Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/rU-a1L62W9yvQkesfV9xmSsuDH0.roa
File: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (raw, json)
Hash identifier: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=
Subject key identifier: AD:4F:9A:D4:BE:B6:5B:DC:AF:42:47:AC:7D:5F:71:99:2B:2E:0C:7D
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 01942520BA0B55E907A4FC06370EFE5E9B94
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/rU-a1L62W9yvQkesfV9xmSsuDH0.roa
Signing time: Thu 02 Jan 2025 03:48:09 +0000
ROA not before: Thu 02 Jan 2025 03:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205647
IP address blocks: 185.211.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:ba:0b:55:e9:07:a4:fc:06:37:0e:fe:5e:9b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Jan 2 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad4f9ad4beb65bdcaf4247ac7d5f71992b2e0c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:23:26:cf:99:3b:ce:7e:29:25:4c:1c:85:
83:22:81:73:16:58:c3:37:6e:58:80:e8:ce:3b:56:
9f:ac:f4:22:b6:cb:ce:99:88:04:93:ff:c6:42:f1:
8e:e7:28:6e:9f:11:de:3b:50:b4:fe:dd:27:4e:a4:
df:80:c0:6b:59:7e:76:e2:49:07:e1:74:7a:70:dc:
55:0c:9c:ad:3c:51:c1:ca:cf:5e:19:04:7c:0d:e1:
e0:b3:ca:90:fa:7b:db:6d:8d:c0:a8:39:2d:1b:58:
1d:b1:59:88:aa:f7:52:16:4a:d4:f3:c1:fb:3e:74:
aa:ca:ae:67:19:ba:e7:18:f1:fd:14:e5:e9:ce:5e:
c6:8b:dc:96:9c:93:57:69:59:cd:d6:db:73:30:7c:
be:f7:c5:fb:8b:d7:b2:50:95:27:bf:78:d0:dc:a5:
7a:79:d6:21:4b:7f:47:d1:a3:8e:9f:20:0e:7b:aa:
0e:65:90:93:aa:2b:48:1f:e2:19:00:8a:29:c2:64:
75:c1:24:15:dc:94:1a:91:19:68:c8:60:c8:3c:df:
7f:db:a6:49:ef:48:a8:3e:0b:ac:7b:6f:78:d8:9a:
2e:32:6d:6d:87:ce:3c:a1:9c:0b:78:a5:1b:25:0a:
52:0a:32:fe:45:8b:29:5f:45:4e:06:3a:c4:a2:e4:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:9A:D4:BE:B6:5B:DC:AF:42:47:AC:7D:5F:71:99:2B:2E:0C:7D
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/rU-a1L62W9yvQkesfV9xmSsuDH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.86.0/23
Signature Algorithm: sha256WithRSAEncryption
04:d4:85:7f:80:a8:c6:6b:44:47:2b:ec:27:51:3a:f4:60:f1:
76:10:e6:74:90:42:c8:7c:bf:e9:78:ae:f6:77:29:ee:ef:f2:
58:15:d2:24:49:b3:b9:d0:5a:cd:03:0a:57:00:52:6a:68:49:
8f:ec:b8:01:66:5c:b8:f9:10:26:ae:54:25:45:ee:4a:39:de:
38:cc:2f:6d:22:a7:30:fc:52:02:09:af:53:c1:c2:aa:4b:6a:
2a:55:0a:9b:87:6b:04:a5:aa:f8:89:a1:44:99:6e:eb:f3:91:
86:73:e9:fa:89:cd:6a:ef:be:75:43:da:9f:76:06:c7:1b:1a:
45:e6:f8:98:5b:c6:d8:cb:17:7e:03:3d:05:32:75:65:71:0a:
d7:7e:f8:06:3e:43:fe:6f:21:c3:29:59:45:ec:17:10:22:82:
38:01:1e:47:0e:55:6a:e9:51:6d:db:75:26:9e:70:30:9b:5a:
cf:15:9c:8f:14:4a:c8:46:90:5f:41:df:b2:34:1d:c6:66:5a:
60:cb:42:d8:3f:fe:d6:5b:de:e9:0b:bb:ec:d0:c0:7d:ca:ad:
81:1c:d7:b9:7b:cd:9a:9a:fb:29:0f:14:9a:a8:d4:c6:50:9c:
da:5b:64:8b:11:3d:3c:36:73:71:e7:b7:7c:29:c0:b5:ef:27:
dc:27:52:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:04 2025 by rpki-client on console.sobornost.net