Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa
File: K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa (raw, json)
Hash identifier: HOWSSaTxDqgiwOmso54SMRF/DSbrMg9/uUoQhZYJC/c=
Subject key identifier: 2B:ED:FD:1E:AC:B4:00:50:D9:63:F7:31:6D:4B:12:CE:54:C6:A5:B7
Certificate issuer: /CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Certificate serial: 0194274865B69448D2002E0C2BAC5083AD65
Authority key identifier: 32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56644
IP address blocks: 91.226.24.0/24 maxlen: 24
91.226.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:65:b6:94:48:d2:00:2e:0c:2b:ac:50:83:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=328d4d74f2415a357fe74dbe040f0154f1dacf7c
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bedfd1eacb40050d963f7316d4b12ce54c6a5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:ea:a5:ba:a4:e5:09:92:8a:0c:4a:3d:54:
ed:e8:77:7b:a4:b3:8a:c2:73:01:b4:86:c7:94:c1:
6a:aa:9e:09:23:55:84:45:3d:13:7e:4d:24:19:b4:
e9:48:22:26:ac:e4:63:e8:43:ec:e8:6f:97:3d:9b:
7d:ad:53:68:20:d0:27:a3:8d:84:b3:44:41:9d:6f:
6b:54:4c:9b:98:3c:c8:bc:42:77:5d:7d:de:67:a2:
d1:84:00:b0:58:01:da:a2:30:8a:8d:97:70:82:6b:
1d:56:b7:5d:33:80:e5:14:b1:81:cb:00:72:ee:a1:
37:5c:58:26:14:ba:e2:6d:69:4a:88:b8:6c:d4:9d:
97:c7:23:ce:98:a7:82:c2:d1:f0:ed:a3:2e:e1:f2:
ff:ef:1b:40:f6:14:38:c4:72:e7:bd:41:5b:68:43:
cd:2f:be:52:96:f8:50:ac:70:83:16:bb:e5:1a:47:
5a:6f:ed:5f:4e:9b:22:2e:f3:5b:57:60:20:4c:78:
0f:3b:5f:5a:96:2f:3e:19:ff:38:fc:31:ad:6d:87:
e4:99:9c:b2:ec:d1:9e:e6:ac:e3:1e:b2:cd:6c:3d:
b5:82:35:1e:ca:7e:15:38:4f:9c:5d:d0:1f:36:cf:
e0:d8:15:48:fb:69:60:67:87:40:f7:f6:1b:5a:6c:
34:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:FD:1E:AC:B4:00:50:D9:63:F7:31:6D:4B:12:CE:54:C6:A5:B7
X509v3 Authority Key Identifier:
keyid:32:8D:4D:74:F2:41:5A:35:7F:E7:4D:BE:04:0F:01:54:F1:DA:CF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mo1NdPJBWjV_502-BA8BVPHaz3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/K-39Hqy0AFDZY_cxbUsSzlTGpbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e738c9-c821-434e-a26e-8a84bfd8f099/1/Mo1NdPJBWjV_502-BA8BVPHaz3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.24.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:41:4d:9e:f9:2a:59:7a:45:18:78:13:9a:19:50:06:61:8f:
0b:20:7e:dd:83:dc:3a:5d:3d:d4:c1:0f:90:c0:e3:99:55:96:
cc:10:88:aa:0c:25:fc:ff:df:b1:74:66:06:a6:d3:19:34:8a:
c7:23:54:6f:8c:24:84:fd:4e:ff:cb:7a:86:af:4c:36:4c:2b:
88:cb:80:02:8f:eb:7b:2a:cc:89:56:c9:dc:b6:6e:98:bd:4e:
a7:a1:8f:8d:aa:0b:bc:ee:2b:20:7c:ff:f9:cc:a2:09:78:8c:
72:fd:e8:f4:dd:2a:9b:78:6e:6b:c5:33:62:f1:8b:b5:31:3a:
a8:82:c3:f1:97:de:cb:fc:02:d0:77:15:a1:d1:07:9f:c1:9a:
6b:11:15:ea:0f:0d:3a:89:ac:76:82:f3:2a:2c:45:0c:01:b7:
5c:6f:43:f2:c4:e5:f1:75:49:c0:4b:c5:91:27:93:4d:d1:e5:
51:c7:27:5e:d5:f2:81:27:ba:68:f2:8e:be:bb:58:ec:0b:bd:
f3:97:b4:6b:e0:5e:8d:69:01:86:3a:b3:ba:ef:88:61:90:aa:
48:98:bb:c3:5d:e2:41:30:4f:70:ed:17:16:89:91:a7:f5:68:
fa:e6:e8:4f:10:b7:44:1d:bc:56:92:78:2d:d5:21:82:bd:46:
a0:5f:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net