Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa
File: KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa (raw, json)
Hash identifier: A2C/O+Kqn5BMFDMcQh3sDt1p5I358AiHafCSfwd+Wn0=
Subject key identifier: 2B:01:A9:E9:9D:EF:FD:FF:EA:74:A3:0B:78:1E:51:3F:77:97:35:1A
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01942444B1A3D07E3B90112E9D6C894C0647
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57615
IP address blocks: 185.27.81.0/24 maxlen: 24
185.27.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b1:a3:d0:7e:3b:90:11:2e:9d:6c:89:4c:06:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b01a9e99deffdffea74a30b781e513f7797351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:b8:34:1e:8d:81:38:81:2e:22:a6:5c:d5:
e6:a1:f4:89:78:83:d6:f8:ba:67:3a:ba:6f:30:39:
5f:0e:01:69:0c:89:9c:29:2b:b6:eb:9d:1b:9c:1b:
b7:a7:df:ff:6c:9c:32:f9:9c:54:1e:c6:35:4c:4a:
08:55:fc:4d:d4:dc:87:19:55:a7:50:8c:72:14:05:
34:6e:e9:21:8d:5d:10:af:76:d2:24:37:7a:d7:fb:
74:2b:00:f7:4c:9e:94:da:19:50:b9:28:3b:1a:16:
62:7e:34:3e:e9:b0:b7:aa:6d:e6:60:fc:ea:b8:cf:
1e:91:65:8f:6a:df:29:a6:3d:1e:fc:59:40:60:f7:
ce:0b:38:f1:5c:34:fd:7b:ba:d5:a6:e1:7f:74:c1:
55:70:f6:08:9b:6f:a3:fc:02:16:9d:ed:ab:1b:da:
da:04:90:42:63:8e:ca:25:f0:44:2b:f8:37:2d:4e:
ee:9c:50:d7:b6:fc:bd:2e:5c:64:00:27:74:71:20:
ec:97:2b:e8:c6:7a:bd:6c:86:69:88:99:f0:b1:d2:
27:df:4d:18:38:d5:23:b7:a0:a9:9b:17:99:26:2d:
4e:55:93:61:15:b9:9e:ef:83:bb:66:c9:4d:5d:69:
cc:43:13:98:a1:21:a9:fa:d7:2a:47:c4:cc:d0:56:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:A9:E9:9D:EF:FD:FF:EA:74:A3:0B:78:1E:51:3F:77:97:35:1A
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.81.0/24
185.27.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:e2:6a:5f:e3:fe:48:cc:77:20:d3:8d:ee:1c:09:c1:82:e8:
2a:71:c2:08:db:d3:47:51:09:56:be:e7:0f:c8:6c:bc:a3:46:
94:71:46:ef:51:22:d8:6a:e2:d0:21:6e:6e:06:cd:b0:f0:7f:
bc:72:8c:78:d4:06:49:1d:06:91:0b:f4:81:9b:a3:7f:31:e7:
cc:1d:ba:6f:f5:90:a1:ee:81:26:12:c5:4e:40:fb:c1:1f:29:
96:92:31:15:48:a9:b3:78:cc:15:0f:29:b7:74:e2:a5:b8:10:
5a:f9:c8:9c:78:5f:dd:e0:49:0d:78:f1:25:20:29:95:ad:bd:
bd:26:73:1d:e1:3c:c5:42:a9:3f:47:83:a0:45:12:f6:49:a8:
75:9f:c5:f4:b6:84:e5:71:7e:23:8a:f8:3f:1b:c4:f2:e8:8a:
f8:49:d8:c0:dd:f6:42:08:dd:ab:e6:83:7f:56:f8:0c:b8:a3:
7b:24:46:49:a9:e5:46:41:f8:67:55:b1:64:97:89:c1:40:6b:
3f:7d:29:a6:0c:b7:57:5d:a4:b3:27:bd:f5:ab:b7:9c:28:7a:
dc:b5:63:63:20:d2:9a:41:0d:39:a0:9c:53:86:7c:2a:ab:ad:
8f:d5:a2:d1:b7:f6:5b:e0:0a:cf:78:8d:4b:b7:3f:45:09:71:
4b:58:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net