Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa
File: MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa (raw, json)
Hash identifier: uHa1AqEKqp9fMO1EIg5qvgkndRdXUoq9xzHg1+rgjtg=
Subject key identifier: 31:1F:1D:4D:D8:63:99:A6:0B:C1:2E:7F:45:95:A0:78:6A:47:64:0B
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019424B2821F2E40C60A7BB770BCEF91DDDC
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa
Signing time: Thu 02 Jan 2025 01:47:45 +0000
ROA not before: Thu 02 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57852
IP address blocks: 185.217.184.0/24 maxlen: 24
185.217.185.0/24 maxlen: 24
185.217.186.0/24 maxlen: 24
185.217.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:82:1f:2e:40:c6:0a:7b:b7:70:bc:ef:91:dd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311f1d4dd86399a60bc12e7f4595a0786a47640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:76:38:f2:11:4d:77:50:15:69:eb:e0:92:
88:93:ff:17:2f:3c:71:8a:25:c8:64:6f:7b:47:57:
89:50:e7:59:e6:1f:1a:5d:9b:17:39:53:f8:7e:6b:
ef:ec:e5:54:df:ef:ea:06:6b:be:ed:06:6b:1d:97:
2d:f6:e5:23:50:d0:cd:58:cc:29:ab:76:67:6d:e3:
16:bc:06:83:e6:77:64:84:ec:93:27:af:b8:cf:c5:
37:ab:76:e8:79:31:a1:f8:3e:1c:f2:7e:8f:91:6f:
e5:de:4a:77:df:eb:0b:e3:14:01:e7:d1:10:76:25:
b6:c0:f7:41:53:1d:f3:e6:19:67:9e:6f:65:07:b9:
ad:78:8b:f5:ca:d2:ab:55:62:c9:cc:6d:15:56:35:
bf:8d:ab:cc:26:f7:9d:ff:38:52:39:81:37:20:72:
30:55:57:51:fa:d8:8f:71:b0:29:62:eb:5b:fa:2c:
5d:13:eb:b3:17:23:95:16:82:e6:26:7e:0b:56:d5:
f0:1a:48:4c:a8:b1:be:60:1b:b2:eb:2d:4b:4c:34:
cc:7f:6a:ce:96:77:ea:5b:fb:d1:2a:6f:7f:7d:8d:
e5:da:ba:8a:39:e3:ec:e3:16:70:a3:55:a8:74:a1:
96:d7:90:43:2e:3d:c3:eb:b0:d0:cf:a4:ca:14:b5:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:1D:4D:D8:63:99:A6:0B:C1:2E:7F:45:95:A0:78:6A:47:64:0B
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/MR8dTdhjmaYLwS5_RZWgeGpHZAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.184.0/22
Signature Algorithm: sha256WithRSAEncryption
90:82:e8:16:66:aa:f1:f0:8b:ea:d0:4a:b5:3e:99:6f:09:0d:
14:da:29:bc:d3:bd:6f:0b:c5:c8:f9:53:34:a4:2f:9b:03:1a:
e1:b9:47:c8:8f:5d:da:8f:ab:a6:bb:46:34:35:1a:03:5c:95:
cf:75:17:da:f8:45:3b:3c:fc:9a:57:03:3f:9a:e0:a8:5c:1f:
7c:a3:b2:5f:50:f8:89:fc:b3:ab:70:4b:cf:e8:9c:50:2a:3d:
03:1c:25:ad:59:06:3f:60:6d:37:4b:09:65:3e:d3:1c:01:e3:
27:ce:f7:1f:b1:99:75:52:e7:d8:8d:9e:a5:0c:09:3e:f1:6c:
09:65:eb:bc:66:5a:ba:93:28:1a:c4:a1:50:94:16:25:12:74:
ce:d5:c5:41:16:24:ce:35:b7:34:7e:e4:7f:81:b6:3e:49:bf:
f7:20:c7:3b:34:2a:78:c6:bd:ce:db:ef:a6:ea:e2:0d:f9:9d:
4b:53:5f:18:03:97:80:a0:ed:17:39:77:aa:ef:74:dc:e5:16:
96:41:53:7a:86:24:73:73:7c:8e:53:fa:d0:37:fd:49:9d:b1:
21:aa:41:2d:75:6c:28:96:65:61:9e:9d:98:2f:e8:58:ac:a5:
59:8d:41:9f:5c:81:06:73:88:e2:7b:57:72:04:cc:2d:10:2f:
83:6f:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net