Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa
File: T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa (raw, json)
Hash identifier: iEhvmxCDWE4QgoN0KDVC0nYZp80ZbJ35iTC3GWKtUXU=
Subject key identifier: 4F:E0:A4:E6:CC:71:4C:38:CC:D8:19:EE:01:15:F6:28:4E:2F:31:7A
Certificate issuer: /CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
Certificate serial: 0194221F62E72DE51D8B6B69CCA606FDDAC4
Authority key identifier: 7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa
Signing time: Wed 01 Jan 2025 13:47:49 +0000
ROA not before: Wed 01 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49808
IP address blocks: 91.213.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:62:e7:2d:e5:1d:8b:6b:69:cc:a6:06:fd:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cbba846b6fe0678c9d4b7d7db11e6aeb86e5942
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fe0a4e6cc714c38ccd819ee0115f6284e2f317a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:f7:08:e1:ba:f2:21:c0:53:11:15:2b:6c:
d7:ad:e1:fc:d4:fb:66:90:66:76:49:a3:bc:46:76:
2f:fa:c6:d6:b9:a8:ca:43:41:66:4c:9a:e1:66:78:
91:3d:d9:85:80:af:67:81:41:51:5d:bd:08:d7:67:
22:b3:67:f8:29:fa:89:3e:39:f7:3c:0c:ae:4d:0d:
6b:7f:d6:6b:01:7d:6e:22:22:07:4b:04:d4:5d:23:
ab:e7:eb:93:7f:7f:ff:3c:07:f7:a5:b3:66:7c:7c:
6c:22:82:1e:72:dc:94:91:ec:de:e4:9f:98:c3:91:
de:59:93:c3:5e:d0:c2:73:a1:c7:70:ed:b1:a9:a0:
6e:27:a2:a0:5c:cd:ca:ff:a9:9c:ab:ee:c6:07:3a:
20:31:9a:03:1b:c0:3a:5f:8f:be:24:00:86:8a:59:
a7:66:da:78:50:d0:96:b5:31:df:b6:b1:64:f3:12:
67:76:76:4c:e4:9d:e6:91:8f:88:5d:3c:2b:3e:3d:
dd:f5:7f:49:c6:6e:02:b7:6a:d7:4e:ae:e1:b0:ea:
e2:52:71:a1:78:cb:c9:47:b1:9d:34:2f:5d:1b:1f:
16:0a:f6:1b:40:e0:f0:b6:c2:f5:9b:2c:02:4d:17:
de:97:de:9d:20:ee:11:56:d9:29:ad:fd:4d:7b:f7:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E0:A4:E6:CC:71:4C:38:CC:D8:19:EE:01:15:F6:28:4E:2F:31:7A
X509v3 Authority Key Identifier:
keyid:7C:BB:A8:46:B6:FE:06:78:C9:D4:B7:D7:DB:11:E6:AE:B8:6E:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/T-Ck5sxxTDjM2BnuARX2KE4vMXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/066780-c307-4a70-8d86-b0eb7e31ff46/1/fLuoRrb-BnjJ1LfX2xHmrrhuWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:60:8f:50:98:3d:aa:7e:7d:a7:5b:11:38:5b:cc:0b:76:e3:
99:4c:43:fb:76:9d:4e:8c:00:d9:e0:f3:52:0d:71:49:c3:7c:
73:dc:c2:ee:82:68:96:98:4a:0f:af:25:cc:2c:87:b8:17:43:
33:32:88:e6:78:f6:7c:e8:6c:34:a9:65:ae:3d:4d:de:32:0d:
ce:b7:b1:72:da:87:4a:d6:4c:e6:a6:22:fc:0e:a8:0c:cd:f1:
34:8c:40:d3:18:35:81:6c:c5:3d:31:14:87:cb:4a:aa:71:3a:
e8:39:47:c7:10:21:cd:7e:e8:26:75:81:d7:bf:b0:44:c0:6a:
b0:02:44:37:f3:08:d0:25:72:6b:a4:26:8a:50:e4:cb:2c:be:
ac:38:1d:d4:fc:25:53:8d:24:12:08:6d:01:93:a6:30:b7:2c:
a6:6c:35:1a:f2:5f:3e:16:85:1c:1f:e4:4a:30:ed:83:b9:de:
60:9c:88:63:00:ad:de:24:d2:3e:9b:01:55:95:02:c5:98:63:
fc:79:85:44:6f:c6:a8:f9:cb:0c:55:e5:4b:ef:ec:58:d3:86:
a9:34:7b:cb:50:c4:9f:fc:31:e2:4a:4a:bc:ae:10:1a:26:4d:
97:f5:d1:b0:b7:39:d5:c4:07:ed:0a:4e:5c:c9:ee:1b:2b:28:
18:23:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net