Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa
File: 8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa (raw, json)
Hash identifier: lfgDrB7NQSrt5KaQ0P2PrRAn8atRZykuTXvKRd7fgJo=
Subject key identifier: F1:F3:30:EC:F2:04:99:CB:99:E1:24:36:4E:8C:A8:06:90:E3:A0:95
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 01942444CDF70F3F47B053DFACBC4B487A57
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41012
IP address blocks: 91.103.32.0/23 maxlen: 23
94.119.64.0/18 maxlen: 18
94.119.128.0/18 maxlen: 18
94.119.255.0/24 maxlen: 24
194.42.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cd:f7:0f:3f:47:b0:53:df:ac:bc:4b:48:7a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1f330ecf20499cb99e124364e8ca80690e3a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:b1:e2:f5:74:9f:6b:de:2d:f3:ea:66:54:
5e:e7:dd:ee:fa:82:78:11:e0:c4:d1:03:64:0a:88:
67:23:4a:0f:6d:a8:25:cb:10:64:8e:ae:a0:0c:5c:
53:a9:da:3c:7c:18:15:6a:ba:dc:6a:d8:f1:16:bb:
64:42:b6:98:21:08:86:a5:8f:36:ff:15:31:84:39:
06:a8:31:6c:df:da:7e:3d:2f:50:c7:d1:6e:d4:22:
fc:61:ad:0e:db:8a:57:4e:95:bb:01:97:48:0b:73:
dd:44:cb:53:3c:3c:35:71:f3:2d:e1:7b:05:60:7d:
c9:d0:88:ea:a4:be:9b:b2:0d:87:20:fe:e6:15:53:
9c:f8:5a:b7:9e:21:39:8e:d4:93:d7:22:7d:c8:71:
f7:9d:bd:50:05:58:d0:ee:6f:cb:44:eb:9b:90:15:
9a:d3:37:b2:b9:0e:15:11:78:fa:fb:89:2a:96:96:
01:58:2f:84:d9:c6:99:aa:ad:1c:eb:de:b8:13:48:
b5:6d:75:1b:9b:c2:18:1d:e5:83:b6:89:af:b5:5f:
e1:5f:98:c1:e4:24:d0:f1:3e:c4:eb:f5:94:a6:1a:
39:03:a8:98:9e:37:a1:33:e3:2d:5d:19:99:d9:4f:
ba:4d:56:d8:1c:9d:7a:66:37:a3:28:60:09:a5:c5:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:30:EC:F2:04:99:CB:99:E1:24:36:4E:8C:A8:06:90:E3:A0:95
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.32.0/23
94.119.64.0-94.119.191.255
94.119.255.0/24
194.42.124.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:bc:9b:0d:f0:bc:0e:45:d5:b3:bc:d3:70:96:7f:94:05:cd:
94:6e:ba:b5:11:ae:2d:a6:96:fc:dd:66:fc:7c:35:be:0b:b3:
95:d7:c5:48:1a:44:a0:fa:ed:e9:56:fd:17:e6:31:04:b5:e4:
a6:3d:fe:1c:00:cb:51:e8:c0:b7:d4:3b:1e:54:ea:fd:e4:f6:
f4:89:fe:69:d7:da:7b:f2:03:53:92:41:70:01:f5:03:76:31:
e8:7a:78:89:74:3a:96:a1:1e:a6:ca:4e:2f:21:36:b9:f6:ae:
3d:a2:4c:a3:c0:56:e2:b1:29:22:7d:12:fa:a9:13:31:cf:61:
1a:58:84:e4:cb:a2:17:01:6c:56:be:7d:44:6e:02:8f:fd:5b:
92:78:d4:24:4e:c0:fc:9d:67:7f:1a:a7:48:41:e3:3b:21:5d:
78:61:8b:2f:f7:e2:e9:8a:c2:60:7a:bd:8a:6c:5f:6b:5d:15:
14:20:4b:47:2b:f9:ba:81:72:44:c0:04:a3:b8:80:3c:f7:1a:
71:27:dc:f8:81:18:c7:da:02:8b:c4:5c:82:e6:a1:77:df:1f:
f5:1e:e5:e3:5c:b2:94:8a:c4:1b:8a:26:83:53:1b:21:7b:32:
a4:11:84:34:3e:5e:1e:4b:20:83:dd:2d:33:5f:60:cd:fa:12:
50:46:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net