Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/N0z9esTkm8sf7IqrP3Uufonx0_k.roa
File: N0z9esTkm8sf7IqrP3Uufonx0_k.roa (raw, json)
Hash identifier: cRVe0pjyNnhUe4BOiczul9pweEDzxKe03iHv5OQ9WhI=
Subject key identifier: 37:4C:FD:7A:C4:E4:9B:CB:1F:EC:8A:AB:3F:75:2E:7E:89:F1:D3:F9
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 01941F8C2C2B23046DBFFC6FFBFEC300A8F8
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/N0z9esTkm8sf7IqrP3Uufonx0_k.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50770
IP address blocks: 185.177.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2c:2b:23:04:6d:bf:fc:6f:fb:fe:c3:00:a8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374cfd7ac4e49bcb1fec8aab3f752e7e89f1d3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:88:df:5f:59:d8:4c:11:99:41:be:2f:ea:
33:b2:77:75:9f:66:db:c8:32:28:92:83:6c:1c:77:
3c:4b:8d:53:0a:f4:d5:f4:0e:f8:f6:ee:a2:93:50:
42:82:f8:0b:30:21:ca:17:f6:d2:83:48:15:9a:25:
c9:e5:33:38:29:83:de:fb:73:b0:59:67:0b:57:36:
2f:8b:67:01:ec:18:5f:91:05:a3:d1:46:52:05:30:
8a:d1:96:c5:ac:46:e6:f6:dd:20:18:94:ad:5e:5c:
88:e8:ac:6d:17:f0:81:ea:c0:ac:41:49:9e:95:ee:
55:a0:2f:5c:d0:43:47:b1:35:9d:f1:ff:36:69:ef:
d5:c4:78:97:cf:c3:76:29:f6:51:6a:12:49:34:a1:
a2:42:0f:c0:34:3e:59:f4:e1:64:3b:14:52:73:5d:
9a:a8:da:56:3f:fe:35:4c:9a:08:c7:7d:e2:4e:6e:
02:06:ce:53:51:46:f0:c7:97:eb:40:2b:c4:69:c1:
a6:25:55:25:6a:97:8e:ff:ba:90:1d:f0:f8:54:8b:
1d:04:04:c0:d0:cb:be:6f:2e:9c:14:d8:76:79:ba:
bc:f2:d1:e8:d8:f7:6e:cd:f6:91:6a:6e:8f:ba:73:
a5:67:b6:b1:76:80:ec:da:34:d2:2b:3c:ea:61:60:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:FD:7A:C4:E4:9B:CB:1F:EC:8A:AB:3F:75:2E:7E:89:F1:D3:F9
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/N0z9esTkm8sf7IqrP3Uufonx0_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.211.0/24
Signature Algorithm: sha256WithRSAEncryption
74:97:63:b4:7d:6b:c3:50:ae:25:99:1c:e4:17:81:a9:3a:18:
46:71:79:96:76:56:40:2d:2c:5e:9c:91:88:4d:a8:60:bf:f8:
3d:d4:89:6f:92:98:bd:9a:48:36:a8:da:4a:9a:7c:8f:f8:c2:
80:15:6a:8e:0b:19:8b:dc:8c:d9:45:bd:6f:c2:d6:cf:17:35:
ea:d7:f5:b6:83:33:15:0f:46:2a:e3:e1:6d:65:9d:2c:59:f7:
4d:fb:b1:ac:60:27:42:b2:d2:3c:46:88:27:df:8d:98:94:0d:
bf:9f:8c:d6:36:0f:7e:29:01:66:ec:66:71:db:e6:bc:ee:58:
73:05:2d:05:06:1f:9a:c6:79:5e:c8:25:ef:14:c1:7b:d6:30:
ad:17:fe:9e:36:77:30:c8:06:9e:24:47:29:9a:a0:b7:70:10:
4f:20:35:90:e9:f0:9d:39:35:f6:6c:24:80:21:da:45:fa:aa:
6c:8c:77:ac:6d:83:5e:86:64:11:6d:0b:0f:25:43:f7:4c:d3:
fc:c9:e5:df:7d:3c:a9:47:4e:6b:5e:08:a1:f2:8d:4c:d4:b3:
91:d7:d5:54:d3:f8:21:73:a3:5e:18:f1:90:84:bc:b4:d5:bd:
e1:ac:99:fa:8b:c0:d4:1b:14:c8:3d:91:6c:26:db:a2:97:fd:
26:65:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net