Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/8ltVewMht9tkkoh6ikhHpmbvP28.roa
File: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (raw, json)
Hash identifier: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=
Subject key identifier: F2:5B:55:7B:03:21:B7:DB:64:92:88:7A:8A:48:47:A6:66:EF:3F:6F
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 01941FFAA2F1EFFC1F3221E51A0C322BE121
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/8ltVewMht9tkkoh6ikhHpmbvP28.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51394
IP address blocks: 91.239.244.0/22 maxlen: 22
178.212.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:f1:ef:fc:1f:32:21:e5:1a:0c:32:2b:e1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f25b557b0321b7db6492887a8a4847a666ef3f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:65:60:d2:79:d2:78:b0:18:98:31:2a:c5:
56:d9:00:55:af:2f:88:52:10:d0:f9:1c:5f:3b:b1:
a1:b9:b5:55:68:dc:06:d7:4a:9c:a4:be:e2:d5:82:
80:68:69:30:94:88:e6:9e:9f:99:8f:68:b9:dc:c7:
93:e9:19:a2:d2:b0:ff:29:30:15:fd:21:16:b3:59:
a3:0e:52:27:1c:09:d6:fd:89:07:7a:44:14:25:e0:
b6:26:3c:38:ff:44:34:28:75:ac:6f:2e:f9:49:6f:
e0:ea:15:e5:05:9f:2b:86:bc:35:74:a6:85:b8:55:
7e:c2:f8:fe:a1:fb:a8:27:0f:65:77:c7:87:55:df:
c1:18:76:1c:a3:e2:f5:7b:56:ac:66:ab:d8:04:81:
6f:87:7f:5e:c2:5b:f3:a5:de:41:b1:13:54:82:82:
a8:93:33:e7:3d:bd:a0:f4:c7:6f:16:e8:41:2b:fa:
b9:5c:dd:20:e8:87:c5:fd:b6:20:41:cf:63:47:82:
5b:34:4e:06:b2:2b:ec:7c:8f:66:a0:6e:6f:54:00:
50:af:e3:31:8b:38:a3:31:b3:4b:9c:92:cb:d9:5a:
89:45:b2:0a:50:3c:53:8a:e0:0e:cd:ce:2d:f2:72:
48:de:e7:11:87:6f:bd:52:25:18:08:d3:dd:91:ea:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:55:7B:03:21:B7:DB:64:92:88:7A:8A:48:47:A6:66:EF:3F:6F
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/8ltVewMht9tkkoh6ikhHpmbvP28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.244.0/22
178.212.120.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:af:82:ef:19:9c:4f:bc:d5:9e:4a:42:73:a1:38:0e:a7:2b:
9e:d7:2d:54:a8:08:30:07:b9:4e:0e:25:60:3f:e0:ef:df:ae:
ec:bd:ae:ca:ca:cd:da:2e:56:e6:0c:f9:d7:7d:20:96:2a:4e:
bb:71:97:6d:64:7a:16:17:87:d7:88:ed:e2:8e:c1:22:11:f0:
e8:fa:af:30:a4:7d:56:c5:db:0a:9b:66:ea:77:79:8f:42:6d:
55:16:f6:d3:1e:f5:24:d0:1b:df:f4:37:e0:89:1e:24:67:7a:
82:10:06:7c:63:dd:05:8f:b7:e3:fe:36:ee:80:69:a2:0b:73:
db:a6:1e:d2:b9:41:46:50:fa:db:fd:58:7f:2b:e2:ff:66:f2:
5a:9c:5c:e2:c7:3a:b9:b9:2b:71:ad:a4:33:44:51:98:6d:93:
0c:fa:cc:c0:a3:fd:a8:8b:9c:33:f6:48:5d:d2:b8:31:2a:14:
19:a2:6e:69:40:fb:70:76:f5:41:8e:29:3a:c8:f6:86:7b:fd:
6c:af:1d:3f:f5:99:8b:ce:a4:3d:e8:9b:29:ff:fe:c3:e0:08:
ae:8c:64:c0:8f:82:87:b5:ad:a8:2d:45:c1:19:96:9a:ec:25:
1b:d6:45:04:c7:60:a2:fd:d1:0b:2d:d0:17:87:a3:8b:1b:cd:
a6:d1:9a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net