Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AqRV6_tKe6kacX0N25TfBYtcJSY.roa
File: AqRV6_tKe6kacX0N25TfBYtcJSY.roa (raw, json)
Hash identifier: 9uAHotcHfSxBrF0BWIeJ/AMLwsEkNguARX+IYvJPb0M=
Subject key identifier: 02:A4:55:EB:FB:4A:7B:A9:1A:71:7D:0D:DB:94:DF:05:8B:5C:25:26
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019620CDAD2C478CC88A29961656E808522E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AqRV6_tKe6kacX0N25TfBYtcJSY.roa
Signing time: Thu 10 Apr 2025 17:44:32 +0000
ROA not before: Thu 10 Apr 2025 17:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19138
IP address blocks: 89.106.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:cd:ad:2c:47:8c:c8:8a:29:96:16:56:e8:08:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 17:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a455ebfb4a7ba91a717d0ddb94df058b5c2526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:e7:e0:6d:c7:ca:69:8d:b8:92:02:d4:21:
be:40:94:16:b0:ad:f5:21:76:ba:1b:21:02:de:1f:
d7:8d:9d:a8:c5:3b:57:8f:43:ff:20:01:04:e6:f9:
70:1d:59:44:dd:73:fc:46:43:b0:79:9b:56:56:b8:
e7:f3:1b:20:54:5d:19:39:9e:49:50:b1:0b:81:99:
c6:f2:0c:75:34:71:42:22:c6:b8:ac:45:88:89:45:
5b:45:0f:de:b6:41:aa:7f:54:59:f1:1e:34:4a:f0:
10:82:94:aa:64:a9:39:42:04:95:81:1e:ad:c9:c7:
76:06:23:de:e3:3c:09:b6:a9:57:88:f3:01:ca:36:
9c:d8:9c:ae:09:85:0a:4c:90:a9:f0:a8:76:df:21:
e3:98:c7:97:b8:76:4b:cf:c8:f3:28:28:a6:9c:de:
6d:4b:af:8d:66:28:61:20:c7:7d:6a:a5:7f:c2:50:
7a:62:85:6f:73:7e:3c:d2:57:b9:b3:f5:62:85:5e:
fd:af:5f:46:5d:44:0f:ed:95:5e:a5:3f:2c:22:69:
f8:dd:26:da:df:b8:b9:b2:2d:83:32:6a:3d:53:0d:
60:a8:5c:c9:91:07:13:f0:67:a6:38:b9:11:f9:89:
75:e3:bb:a2:ac:33:67:01:d6:ca:bc:59:8d:b5:c1:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A4:55:EB:FB:4A:7B:A9:1A:71:7D:0D:DB:94:DF:05:8B:5C:25:26
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AqRV6_tKe6kacX0N25TfBYtcJSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.1.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fd:15:b0:29:de:ef:8e:76:89:2e:5f:69:22:2d:0d:ec:e3:
e2:4a:4b:81:1e:0e:ed:c1:af:e6:e5:22:4b:67:15:2d:5b:16:
c0:43:47:4a:25:88:4f:27:3c:46:0e:27:c8:9b:e2:05:69:25:
19:eb:94:71:a6:22:54:2f:b2:10:ff:63:16:63:26:3d:66:81:
8f:6e:cf:49:88:e6:f5:8e:d0:18:9d:92:a9:e8:84:65:1b:ff:
a1:6a:8a:8b:4c:45:08:71:a3:e4:a7:71:62:55:47:73:33:f1:
f0:9d:4f:5f:aa:e6:cf:44:53:b8:1a:77:01:e9:1d:64:ea:e9:
bd:bd:90:2c:8f:01:f1:ba:7c:0e:a5:db:dc:be:ae:f6:be:4e:
1b:07:f9:d3:d3:5a:e2:ed:8c:94:8b:b5:a1:57:e6:df:8b:44:
71:62:1f:24:87:7b:b8:5d:37:d9:37:5d:f5:0f:6f:ec:db:b2:
19:23:11:df:76:32:07:d1:29:30:5d:1f:61:07:ab:16:db:fb:
2d:f2:0d:65:03:dc:2f:67:bc:8b:42:f8:27:5f:85:0e:21:9a:
ba:f7:f1:4d:b1:d2:a3:56:36:d5:70:5d:8e:0b:43:09:7c:5c:
39:33:ef:44:96:18:1e:c2:7b:a0:ab:54:6b:c3:1e:28:69:f1:
18:1b:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net