Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/DaSMaWZYfnj6ceinzYPrOhJJgQA.roa
File: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (raw, json)
Hash identifier: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=
Subject key identifier: 0D:A4:8C:69:66:58:7E:78:FA:71:E8:A7:CD:83:EB:3A:12:49:81:00
Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Certificate serial: 0194206838699475B50C5C84AABCA603F12A
Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/DaSMaWZYfnj6ceinzYPrOhJJgQA.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203015
IP address blocks: 91.213.103.0/24 maxlen: 24
193.23.176.0/24 maxlen: 24
193.23.177.0/24 maxlen: 24
193.23.178.0/24 maxlen: 24
194.50.33.0/24 maxlen: 24
2a0c:82c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:38:69:94:75:b5:0c:5c:84:aa:bc:a6:03:f1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da48c6966587e78fa71e8a7cd83eb3a12498100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:93:28:66:4d:bf:8c:24:37:a2:66:62:ff:
97:61:3d:38:5b:3f:2e:25:4a:21:ac:19:03:18:f4:
38:a3:41:fd:ab:03:c3:ec:bd:08:da:3e:20:e1:38:
38:19:0d:3c:dd:26:13:6f:f5:da:5e:fb:e4:e6:3f:
a2:cc:4f:3b:e1:b3:5a:ca:67:b2:13:ec:a1:d7:62:
63:b2:7b:89:b4:60:c9:43:46:41:86:47:12:21:c5:
32:cd:b2:9c:a7:95:33:8b:40:d5:e7:18:0f:29:86:
b9:32:2c:72:21:8c:0a:3a:c2:f2:73:0d:ea:66:cf:
9e:1a:b0:47:68:5f:31:09:7d:a5:10:b9:da:d0:d4:
48:43:9a:2a:32:06:9b:e8:6b:24:fe:42:60:fa:f1:
7c:e0:80:62:03:62:69:55:a6:95:88:be:35:db:f1:
7c:cf:73:84:44:e2:10:0a:b9:23:c7:46:16:18:3d:
fe:28:86:38:fa:09:ca:96:31:8b:4c:04:61:05:39:
93:69:d9:0c:bc:33:2c:93:1f:00:32:01:9c:de:fd:
9f:7c:35:58:d4:0e:34:5f:ab:1f:20:7b:d5:df:04:
cf:4a:70:74:c2:c8:f0:45:5d:3c:8d:ce:cf:b2:2d:
66:bb:5d:ba:63:68:55:7b:b2:bd:27:75:70:9e:bf:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:8C:69:66:58:7E:78:FA:71:E8:A7:CD:83:EB:3A:12:49:81:00
X509v3 Authority Key Identifier:
keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/DaSMaWZYfnj6ceinzYPrOhJJgQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.103.0/24
193.23.176.0-193.23.178.255
194.50.33.0/24
IPv6:
2a0c:82c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:f7:98:14:a5:26:c1:58:e2:dc:13:e2:aa:c6:75:af:04:ad:
95:2b:5d:f1:80:7d:36:01:b1:c9:20:6a:6d:77:12:4b:1b:38:
ff:dc:05:ad:fd:b6:76:bd:21:b5:d4:6a:ab:bd:9e:d5:4e:ed:
a3:30:10:fe:d9:11:bc:85:2c:5f:d4:47:1b:40:00:bc:69:42:
5a:40:8e:58:ae:6d:be:f1:19:c0:e1:21:b2:f4:59:5c:04:57:
b6:54:2a:52:7c:dc:81:ff:ad:36:38:20:31:a4:33:7b:b0:dc:
26:73:b0:42:d6:49:06:3e:f8:4a:c7:ec:ba:8d:f3:f3:93:c7:
c1:6d:89:1f:74:83:f2:12:f7:6f:d4:e0:d9:60:ae:28:26:02:
a7:b3:a0:6d:15:3b:ca:c3:ad:e9:ab:6a:4c:2d:db:c5:9e:f1:
e5:52:51:18:c7:f5:ed:b9:b2:eb:dd:de:8f:89:c1:fb:ab:27:
0d:bf:ea:bb:96:e0:c2:44:14:2b:c6:2b:d0:19:52:64:91:26:
3a:fa:06:c4:46:c8:93:cf:15:9c:29:aa:24:7c:a3:e9:25:f8:
c6:e4:b3:fb:0d:d9:df:38:2b:f5:a3:78:e1:81:10:f5:30:65:
9c:51:8e:d5:fb:3f:37:e8:dd:fb:68:cf:98:0c:0e:ff:1c:36:
2c:6c:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net