Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/dPZsSvYtCvyZQ4wUL4AcexgoZFc.roa
File: dPZsSvYtCvyZQ4wUL4AcexgoZFc.roa (raw, json)
Hash identifier: 2RcCp227RfOhnbvJ4SKdXvicp2GHuqovrMQjshuTQr8=
Subject key identifier: 74:F6:6C:4A:F6:2D:0A:FC:99:43:8C:14:2F:80:1C:7B:18:28:64:57
Certificate issuer: /CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Certificate serial: 019424448CCBE2078F234EEF34EB0BF5FA47
Authority key identifier: 7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/dPZsSvYtCvyZQ4wUL4AcexgoZFc.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9110
IP address blocks: 91.142.129.0/24 maxlen: 24
212.233.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8c:cb:e2:07:8f:23:4e:ef:34:eb:0b:f5:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7abe11843dbe80340b2460fc160ec6b9b88f222a
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f66c4af62d0afc99438c142f801c7b18286457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:04:b4:cc:40:c7:ff:69:be:1d:95:8f:41:
b6:b3:90:a6:bd:3f:ca:a6:b2:7c:d9:16:31:44:f8:
cf:bf:b1:08:36:e6:12:b2:aa:62:24:58:f2:68:c6:
e3:66:ef:77:d7:2b:59:1d:0c:4d:63:fb:9d:32:79:
aa:c3:37:ef:63:35:02:65:a5:d7:8f:e5:ee:00:e0:
9a:bc:62:ba:6a:5e:22:17:bf:dc:a6:97:7f:6f:b7:
e4:14:f8:e8:7f:46:62:11:27:f1:1b:22:44:c7:a1:
06:ae:fb:9e:d5:fc:37:89:52:9b:4b:38:d8:98:b9:
59:87:66:2d:7b:fa:09:b0:95:5e:00:39:bc:32:d2:
d5:be:15:77:f2:38:94:fb:3e:9e:ed:4b:19:a0:46:
1e:60:91:e9:28:9a:23:28:3a:65:31:6a:e3:7d:68:
60:ed:14:59:0c:12:f2:3d:7a:03:68:8a:6d:30:70:
d3:f4:23:01:b5:00:fd:6c:35:2c:32:c4:97:4f:6e:
d4:21:d5:27:41:f0:1e:6a:18:32:58:59:71:b5:e7:
de:5b:86:c4:c5:5b:17:ac:ca:53:bf:79:9d:07:0a:
03:d8:0c:21:0d:52:5e:78:e1:b2:c2:26:94:90:62:
a8:d6:74:8b:14:dc:98:8f:b4:83:72:26:43:8f:20:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:6C:4A:F6:2D:0A:FC:99:43:8C:14:2F:80:1C:7B:18:28:64:57
X509v3 Authority Key Identifier:
keyid:7A:BE:11:84:3D:BE:80:34:0B:24:60:FC:16:0E:C6:B9:B8:8F:22:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/er4RhD2-gDQLJGD8Fg7GubiPIio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/dPZsSvYtCvyZQ4wUL4AcexgoZFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/623561-0715-4277-a0be-3411c6fb4fca/1/er4RhD2-gDQLJGD8Fg7GubiPIio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.129.0/24
212.233.68.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ea:0c:2e:5c:95:9c:10:4d:18:5d:2b:02:0e:c6:62:53:b6:
b2:36:43:18:df:7e:59:ad:af:d2:9b:3e:28:45:70:57:81:e6:
e6:72:15:e0:ed:48:5a:09:a3:95:25:04:f5:91:1b:d8:80:7c:
e7:e7:11:18:80:16:5a:cb:6b:57:0f:ea:ab:fe:fe:00:e2:56:
a9:0c:fb:cc:fd:d1:c9:70:ab:d8:51:4a:65:e8:81:ad:18:a0:
c8:8f:3e:b3:8c:8c:9e:5a:c6:8b:3c:05:b8:bb:da:eb:01:bd:
36:69:1f:bf:59:46:26:cd:e8:34:62:2b:0f:83:2f:7e:c5:00:
e7:c5:e0:db:a4:56:7f:f4:35:79:30:8a:89:6b:f4:07:19:b3:
42:5f:fe:8a:c0:5b:45:8c:e8:83:41:5f:42:4f:a0:c7:9f:c0:
c4:18:b1:90:ee:34:2c:f1:cb:e8:24:76:a3:b1:b0:6b:83:cf:
e8:d8:ec:0d:73:96:ed:5e:43:fa:e0:26:f9:8b:79:b8:b1:db:
4d:ad:5f:8f:5d:03:35:bd:75:42:96:b8:d1:12:3b:0a:06:e6:
12:51:59:99:47:12:65:76:af:aa:6c:f2:22:e9:d1:b1:c0:2d:
6b:32:e3:b0:58:ee:be:9b:c0:c3:88:7b:de:8a:40:40:e5:e4:
8d:7e:35:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:47:41 2025 by rpki-client on console.sobornost.net