Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa
File: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (raw, json)
Hash identifier: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=
Subject key identifier: D4:CD:C0:7E:84:77:4A:32:BB:0C:CD:83:C4:E6:06:7D:61:1D:7D:1D
Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e
Certificate serial: 019487E20F1F1358E212A445632C3F39EA23
Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa
Signing time: Tue 21 Jan 2025 08:02:06 +0000
ROA not before: Tue 21 Jan 2025 08:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196954
IP address blocks: 85.208.238.0/24 maxlen: 24
85.208.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:e2:0f:1f:13:58:e2:12:a4:45:63:2c:3f:39:ea:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e
Validity
Not Before: Jan 21 08:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4cdc07e84774a32bb0ccd83c4e6067d611d7d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:67:86:07:f2:e5:6c:7e:c7:bf:b6:97:6a:
33:de:35:6c:ad:77:a2:db:a6:39:99:48:c6:e5:2b:
ad:f8:85:c9:80:81:ea:ab:10:36:07:ec:07:60:8e:
07:3d:01:96:37:fa:a8:d7:29:5e:87:3b:77:75:b5:
fe:04:52:41:6e:60:6c:da:c6:1f:11:15:16:c6:40:
dc:51:da:f8:d1:68:cc:9b:3e:fc:1a:d6:f2:6f:2b:
eb:76:42:d8:be:bd:0c:5b:f5:41:8e:60:9f:b2:fd:
9f:81:2b:43:67:3f:f3:de:e9:49:ae:bd:2f:f6:eb:
ac:c8:56:25:d8:f8:5c:15:1a:e5:4c:42:15:29:2f:
f7:58:5a:04:32:69:94:7f:62:be:1b:4f:7a:67:e4:
5d:55:40:55:a9:7e:aa:f7:3e:08:90:09:d7:18:03:
2c:fa:02:de:0c:2e:dd:36:35:64:66:62:7e:09:b0:
31:78:0a:0d:9a:e3:0a:05:6f:e5:4a:34:a1:84:b1:
53:6e:32:83:0c:0c:bc:f1:80:ae:f1:63:26:9e:78:
c5:d9:6d:04:8b:38:83:bc:5b:43:8e:69:c1:84:e8:
3e:de:86:39:4d:b8:dc:cd:da:d8:15:05:d0:fe:81:
ab:f7:30:d1:65:a5:7d:40:e9:5f:9a:26:b7:16:e0:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:C0:7E:84:77:4A:32:BB:0C:CD:83:C4:E6:06:7D:61:1D:7D:1D
X509v3 Authority Key Identifier:
keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.238.0/23
Signature Algorithm: sha256WithRSAEncryption
75:7e:1d:26:4d:d7:2c:ae:93:96:6b:39:00:c8:1f:6d:fd:da:
96:1b:d5:4b:fd:fc:98:e6:6c:29:e2:c1:80:f6:99:4a:56:d5:
12:8b:89:06:b9:1e:b2:18:aa:1e:5c:63:a3:e5:1d:1c:a1:f5:
03:03:f4:f4:56:e7:66:cf:94:77:a2:46:4a:ff:8c:3b:53:fc:
ab:78:8b:8b:36:55:e8:a1:5f:9e:bf:51:dc:05:6e:ec:94:b0:
29:fb:97:e8:37:a1:aa:9e:91:53:af:8e:23:97:a3:63:4a:7b:
07:24:b5:5c:ce:4a:77:ab:5d:fb:b5:a0:5d:53:1c:3d:ac:a8:
a1:5b:35:62:ad:6b:e7:13:22:f6:7c:1d:e4:10:ab:3a:c5:7b:
b7:61:c8:0e:1e:a5:b2:c1:78:38:13:57:2a:f3:b4:cd:71:34:
e4:fb:ed:15:ee:2c:fd:ba:15:f2:e4:bd:d6:9a:cf:af:8a:e2:
62:ac:01:96:35:20:b5:12:d4:35:70:f1:ee:da:46:3e:15:83:
fd:b6:6a:30:88:06:83:9a:e1:87:c2:9d:38:97:02:98:de:b6:
ea:29:b2:d5:72:c1:c3:1c:a9:b9:1d:58:55:1c:13:e1:15:24:
2d:fd:7c:8b:ec:c8:27:f9:5e:c3:57:db:fd:da:b7:8f:73:a7:
4a:dd:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:58 2025 by rpki-client on console.sobornost.net