Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa
File: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (raw, json)
Hash identifier: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=
Subject key identifier: 07:60:D5:71:B7:41:00:A4:47:04:3B:0E:95:9A:EB:39:57:A9:4D:C4
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019425209CC845D99BD9FCC8F9FF32892869
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa
Signing time: Thu 02 Jan 2025 03:48:01 +0000
ROA not before: Thu 02 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208552
IP address blocks: 91.211.24.0/24 maxlen: 24
193.254.222.0/24 maxlen: 24
193.254.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:9c:c8:45:d9:9b:d9:fc:c8:f9:ff:32:89:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jan 2 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0760d571b74100a447043b0e959aeb3957a94dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:0a:27:96:69:40:75:fc:c3:07:16:c9:3e:
d5:81:8e:70:1a:69:00:34:54:9e:ac:db:dd:fc:3c:
ac:2a:12:78:ee:b0:b9:b5:69:66:3d:93:17:99:1a:
c2:ea:b1:40:45:d1:58:16:df:0b:54:d7:25:dc:05:
a9:c1:2d:72:93:ae:53:42:6f:a8:72:5f:18:7c:74:
2e:84:b8:ea:3b:35:33:a8:f0:a1:dc:dc:dd:9a:ac:
aa:f8:28:48:5f:13:02:04:c5:39:02:d1:a1:72:75:
75:0e:d1:53:23:c8:19:79:db:eb:93:53:78:15:b2:
ec:d1:59:0d:10:fb:25:af:de:2b:f4:40:ab:35:58:
b9:16:64:01:94:3c:27:d8:2e:9c:12:16:ee:4e:ca:
b0:59:d4:c8:51:ad:3a:f6:1b:cc:ec:ef:20:f3:f8:
5e:f9:e3:a5:95:23:0f:68:7c:ce:b9:52:bc:a9:75:
e1:4d:92:69:91:cf:9c:d6:2a:d9:fb:f4:c9:20:b5:
9b:41:42:e4:14:e8:e6:7b:1c:5e:af:b3:ef:a6:a2:
e4:e0:6b:08:58:72:64:c4:00:f9:15:b1:b5:0c:4c:
41:ff:3b:50:6b:64:2c:4b:b1:5e:32:33:f0:2e:40:
50:99:c0:38:29:54:ca:94:d3:fb:c0:bd:b0:04:b8:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:D5:71:B7:41:00:A4:47:04:3B:0E:95:9A:EB:39:57:A9:4D:C4
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.24.0/24
193.254.222.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:67:2c:7b:fb:ad:a5:44:1e:5e:71:61:47:1c:b8:69:92:4b:
e3:2d:29:c2:c0:db:d2:ab:9b:df:c3:e1:15:6c:91:70:5c:b0:
d6:27:fa:ff:de:c3:ab:8e:0b:9b:ba:74:ac:b6:7a:f5:ce:72:
ea:6f:ff:94:66:f6:53:9f:b1:8e:36:c3:67:dd:c3:93:aa:01:
be:af:74:09:16:59:50:e3:0b:3f:4a:03:8f:da:b3:48:1e:67:
65:53:f6:51:dc:e4:59:90:05:8a:67:00:13:43:46:fd:ef:0f:
97:2d:6c:4b:e9:0c:46:5f:5f:91:0b:b0:3b:61:d5:11:9e:6d:
11:17:e4:95:58:0d:91:8b:1f:1e:53:58:30:25:b7:ad:f6:43:
d7:24:87:a5:12:88:83:18:f9:d4:5b:1f:00:e3:1b:8f:c2:a8:
3a:28:ba:a8:27:d2:53:0b:28:32:b8:52:e1:65:d8:57:52:24:
fa:5c:e7:07:f4:c5:20:57:11:68:76:6d:f7:d7:59:5d:d0:7d:
f0:8c:f1:9d:77:0e:9f:1b:01:d9:62:a0:34:2d:68:96:bd:5e:
89:72:a0:1f:13:f0:e3:28:0b:d8:a1:87:d8:f2:1b:7f:d5:88:
0c:9a:17:a9:7a:6f:66:b5:03:76:90:64:ec:cf:ea:f7:8c:96:
1b:c0:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net