Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/OvLZjS7E5MX30NZkLK9jxh8KFhU.roa
File: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (raw, json)
Hash identifier: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=
Subject key identifier: 3A:F2:D9:8D:2E:C4:E4:C5:F7:D0:D6:64:2C:AF:63:C6:1F:0A:16:15
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 0195483492AC9F5659251BD72720C69B5BA3
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/OvLZjS7E5MX30NZkLK9jxh8KFhU.roa
Signing time: Thu 27 Feb 2025 16:19:19 +0000
ROA not before: Thu 27 Feb 2025 16:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207410
IP address blocks: 185.7.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:34:92:ac:9f:56:59:25:1b:d7:27:20:c6:9b:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Feb 27 16:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3af2d98d2ec4e4c5f7d0d6642caf63c61f0a1615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:ec:43:7a:8c:31:7f:e5:04:f1:e6:d6:74:
1a:7a:fa:f9:52:ce:c8:e4:13:45:9d:48:22:00:e0:
14:2c:3d:43:8b:e8:a9:c9:40:af:14:a3:ae:84:17:
35:3a:f4:0e:ab:58:d5:84:06:cc:d2:87:3a:c8:19:
09:6e:cd:4c:c7:42:41:22:f8:80:e7:ff:6b:90:d9:
28:a3:e4:a2:03:56:19:22:2c:a9:84:ee:9b:1c:2d:
05:89:97:3e:b0:8f:3f:85:58:e0:06:78:39:2b:16:
49:17:53:53:c6:07:44:2c:76:39:7e:74:2f:cd:7d:
77:04:c5:37:72:f7:1c:9a:43:2d:32:48:4c:d6:06:
ef:82:0c:68:2a:96:9a:b2:6d:ee:25:59:38:c2:63:
c8:2c:e3:7c:8b:0d:6f:3b:25:ad:70:9b:d4:1e:1f:
7a:27:d0:97:66:f2:a4:5d:94:03:09:af:2b:38:7f:
15:0c:b5:58:c5:aa:b7:e6:4f:0a:8f:d4:f7:e5:b7:
3f:c8:48:3a:0c:1f:da:48:3a:26:bf:85:05:c7:be:
58:2b:54:83:03:a8:da:fb:74:33:5c:d4:b7:e2:f1:
b5:0d:63:1e:26:b3:df:9c:92:1f:5b:36:06:d1:08:
9d:13:12:08:e3:c4:70:85:12:d5:6b:2b:e5:4b:6a:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:D9:8D:2E:C4:E4:C5:F7:D0:D6:64:2C:AF:63:C6:1F:0A:16:15
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/OvLZjS7E5MX30NZkLK9jxh8KFhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:cc:93:f3:ec:37:71:74:f5:cb:da:e3:51:de:90:41:aa:f2:
df:1c:3b:8e:cb:7c:6b:2f:1c:f5:41:f5:ea:37:59:30:6f:98:
42:b6:9a:87:cf:1f:38:a0:83:b2:b1:e6:78:98:b0:b5:1c:f6:
0f:74:06:be:c5:44:65:a2:2e:fc:96:5f:1c:70:26:72:58:dc:
74:12:81:5e:76:ff:43:60:80:14:de:b4:a4:c3:ba:ee:40:1a:
8a:a8:7d:09:54:3b:0d:55:c8:32:4d:9c:72:dd:71:14:d4:4a:
48:f3:c7:81:9b:c4:6f:94:1d:7e:02:15:70:4c:19:59:86:71:
72:ac:0d:07:6f:24:c0:0e:43:40:6c:ad:b4:90:0f:25:7d:a2:
81:04:3f:65:e4:d7:0d:a5:ee:de:b8:65:b4:67:4a:5a:06:6a:
6e:3c:b7:12:e0:94:4a:ef:c6:29:bb:93:55:35:fb:21:2b:09:
66:9b:82:01:61:e5:5d:0b:ff:9a:a8:ce:4b:98:f8:df:fc:c4:
a3:8c:93:df:82:b4:41:73:b7:5c:da:25:22:cb:b8:c6:ca:f8:
56:89:cc:89:37:2b:af:71:e8:c3:69:77:83:13:b6:40:3e:2c:
79:be:40:e7:cc:2f:f2:c5:76:89:7d:b5:0e:9e:81:e2:5b:17:
df:76:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net