Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3Y1BHZUILEomegZ6I-JOe2EDqas.roa
File: 3Y1BHZUILEomegZ6I-JOe2EDqas.roa (raw, json)
Hash identifier: nyAIzspdbGpqX40B5GkCbeW1pebw48sxfeKC18TMLdE=
Subject key identifier: DD:8D:41:1D:95:08:2C:4A:26:7A:06:7A:23:E2:4E:7B:61:03:A9:AB
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 019424B2BD474DCDEF258E5129BC56569F05
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3Y1BHZUILEomegZ6I-JOe2EDqas.roa
Signing time: Thu 02 Jan 2025 01:48:01 +0000
ROA not before: Thu 02 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43399
IP address blocks: 91.194.226.0/23 maxlen: 24
91.218.132.0/22 maxlen: 24
212.233.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:bd:47:4d:cd:ef:25:8e:51:29:bc:56:56:9f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Jan 2 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd8d411d95082c4a267a067a23e24e7b6103a9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:4e:ad:86:84:5f:9b:ba:1e:6b:23:ca:f5:
9b:35:1d:3f:ac:ac:8d:9b:f4:48:07:e8:42:1d:e4:
d6:73:1d:ce:c8:4d:d9:7e:0d:51:7b:99:9b:30:ce:
4c:87:25:27:ea:5b:cf:7c:60:58:79:66:2b:56:79:
e5:c0:5d:fe:c8:e7:05:42:ff:10:af:b2:d5:3a:95:
93:3b:72:3f:51:cb:89:e0:fd:07:45:fe:f0:9f:8a:
13:5a:a0:ac:5a:c3:60:58:b7:35:5b:b4:21:4d:2a:
81:91:30:5f:53:1f:8c:10:00:30:a3:7f:dd:23:5a:
64:92:d8:37:2b:e1:19:3e:f8:99:ae:2a:5f:6a:7a:
3f:39:ff:04:28:e6:3d:d8:2e:9d:f3:cd:32:93:34:
9b:50:1a:41:f5:d8:f4:43:88:c3:fa:98:0d:fb:50:
98:37:c0:9d:eb:5b:71:b3:be:85:ad:bf:45:13:8c:
8c:ba:da:ea:5d:fa:e2:ea:72:73:f6:15:95:ab:6e:
13:2e:8a:45:d5:49:6a:48:a5:56:e0:51:8d:e0:26:
b0:92:85:ab:42:e7:cf:d9:83:01:f6:a8:98:c3:36:
e6:df:e4:08:eb:a2:63:ec:a0:3a:99:5a:b0:28:24:
81:f8:f6:77:b6:5a:6d:2a:24:76:65:18:e1:b6:f8:
ef:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:41:1D:95:08:2C:4A:26:7A:06:7A:23:E2:4E:7B:61:03:A9:AB
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3Y1BHZUILEomegZ6I-JOe2EDqas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.226.0/23
91.218.132.0/22
212.233.80.0/22
Signature Algorithm: sha256WithRSAEncryption
41:b6:a0:fc:e4:8f:b1:8c:75:b1:f7:ed:ce:86:de:6e:37:82:
b9:75:d2:77:b3:46:e3:80:de:82:ca:cd:44:3f:04:de:0e:76:
17:82:b8:ba:90:4c:c8:4d:a1:ba:ff:fa:30:96:ed:cb:ec:25:
22:03:f5:3b:c4:1a:fe:3e:52:08:4a:38:68:04:6f:84:c2:79:
0b:f3:f5:0d:0c:3c:30:b1:28:7b:2f:5b:d5:43:be:49:52:84:
f8:a3:05:10:89:6a:f7:ba:5c:6d:17:9f:a9:bb:7e:df:fe:a5:
1d:dd:3a:d9:0f:8a:b7:e8:18:89:1e:7d:27:49:31:8c:54:1c:
e7:c4:f9:b4:58:50:24:35:1e:ca:4f:63:ca:70:30:d9:d7:f5:
8c:86:0c:91:70:15:74:80:98:41:01:48:ab:1c:fb:a1:79:01:
37:4b:21:e7:7e:9f:2e:93:0a:51:b3:44:90:43:ef:97:7d:cb:
f2:2d:19:39:82:03:66:2c:b6:4b:9e:dc:18:4d:13:13:57:98:
d5:36:e3:c0:af:ba:5e:30:ad:9f:92:ac:d6:ca:f5:82:92:08:
e4:a3:d6:c5:56:8e:b7:df:93:d8:c9:2c:a2:cc:24:58:07:ee:
91:3b:2d:f0:9a:27:ac:11:d2:5e:0f:ee:cf:70:04:39:4c:9e:
13:9f:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net