Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa
File: R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa (raw, json)
Hash identifier: ir5koZmhGGNuMOajWDB8hvuKf0qBoIQa1qm6cPf+lx4=
Subject key identifier: 47:92:6A:D4:50:42:2E:F6:C1:81:93:70:17:B2:1C:7E:9C:6F:DF:21
Certificate issuer: /CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Certificate serial: 019512BF3B31EFE26541EF61C7567AA5CD8A
Authority key identifier: BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa
Signing time: Mon 17 Feb 2025 07:11:17 +0000
ROA not before: Mon 17 Feb 2025 07:11:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50904
IP address blocks: 91.216.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:bf:3b:31:ef:e2:65:41:ef:61:c7:56:7a:a5:cd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb02aa9fa45fc97bdb2e6dc8fc0a7f0371c84de9
Validity
Not Before: Feb 17 07:11:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47926ad450422ef6c181937017b21c7e9c6fdf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:f9:ea:a9:51:d1:57:fc:37:b3:bb:ae:1d:
ff:e2:11:8b:d7:f9:87:f5:ad:04:7b:03:86:38:b6:
2d:d2:77:c8:81:c2:05:e1:5b:ef:cc:ae:50:71:90:
59:2d:da:c1:be:3e:88:e2:9e:88:19:e6:cc:87:9c:
6c:0e:f1:3b:a7:b2:18:4c:1a:7f:b4:48:cc:88:29:
27:af:9a:74:43:0c:0c:cc:b0:4f:e2:53:85:6d:4c:
72:aa:c0:77:eb:bd:fe:ca:dc:b5:99:90:3c:18:91:
42:ad:99:fe:35:20:06:b5:af:25:c5:97:06:73:8f:
0f:b9:72:65:9b:85:03:3f:4a:23:37:bd:1e:c3:20:
db:e9:f0:43:d4:5d:eb:c4:7b:af:98:bc:b2:56:70:
6d:f2:f2:de:39:2d:a7:e0:f0:06:52:a5:3d:64:23:
db:e1:8c:03:b9:73:12:80:9a:75:02:fd:59:a7:6c:
61:49:57:19:9a:31:a5:58:71:a4:c7:ed:b8:a0:cd:
e2:73:38:53:58:33:14:1a:6e:45:e4:b4:34:db:99:
43:27:1f:5b:93:96:90:6f:13:18:10:fe:9d:31:ab:
28:60:38:2c:41:22:df:a5:48:a6:b0:b5:20:10:97:
e9:85:ad:17:9f:1d:d7:f5:31:30:ed:5c:18:02:8e:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:6A:D4:50:42:2E:F6:C1:81:93:70:17:B2:1C:7E:9C:6F:DF:21
X509v3 Authority Key Identifier:
keyid:BB:02:AA:9F:A4:5F:C9:7B:DB:2E:6D:C8:FC:0A:7F:03:71:C8:4D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwKqn6RfyXvbLm3I_Ap_A3HITek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/R5Jq1FBCLvbBgZNwF7Icfpxv3yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/uwKqn6RfyXvbLm3I_Ap_A3HITek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.24.0/24
Signature Algorithm: sha256WithRSAEncryption
96:74:5a:fc:d5:77:e0:1e:ec:70:e4:07:ba:27:e7:a9:8e:f0:
e2:76:fd:e9:c1:9c:7d:29:74:a1:60:39:7c:fc:d5:c6:b7:cf:
ce:e1:89:57:d8:1b:9d:b7:8e:40:92:73:1f:40:66:6a:c5:02:
24:1a:23:db:2f:0d:10:e1:bc:5d:52:ca:de:83:f2:f6:d5:4f:
9d:b7:03:97:73:3a:db:e3:ef:17:8c:f1:f4:1f:e2:e6:5b:e8:
7e:6b:dc:ab:20:e7:3f:28:a9:f8:ee:50:bd:63:7b:ef:dd:5c:
47:6c:c5:fe:e5:c0:29:4f:73:0e:b0:a2:59:96:6e:18:2b:ff:
c3:3f:31:71:4c:cf:23:95:fe:67:b2:3b:89:d1:d9:6e:43:6e:
1e:10:3c:f8:9f:47:2a:39:4f:43:4b:63:bc:23:91:a0:6e:75:
95:75:27:db:be:9a:2c:96:76:10:fa:74:87:09:f9:94:76:04:
f2:3b:86:32:7f:5e:bd:81:0f:69:2e:7a:92:93:8e:ed:a0:36:
1a:b8:9d:07:5f:4b:a2:cd:d6:a9:05:60:7b:73:10:1b:3b:ab:
cd:58:6a:5d:f3:d3:70:9c:10:bc:58:41:9c:c8:3e:1c:88:90:
cf:5b:97:56:f6:9a:8d:a8:b4:33:a4:b3:5c:63:3c:34:31:60:
cb:1b:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net