Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/qdjN7PwUTgcUnjjFAlonTerXwAE.roa
File: qdjN7PwUTgcUnjjFAlonTerXwAE.roa (raw, json)
Hash identifier: VbOA5tJgv2XPJFvDfrmwF7dfcvJwsiBE98hvS8Guihg=
Subject key identifier: A9:D8:CD:EC:FC:14:4E:07:14:9E:38:C5:02:5A:27:4D:EA:D7:C0:01
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 01941F8C4E27C83464E9AEE88D4F639365A1
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/qdjN7PwUTgcUnjjFAlonTerXwAE.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201199
IP address blocks: 185.82.100.0/24 maxlen: 24
185.82.101.0/24 maxlen: 24
185.82.102.0/24 maxlen: 24
185.82.103.0/24 maxlen: 24
2a05:8f00::/29 maxlen: 29
2a05:8f00::/48 maxlen: 48
2a05:8f01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4e:27:c8:34:64:e9:ae:e8:8d:4f:63:93:65:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9d8cdecfc144e07149e38c5025a274dead7c001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:f4:8e:a3:c4:f1:4d:d9:8b:fc:86:12:87:
2a:30:d7:25:c1:1f:4e:00:9d:90:ae:1f:8e:1d:f7:
0c:c0:5d:28:20:c3:a7:1c:94:2a:64:f0:01:3b:ff:
e7:4f:29:50:2b:41:05:1b:8f:af:77:ba:63:36:1b:
82:a5:86:a5:bf:81:cc:1c:48:7b:eb:7e:1d:ce:29:
a7:29:08:3a:a4:d1:bb:0e:c3:a2:37:6a:0c:fc:dd:
14:7d:7f:40:f6:bb:1e:d5:e7:ab:2e:c6:9c:0d:7f:
6f:ff:ca:5f:3b:40:0a:9a:5f:46:d8:55:81:dd:bf:
d1:8d:0d:1a:86:46:7f:cc:e4:36:80:0e:bc:3d:64:
ed:8d:2c:57:81:f1:73:4d:f5:8c:3b:04:34:8e:30:
65:01:e0:9b:ca:95:1c:96:ec:3a:63:99:bc:d7:b0:
c7:55:39:67:95:c2:8e:53:ba:be:c8:37:68:63:d1:
82:93:e9:c6:8d:10:ca:e2:4f:ef:68:4b:d6:50:dc:
01:2b:61:84:e5:0c:11:16:57:02:b9:1c:23:8e:09:
db:e3:12:ad:81:38:32:ae:c0:03:9c:3b:28:53:0c:
20:43:89:6b:2e:38:6f:65:84:86:5a:d0:11:17:92:
c2:51:66:2b:be:50:a6:66:e3:49:af:bb:70:d7:90:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:CD:EC:FC:14:4E:07:14:9E:38:C5:02:5A:27:4D:EA:D7:C0:01
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/qdjN7PwUTgcUnjjFAlonTerXwAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.100.0/22
IPv6:
2a05:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:1c:d3:38:1c:60:2a:a3:01:3b:dc:7e:b6:56:e0:9c:51:d6:
de:9f:fc:df:72:f7:70:fc:b2:45:d1:c0:e8:49:76:de:45:64:
65:a6:41:e2:5f:eb:82:d2:ad:f8:55:24:2c:09:a3:70:3a:87:
e4:db:e0:22:5b:81:f5:a0:4a:c8:70:d2:9b:97:2a:9d:f5:2e:
e4:84:60:5a:8e:fa:91:b6:c9:a3:2b:ed:f7:34:72:04:00:4f:
4c:37:b7:45:66:34:72:f5:85:79:90:38:9c:dc:6e:70:8e:a5:
ed:09:7a:cb:bf:13:5d:bb:f7:f5:09:a0:ff:f8:04:8e:d7:88:
c7:e2:30:ce:a5:41:94:4c:33:0c:45:1e:f3:ed:db:d2:ad:34:
e8:02:4a:6e:0d:ab:12:93:b4:41:86:86:37:58:f9:e2:03:98:
46:e5:ce:5f:ee:fd:6b:ab:07:75:06:1f:72:32:a2:5f:30:06:
51:f1:a8:87:47:14:b7:7c:61:16:48:e7:70:63:69:02:34:f8:
da:cd:16:36:05:ea:29:f5:57:3d:7c:c4:56:24:33:f6:85:83:
25:d6:bc:d4:ea:c7:6b:48:48:3f:cc:c5:0d:f6:a9:aa:39:19:
0a:f2:72:9a:c6:f6:9f:d8:a1:92:d1:53:4f:4e:f3:7d:38:fb:
36:11:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net