Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/It_RR5RDy-OVRDGDczZ_wIsJmfg.roa
File: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (raw, json)
Hash identifier: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=
Subject key identifier: 22:DF:D1:47:94:43:CB:E3:95:44:31:83:73:36:7F:C0:8B:09:99:F8
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 0194221F7D97B1D317A85D437EDB3FD5A179
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/It_RR5RDy-OVRDGDczZ_wIsJmfg.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43061
IP address blocks: 91.223.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7d:97:b1:d3:17:a8:5d:43:7e:db:3f:d5:a1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22dfd1479443cbe39544318373367fc08b0999f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:0b:de:16:55:e9:02:56:7c:6a:11:0c:c1:
04:16:e7:a8:7c:41:b3:e6:b4:54:e2:d9:15:11:75:
b9:1b:c6:90:20:27:f8:3a:0f:84:ae:b1:9c:ca:be:
09:8b:fd:87:b1:3a:61:9b:80:31:09:07:6c:89:81:
70:0b:ad:8a:c9:f9:b6:53:1d:2d:91:9d:f4:ac:cd:
f3:bc:3c:c6:91:ea:ac:ce:35:55:6d:65:92:5b:63:
cb:63:f3:e8:87:71:f6:d0:53:c9:16:08:3e:6d:70:
c1:39:bd:7c:20:64:2a:a0:09:bb:6d:c3:2e:a5:73:
e7:26:3e:74:a7:e0:cc:6d:18:4d:73:d4:53:26:67:
f4:8c:1e:b1:af:dc:3d:82:00:19:dd:35:23:a0:00:
b7:e9:fb:b0:cc:01:f6:83:71:d3:23:83:b3:4e:38:
1c:72:f3:8f:dd:17:20:a9:d1:f1:f2:74:db:99:90:
03:86:69:58:5b:b3:10:1d:40:61:ab:af:f3:78:b5:
19:64:be:0c:17:4a:07:f6:d4:26:21:52:88:b9:f3:
89:2f:58:d7:60:4d:cb:1a:a7:b8:c8:dd:1e:cd:39:
c8:ee:be:9a:e6:4f:2c:c0:0b:b6:1f:47:a9:ca:14:
3f:d2:a2:8f:ce:d4:c5:bb:d5:98:ef:72:29:9f:0e:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:D1:47:94:43:CB:E3:95:44:31:83:73:36:7F:C0:8B:09:99:F8
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/It_RR5RDy-OVRDGDczZ_wIsJmfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4f:7b:d5:56:f7:83:3b:4a:45:df:2d:6a:37:f2:e0:08:62:
aa:06:06:b0:59:2c:75:03:64:55:d1:5a:88:9d:26:5d:3c:d8:
61:4c:b9:94:26:2c:bd:93:e0:f3:59:26:13:3b:70:89:de:17:
85:4f:0b:1e:22:4d:e7:9e:cb:ed:fe:92:2a:45:50:bd:9e:cc:
2b:18:49:c6:ef:06:4f:78:95:f0:8f:9f:23:b8:93:b2:7e:37:
5a:eb:d6:59:07:30:68:8c:7b:3b:ba:dd:01:db:ea:4d:5f:ab:
4c:0b:65:8d:7c:11:5d:17:23:b3:ae:93:87:7a:6b:17:bd:9f:
ab:2d:52:06:65:ed:be:71:f4:b8:1d:79:82:bb:5c:58:b3:0a:
72:be:fb:35:a2:75:a8:76:eb:ba:91:a2:44:5c:da:f4:38:e8:
a6:d6:26:bd:a9:81:d0:88:07:6f:eb:60:80:0f:5c:9d:d0:0a:
6d:a8:d9:c2:ea:f0:c4:2b:ce:7c:7d:58:0f:25:7f:8e:bf:9a:
a4:11:c5:e8:c8:17:3f:ad:09:71:4c:66:b4:ba:fe:c0:36:a0:
8a:0e:b0:61:0e:b8:ab:b3:02:6a:e2:7c:ae:f5:84:71:b3:6f:
44:fe:2a:13:dd:7a:90:a1:97:07:46:f1:85:79:be:3a:17:88:
ba:05:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net