Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/jVEebkEC2-oHzNPCTqPYuC9aoqE.roa
File: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (raw, json)
Hash identifier: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=
Subject key identifier: 8D:51:1E:6E:41:02:DB:EA:07:CC:D3:C2:4E:A3:D8:B8:2F:5A:A2:A1
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 0194221FCC05EB74935C0C6CC744DF901977
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/jVEebkEC2-oHzNPCTqPYuC9aoqE.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48143
IP address blocks: 91.207.132.0/23 maxlen: 23
91.218.144.0/22 maxlen: 22
91.218.144.0/23 maxlen: 23
91.218.146.0/23 maxlen: 23
91.218.146.0/24 maxlen: 24
91.218.146.0/25 maxlen: 25
91.218.146.128/25 maxlen: 25
194.213.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cc:05:eb:74:93:5c:0c:6c:c7:44:df:90:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d511e6e4102dbea07ccd3c24ea3d8b82f5aa2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:25:39:b9:8b:c9:b5:d6:80:5f:1f:e9:95:
28:29:cb:35:67:52:0e:c1:68:06:33:04:3f:f2:dc:
55:c3:25:5c:62:1f:00:45:df:79:f3:60:aa:60:7d:
08:4d:32:41:a2:36:db:07:7b:a1:2c:77:d2:da:35:
b9:6f:f3:a9:43:86:ab:ea:8d:b5:c7:e4:db:fa:64:
0b:57:5d:ab:14:8a:63:f3:91:08:1c:35:d6:bd:6a:
71:e8:4d:84:e8:ec:71:d0:94:8e:87:33:52:30:dc:
a7:4c:03:24:1e:da:db:98:83:4d:35:86:e9:73:36:
34:8e:c1:ae:8a:d4:6d:73:6b:e2:5e:5d:28:60:d9:
66:d7:c2:fb:7d:45:69:70:7e:e8:f7:be:bc:03:50:
45:e0:ed:69:de:a3:05:4d:32:db:28:a4:6e:fd:23:
9e:64:ec:23:31:0f:51:e9:52:fc:70:5a:a4:ad:d1:
38:91:f8:46:d5:b0:d4:b0:e8:1c:f4:fd:b0:45:33:
0d:f6:d8:4f:35:bc:90:58:9b:da:cc:0c:7f:38:59:
6f:06:80:74:04:d0:6e:e9:6b:08:cc:8b:e2:fa:1b:
30:f6:51:18:c5:25:fb:41:f9:10:72:b5:c6:0e:9b:
85:e7:61:42:42:f8:94:34:9c:3b:97:cc:71:f8:38:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:1E:6E:41:02:DB:EA:07:CC:D3:C2:4E:A3:D8:B8:2F:5A:A2:A1
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/jVEebkEC2-oHzNPCTqPYuC9aoqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.132.0/23
91.218.144.0/22
194.213.110.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:7d:c2:bd:4d:c2:02:a6:3a:64:24:56:6d:aa:ff:79:bf:c0:
ff:13:e9:21:d2:b7:b1:e7:20:da:5a:03:a0:12:72:c4:c8:f4:
6d:c5:36:fa:c7:c4:e6:d1:3f:6c:00:21:31:ae:33:2f:bf:61:
f3:bc:c7:36:7b:83:a0:ce:1e:77:38:47:35:88:08:ae:7e:ad:
d2:d6:b1:cc:ed:07:47:ed:ce:a3:fe:a4:0e:fc:73:b9:f0:0f:
e4:b9:4d:db:3a:1b:4f:94:10:5a:3a:ed:d5:63:e2:ad:40:5e:
11:97:4f:fb:0f:33:9a:7b:31:e1:14:29:ba:e4:ff:a0:b2:c3:
f3:81:7e:91:5b:ce:21:c9:e2:35:bf:6f:66:42:99:d1:c7:74:
a4:62:b0:9f:af:d8:38:60:e6:c6:33:a7:02:6a:db:c6:d5:1d:
90:8d:a8:02:48:15:27:20:b9:f4:b7:cd:0b:3f:ce:6b:18:eb:
55:e9:a6:dc:80:3f:99:94:ab:d2:f2:25:68:d2:93:62:47:3e:
08:03:19:aa:7b:5f:dd:98:d5:a3:b6:70:07:8b:14:d8:9a:ea:
12:c6:47:5a:8f:80:9e:2e:c0:4f:31:48:30:2b:22:c7:98:2e:
01:fc:f6:11:25:09:2d:70:61:13:00:eb:7f:ef:b0:5a:ac:fd:
ae:5b:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net