Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa
File: 1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa (raw, json)
Hash identifier: yS33rGnHpW6HJXuqZSuiPg2Imum1UpLaSAJvk6KL/qY=
Subject key identifier: F8:91:E0:B7:E6:50:53:55:14:DA:96:25:70:35:D6:0A:14:3F:B6:B3
Certificate issuer: /CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Certificate serial: 0194228D82BAB245EE3C6E3B06407904281F
Authority key identifier: CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa
Signing time: Wed 01 Jan 2025 15:48:06 +0000
ROA not before: Wed 01 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34336
IP address blocks: 91.209.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:82:ba:b2:45:ee:3c:6e:3b:06:40:79:04:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde1cfecc92b104fcfa9efec6a58f0c197901652
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f891e0b7e650535514da96257035d60a143fb6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:4f:b0:ef:bf:74:95:98:08:fe:9d:af:75:
70:0a:77:e4:14:d1:85:f5:12:5f:f7:b3:44:0f:bc:
34:18:04:02:96:3e:cc:61:02:a3:2a:61:3f:cc:97:
9a:fe:95:cc:d2:55:1e:c2:4b:6a:20:56:bb:15:f3:
b6:68:1d:69:9e:7d:91:3e:35:23:f7:26:25:a4:6e:
ad:c5:29:f2:05:9f:c2:0b:7d:2f:bf:99:79:e8:94:
23:f5:42:d3:cd:f3:89:c7:fc:88:e8:b3:45:a0:56:
b8:3d:f4:f2:89:35:bb:a0:93:9c:64:fc:7b:52:4d:
e8:ec:63:ea:d8:b6:50:35:5b:ea:92:45:14:62:a7:
58:be:3d:4f:e2:2e:99:e3:51:17:a1:09:fd:27:c0:
da:00:da:19:35:65:0c:8b:79:5e:55:f5:87:7b:fe:
1b:fb:4a:e5:83:97:07:f9:4f:df:50:b0:13:df:4b:
62:32:f5:94:57:76:3d:81:a2:9b:d1:9c:8f:4a:fa:
2d:6e:89:ee:af:e4:e2:2e:10:b6:ff:b2:17:38:a6:
e2:4f:f1:a6:4d:9a:f5:fc:6c:79:f6:9b:69:22:1e:
9f:d7:f8:98:55:d3:30:7d:4b:dc:98:92:62:3c:95:
d7:0f:6c:dd:af:7d:c6:63:ab:b0:5f:70:1b:ef:80:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:E0:B7:E6:50:53:55:14:DA:96:25:70:35:D6:0A:14:3F:B6:B3
X509v3 Authority Key Identifier:
keyid:CD:E1:CF:EC:C9:2B:10:4F:CF:A9:EF:EC:6A:58:F0:C1:97:90:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeHP7MkrEE_Pqe_saljwwZeQFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/1-JHgt-ZQU1UU2pYlcDXWChQ_trM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c5cbb4-bd8b-4885-8466-8745de2f4321/1/zeHP7MkrEE_Pqe_saljwwZeQFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.76.0/24
Signature Algorithm: sha256WithRSAEncryption
09:23:22:01:3d:d5:3c:b7:05:26:86:3b:03:6c:a4:8e:e8:ef:
1a:71:0f:9f:81:58:47:5e:26:33:54:71:ee:b4:28:84:fd:8a:
0f:d1:4b:df:82:c4:45:d6:3b:90:ca:7a:ea:6e:3e:d8:d2:6e:
d0:9f:62:26:34:d3:a4:12:d1:f0:e2:89:10:d6:79:fc:f4:25:
0e:39:4e:58:52:68:c3:19:dc:b8:9f:e1:ca:5e:bf:e7:de:d9:
4c:b8:69:11:16:0b:76:3a:8a:24:c6:51:16:17:4c:a8:78:95:
02:01:a4:2e:18:fe:3a:63:03:c1:d1:1c:1d:2b:c9:4e:8b:63:
8c:a1:a4:02:1b:c6:f8:66:03:10:1c:ef:d1:ff:d7:e6:16:45:
4e:75:eb:ca:83:8e:06:c4:12:56:4d:30:9e:b3:af:9a:2f:60:
7e:4a:51:56:a7:6d:a2:ba:d0:22:25:18:f9:d3:fd:d2:c1:10:
32:4a:be:53:62:c8:2d:ca:68:d1:ef:78:ff:c4:13:6d:3a:45:
1e:2c:6c:27:d8:87:32:64:62:ad:45:fb:a5:4e:80:fc:4d:ce:
0e:e7:39:64:30:53:ae:60:8a:4a:34:8d:57:3e:ff:02:d5:6e:
b8:61:77:c2:a3:d5:8e:11:8a:4d:33:21:16:cf:65:ba:8f:98:
92:ec:69:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net