:d0:1c:2f:5d:f9:cf:d9:50:74:18:29:02:be:2d:
03:8d:31:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net