Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/szGakI5031RfMBLG0udsr1vS1Og.roa
File: szGakI5031RfMBLG0udsr1vS1Og.roa (raw, json)
Hash identifier: CZl7+nmuO0xGKCpa68+N+dsJA7pqMr6DdRectjtoyPo=
Subject key identifier: B3:31:9A:90:8E:74:DF:54:5F:30:12:C6:D2:E7:6C:AF:5B:D2:D4:E8
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0195B8B2075C89B8EB9D9B609A68AD137715
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/szGakI5031RfMBLG0udsr1vS1Og.roa
Signing time: Fri 21 Mar 2025 12:33:49 +0000
ROA not before: Fri 21 Mar 2025 12:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47247
IP address blocks: 91.204.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:b2:07:5c:89:b8:eb:9d:9b:60:9a:68:ad:13:77:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Mar 21 12:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3319a908e74df545f3012c6d2e76caf5bd2d4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:5f:be:b1:a3:a6:14:2e:8e:d5:c9:23:1d:
a2:46:57:07:a1:69:0a:81:02:4c:60:f0:dc:af:79:
6f:3f:cc:52:e1:e2:6c:3d:b3:e4:2c:9e:07:1c:f2:
ee:3d:57:83:4b:4f:5a:b4:b8:64:b1:1d:0f:80:61:
12:66:c3:37:01:ea:ce:ac:62:b0:4d:26:70:5c:93:
af:38:85:85:22:7e:01:e6:94:8d:00:43:af:1a:27:
cb:51:29:a7:24:0c:3d:76:d2:4e:51:4e:d2:21:e7:
ef:17:89:fa:f5:fb:00:a2:1b:9d:ad:f3:11:6a:83:
40:cd:8e:c3:c0:41:8c:1a:eb:a4:d8:40:18:41:6f:
4d:0f:b5:55:7e:fb:f0:fa:4e:15:82:af:d7:bd:df:
7a:86:42:9b:93:c3:b1:ef:8c:dd:45:97:71:c5:00:
42:63:da:f6:0f:84:80:81:60:49:d3:d3:7a:b9:0d:
ac:3f:94:d2:17:cf:34:05:3b:58:55:c6:d4:bb:74:
ab:88:c9:7f:e8:11:3d:9d:61:a3:af:7a:f4:8e:9c:
d2:8f:3c:f2:a6:40:7f:ad:e0:bd:0b:89:39:7f:c5:
90:93:f8:7d:63:9f:c0:c2:d8:54:58:e1:91:eb:74:
85:b2:50:31:8a:f4:2c:58:2f:2a:0b:9d:11:d7:39:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:9A:90:8E:74:DF:54:5F:30:12:C6:D2:E7:6C:AF:5B:D2:D4:E8
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/szGakI5031RfMBLG0udsr1vS1Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:a0:87:80:fc:26:a9:14:07:bb:14:d2:22:9b:d2:07:59:16:
1d:ef:69:b5:db:7d:78:8a:8b:2a:9a:22:06:04:fd:18:c0:fd:
d8:00:4b:70:ad:cc:a8:af:e4:55:20:52:ce:52:25:90:e3:28:
d3:16:9f:ae:b7:79:f9:21:5e:92:9f:cf:d0:63:48:2b:1f:60:
1e:3b:86:73:6e:ec:72:dd:81:93:a5:96:01:31:21:06:18:49:
7b:db:62:a7:38:82:98:91:5b:59:f5:ba:35:f6:cb:8a:3e:53:
ff:df:6c:fb:94:8a:d7:76:7b:a5:db:96:bf:de:e3:f5:bb:3c:
ef:a3:85:f7:52:17:21:bc:73:f8:e0:b9:e7:2a:8c:6d:6a:a9:
05:cd:2a:35:96:52:3e:66:a5:89:37:de:a1:40:00:cd:5b:cb:
ec:04:ed:44:0d:9d:54:7a:51:b8:e0:46:7a:c2:16:63:28:b6:
ba:35:89:b7:7d:57:6b:01:0f:34:2d:27:74:45:46:17:b3:ea:
4b:3e:64:5f:b8:6b:ee:a8:66:e4:51:03:f7:16:25:b4:f3:ff:
91:27:d7:e8:25:42:f6:25:05:e7:b6:76:43:0d:ae:84:7a:9c:
9e:7a:35:1f:ee:e7:72:1d:84:58:46:4a:80:40:ab:c3:54:9d:
a2:0c:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:18:40 2025 by rpki-client on console.sobornost.net