Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OT6FQSVQU4Oxmj9muqAHj93oQwk.roa
File: OT6FQSVQU4Oxmj9muqAHj93oQwk.roa (raw, json)
Hash identifier: +0qEBU0SCWxrpGaE1Q3E/fAaqDJgTn34HArjY2MB4E4=
Subject key identifier: 39:3E:85:41:25:50:53:83:B1:9A:3F:66:BA:A0:07:8F:DD:E8:43:09
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0196205D10D1B26E26223F0757A512A4073E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OT6FQSVQU4Oxmj9muqAHj93oQwk.roa
Signing time: Thu 10 Apr 2025 15:41:32 +0000
ROA not before: Thu 10 Apr 2025 15:41:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214159
IP address blocks: 89.106.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:5d:10:d1:b2:6e:26:22:3f:07:57:a5:12:a4:07:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 10 15:41:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=393e854125505383b19a3f66baa0078fdde84309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:61:c9:c7:dd:cd:b8:f9:73:af:1b:57:28:
c6:13:30:ee:43:1c:b7:1b:76:1f:02:2c:d9:b5:96:
2a:ae:09:16:78:75:03:d7:c8:7f:39:c5:5c:c4:2c:
4d:24:77:b4:89:85:43:d6:1f:d3:15:34:4a:5b:73:
e3:88:34:08:82:73:d8:38:76:79:c4:f1:04:67:2b:
5c:da:c7:af:ed:72:04:9d:0c:c0:9d:3a:39:ea:51:
df:e7:15:05:d2:a6:c0:e2:4b:ce:a5:75:12:e0:d5:
31:2b:93:c0:df:4a:1e:35:8c:1c:70:63:9d:10:07:
47:6f:21:b4:22:04:a3:57:b9:01:ea:27:17:b6:d4:
f5:49:fd:47:7e:7f:2e:e5:ed:2b:21:7e:d4:df:42:
6c:f7:22:61:a7:8d:30:2d:86:50:72:61:15:9f:28:
6d:8b:0b:12:a2:c6:6f:d6:01:ce:c6:52:1b:69:4c:
1e:f3:ab:a5:c6:a3:a0:b4:04:80:60:bd:e7:81:50:
65:77:b1:23:68:61:12:ef:2c:77:1a:67:db:fa:2d:
bf:8c:66:67:1b:2d:27:37:3f:bc:b3:8f:9b:5b:7d:
95:83:ed:04:82:4f:47:fd:d5:ba:bf:8e:52:d5:dd:
d7:b0:1e:66:8a:6f:89:63:b6:05:b4:40:96:b4:59:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:85:41:25:50:53:83:B1:9A:3F:66:BA:A0:07:8F:DD:E8:43:09
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OT6FQSVQU4Oxmj9muqAHj93oQwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.7.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d6:50:20:64:25:e5:42:c4:aa:54:21:6d:8e:67:6d:cf:14:
4a:d8:28:9b:62:28:55:f3:7a:9b:00:e0:e2:db:e6:64:f4:a6:
b9:06:2a:99:88:f0:bb:e4:41:2f:f6:02:62:61:86:9d:09:62:
01:3b:cd:84:44:ef:3e:94:9b:d7:4b:09:79:04:51:ab:18:ad:
e7:f8:89:af:d8:ae:02:fe:38:51:bd:96:96:96:ff:27:e6:af:
fe:f3:ec:b0:7b:ae:cb:f6:ec:04:a8:6f:b4:19:bf:88:85:a4:
58:c8:d1:1f:34:ab:c4:b6:18:2b:28:87:f6:3e:ad:36:fd:e1:
7a:c1:94:c4:0f:d4:7b:00:85:42:77:52:74:99:ba:5f:89:9f:
3d:d7:ed:8e:51:10:41:b8:dc:96:05:f7:92:6a:d5:e8:90:8f:
26:bf:c3:68:8a:2e:e1:01:4d:31:54:eb:3e:3c:d6:f5:73:8a:
34:92:b2:63:a9:41:d3:e8:bb:6a:d3:bd:3b:fe:dc:e7:de:97:
c8:2a:b2:46:12:fb:d1:a4:34:d1:6c:4a:1d:4f:9e:de:7b:89:
a3:19:f2:38:93:ef:67:03:c2:9c:19:1f:78:36:79:92:83:78:
01:3d:e2:8c:ea:35:51:19:e2:65:1d:82:e2:05:29:5a:41:6d:
de:c1:c5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net