Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa
File: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (raw, json)
Hash identifier: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=
Subject key identifier: 8A:9E:75:2A:97:0C:75:F3:9C:45:62:D5:7F:61:DB:4F:5F:B2:D5:39
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 0194464F2403F7FF097851E3A1625F1EBE42
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa
Signing time: Wed 08 Jan 2025 14:26:19 +0000
ROA not before: Wed 08 Jan 2025 14:26:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216029
IP address blocks: 91.210.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:4f:24:03:f7:ff:09:78:51:e3:a1:62:5f:1e:be:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 8 14:26:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a9e752a970c75f39c4562d57f61db4f5fb2d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:ae:1c:be:c5:21:8e:00:cc:7e:f5:58:c7:
83:8a:07:53:ae:01:39:5b:e5:6c:70:ba:ae:e8:59:
95:60:db:47:50:2a:aa:77:06:da:d9:4d:94:0f:84:
3f:fe:59:cc:95:2e:79:4b:5f:55:4f:24:b8:80:12:
a3:c2:37:b6:ff:4e:3e:2d:5d:1e:4b:cd:72:8a:59:
f8:38:f9:9a:15:69:e7:69:87:3a:27:e7:16:f6:18:
9b:1c:8c:6b:20:7b:91:c5:02:99:a1:0d:fa:f7:79:
b7:7f:1e:45:61:33:aa:79:38:e3:8a:7f:a3:f1:72:
65:a4:cd:dd:34:64:e9:eb:6c:f0:26:94:5d:03:f1:
3d:36:91:30:b7:41:98:8e:ee:e6:f1:77:a3:34:3a:
07:66:4e:3d:e0:87:25:e7:2d:a1:68:0b:f0:a8:9f:
38:c1:b1:35:d7:16:f2:25:48:3a:93:3a:58:34:d1:
93:8c:14:50:a3:47:06:ac:ea:c1:e3:9c:44:d0:ae:
05:8b:db:2c:e4:bb:3b:a7:0d:c3:5b:65:d7:d6:6f:
e6:74:d5:b7:00:b7:ff:13:e5:06:d9:c9:62:45:c4:
f4:1d:85:2d:80:86:2b:06:f2:bb:62:d4:15:b5:74:
46:59:8d:2a:aa:c0:b5:0e:b1:e4:d9:ca:cf:7c:1d:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9E:75:2A:97:0C:75:F3:9C:45:62:D5:7F:61:DB:4F:5F:B2:D5:39
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
94:8f:5a:04:42:c5:52:e9:5e:8f:d5:b3:ed:9d:7a:97:c7:31:
7b:a1:54:5f:a4:b5:2e:c6:fb:09:1f:9a:c7:5a:93:1f:ee:8a:
68:75:ae:1e:5c:99:75:2a:aa:78:c2:19:ee:12:93:20:ae:fa:
1a:c8:fa:6d:65:cb:58:bb:ef:8a:cd:5d:8d:ec:c1:1c:fc:d9:
5a:70:e0:c9:48:6b:36:50:fe:44:eb:c9:4a:02:04:dc:a3:b2:
70:77:36:7b:dc:c6:2c:d5:d9:5a:86:a1:cd:38:a9:65:94:95:
17:b3:c8:f2:23:9c:b9:cb:7f:0e:f5:d4:da:00:f7:fd:e7:f8:
0d:6c:e7:aa:72:e3:0c:52:c0:c8:ce:c9:6c:c2:18:0f:02:74:
43:4b:a9:7f:35:4e:9b:51:ab:0a:77:b2:ff:b7:6a:49:c5:0f:
e9:22:ac:b6:f0:34:32:52:a6:85:2c:cc:49:d4:ea:7b:d1:a7:
f4:f1:68:cc:14:f5:eb:ed:e1:b7:82:85:1a:7d:13:c3:6b:13:
ef:d5:ee:49:03:b3:74:69:5e:b9:82:fb:0e:24:46:2a:42:ae:
86:a2:0c:35:8f:b9:78:57:52:28:ea:dd:f8:14:03:3b:2c:9f:
5b:62:ea:03:dd:3a:86:df:46:2e:3a:16:58:eb:a8:c7:3f:ae:
8f:68:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net