Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/RTwQR1ykYTKakqX6NVLOhlDwE5I.roa
File: RTwQR1ykYTKakqX6NVLOhlDwE5I.roa (raw, json)
Hash identifier: Jrsg1gjFXZa7DJuqsv8nOncE0Sxj7kuiE9UZyv5+Xzs=
Subject key identifier: 45:3C:10:47:5C:A4:61:32:9A:92:A5:FA:35:52:CE:86:50:F0:13:92
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 0194228D96A962E626E74237C7C249FE9BE9
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/RTwQR1ykYTKakqX6NVLOhlDwE5I.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48943
IP address blocks: 91.211.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:96:a9:62:e6:26:e7:42:37:c7:c2:49:fe:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=453c10475ca461329a92a5fa3552ce8650f01392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:ed:03:ae:70:65:73:4d:52:3c:80:d6:dd:
4f:4a:55:cf:e6:37:4c:9f:54:89:9e:b7:da:9d:3a:
70:de:1e:d3:d5:84:d3:86:84:92:f9:6d:19:9e:47:
8e:7f:16:5d:3e:72:73:61:c0:62:06:68:0e:82:d4:
9a:af:0c:00:08:78:12:16:63:3b:57:26:fa:18:50:
bd:33:39:99:af:ac:15:88:36:ce:f7:e4:f9:82:e2:
9a:fa:38:1f:b1:de:b4:6b:80:f3:67:65:e9:78:03:
8b:f8:25:86:d2:92:bd:95:d1:dd:92:31:07:ba:ca:
72:3a:fa:fa:0d:f1:f7:59:26:9a:ff:29:89:4a:d7:
6d:c9:9f:7f:ba:62:9c:6a:5d:f3:12:e6:92:03:e7:
c0:59:77:f7:ae:72:ad:84:1b:d4:26:86:59:bd:5f:
b4:c0:90:c4:3d:fa:02:5b:eb:8d:61:26:54:88:6b:
3a:f4:09:19:03:18:4f:48:4b:4d:fe:33:35:9c:1c:
d1:bb:24:56:48:ad:1d:53:42:13:87:d6:14:29:98:
22:cb:ba:92:c5:61:c8:57:a3:d3:6c:01:62:16:e8:
18:70:7a:14:14:f3:59:31:41:04:52:37:9d:a3:f7:
d4:b5:fb:d0:33:5c:99:98:60:0b:70:a2:49:8e:84:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3C:10:47:5C:A4:61:32:9A:92:A5:FA:35:52:CE:86:50:F0:13:92
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/RTwQR1ykYTKakqX6NVLOhlDwE5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.32.0/22
Signature Algorithm: sha256WithRSAEncryption
74:82:5e:59:7f:74:72:41:b2:48:74:14:b0:18:94:d8:19:bd:
c3:43:05:69:d6:2a:79:5f:c6:88:0e:f5:50:0b:d7:18:21:2d:
85:b6:21:ec:b3:1a:c8:6f:7e:78:e6:77:83:59:bc:ca:42:89:
cf:68:d8:a2:38:e3:4a:c7:6b:ef:66:ce:e0:4c:c9:75:1e:87:
b4:90:84:90:49:32:91:cc:cc:6d:86:5e:ef:f1:7e:ee:0f:18:
c1:ec:e7:bf:17:6f:a4:68:56:73:97:f2:da:1c:fa:f8:4c:9a:
3c:bd:0c:c5:bf:18:6e:8b:15:85:4a:3f:5e:d4:9c:98:c6:26:
d9:77:56:06:90:27:0c:ec:6d:ff:c8:56:64:c2:61:71:6c:34:
76:a9:18:a5:93:0c:1d:8e:72:ce:c5:b6:d3:c2:92:c9:f0:5b:
71:f9:c5:36:76:b7:02:61:22:73:3d:7f:41:68:47:e6:ec:24:
f9:b6:74:a4:b1:a7:ea:fb:7d:ec:64:09:2d:d8:6f:71:46:09:
82:46:a7:c5:68:8e:c0:06:83:57:79:25:f6:22:ab:fe:c5:70:
11:78:40:5f:a7:d8:9a:8c:d5:dd:a2:9f:fd:b7:49:77:ab:48:
72:a3:c2:34:d3:2d:1f:ae:89:fe:46:cb:3f:36:ed:51:26:d0:
b9:ab:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:48 2025 by rpki-client on console.sobornost.net