Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/PwojkIEOmSj37jSSPhslbl2EbKQ.roa
File: PwojkIEOmSj37jSSPhslbl2EbKQ.roa (raw, json)
Hash identifier: HUIfJ5iEFX+nTNSqnKmC5u2WypGW56sb2el5pf3iHQI=
Subject key identifier: 3F:0A:23:90:81:0E:99:28:F7:EE:34:92:3E:1B:25:6E:5D:84:6C:A4
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0195470EA5FBB12EE3298E34AE535857A236
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/PwojkIEOmSj37jSSPhslbl2EbKQ.roa
Signing time: Thu 27 Feb 2025 10:58:17 +0000
ROA not before: Thu 27 Feb 2025 10:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213852
IP address blocks: 89.42.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:0e:a5:fb:b1:2e:e3:29:8e:34:ae:53:58:57:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Feb 27 10:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f0a2390810e9928f7ee34923e1b256e5d846ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:3e:5b:25:44:b3:d6:d4:58:01:70:e3:68:
1c:c4:52:78:09:fa:f1:c5:47:d4:6f:92:c7:ec:c0:
10:30:c8:1d:52:3b:9b:7e:df:36:d6:26:90:46:15:
ca:2c:aa:a9:d5:5d:c4:7d:61:2d:77:ae:5f:54:e2:
34:d3:12:ec:cf:1e:b8:04:54:33:d6:16:25:1c:91:
84:62:56:f9:46:d2:35:ed:37:cd:77:ce:92:d0:47:
3d:7e:36:61:23:d2:80:9b:e1:6f:18:91:c2:88:bb:
12:fd:b3:da:b0:4e:3f:a3:de:95:12:f5:45:8e:51:
81:02:7b:a9:52:ab:cc:72:3c:bf:b2:58:54:47:44:
e3:03:e7:c1:17:1e:79:2a:e2:ad:6b:87:e8:24:05:
0c:ed:ab:89:96:4d:8f:2e:70:1a:9a:3a:c6:1f:34:
22:79:05:55:46:2d:eb:e1:6b:b6:8a:1f:64:d4:70:
d9:e5:f4:8c:eb:25:f8:bd:4d:6d:36:88:41:10:4c:
fc:e7:f5:8b:3b:9c:c6:28:9f:57:f4:fc:f1:bc:5a:
67:ee:e3:e7:13:b4:42:fc:13:d2:15:b5:70:8c:b5:
bc:94:98:c3:aa:40:77:7c:d4:a1:57:a9:9e:11:cd:
21:ec:85:6e:aa:82:3a:6c:e6:ad:9f:d6:0e:84:f3:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:23:90:81:0E:99:28:F7:EE:34:92:3E:1B:25:6E:5D:84:6C:A4
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/PwojkIEOmSj37jSSPhslbl2EbKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:8f:50:64:3f:7a:e3:f6:2d:e3:d3:7b:c3:d4:91:91:78:98:
e3:24:6c:45:e0:2f:be:7c:66:1a:c7:35:0b:0a:0c:04:c2:a4:
0d:ab:1f:87:66:13:ef:06:08:13:ce:5d:8f:07:97:f9:2c:cd:
30:81:f5:7c:fd:78:4f:68:88:16:30:71:7a:bc:cc:8e:4c:24:
2c:0d:f7:f5:4f:a1:35:b5:d3:dd:90:df:67:a3:6f:72:1c:37:
2b:3b:fd:4a:66:bc:b1:fe:03:88:f2:fb:f3:13:19:c7:6f:23:
c5:69:17:00:fe:94:5a:2b:3c:3e:2c:5a:b0:99:73:9f:46:fc:
36:0a:b7:6c:9e:90:9c:9d:fe:e0:6b:b2:a0:eb:bb:9f:20:2b:
e5:ee:63:7c:03:7c:5e:da:5f:43:26:d3:08:3c:17:90:18:78:
9e:93:3d:44:60:2c:f6:7e:46:aa:2a:90:f4:47:b9:7e:33:3d:
b5:05:b9:6a:91:e1:80:54:f1:8c:89:9e:13:90:34:22:10:ac:
b4:b6:50:70:bf:f0:13:ed:a0:4a:7d:4d:ac:fe:f2:bd:21:71:
cb:31:5b:03:3b:4f:79:ec:b5:16:ac:34:48:83:20:cc:7d:28:
f5:aa:8b:39:59:fe:17:40:e6:b4:1c:b4:dd:cf:a1:47:ae:0f:
22:7a:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:09 2025 by rpki-client on console.sobornost.net