Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/mddF3t4TzWyM7kqwlkCBOdlwjiA.roa
File: mddF3t4TzWyM7kqwlkCBOdlwjiA.roa (raw, json)
Hash identifier: gzOYKSEvkTGbu+QJJsi1Jgy+e4XYPYdTDnUqdEsobA8=
Subject key identifier: 99:D7:45:DE:DE:13:CD:6C:8C:EE:4A:B0:96:40:81:39:D9:70:8E:20
Certificate issuer: /CN=85860273eb271922b9f7ec8f4a591016356d732b
Certificate serial: 0194258F95DC93E0A2115EEDAE14C626D836
Authority key identifier: 85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/mddF3t4TzWyM7kqwlkCBOdlwjiA.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207989
IP address blocks: 84.38.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:95:dc:93:e0:a2:11:5e:ed:ae:14:c6:26:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85860273eb271922b9f7ec8f4a591016356d732b
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99d745dede13cd6c8cee4ab096408139d9708e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:c2:60:a5:d6:db:6b:ef:0b:f0:28:46:29:
b4:18:c6:a6:03:16:04:d2:9f:60:ca:ab:2c:6d:26:
28:c6:66:e5:c5:ec:fb:ea:7b:4f:20:26:fc:7a:54:
8b:cc:77:fd:23:8c:8a:80:3f:18:35:c2:a7:7a:43:
0b:c5:2f:66:4f:9b:4a:b9:2b:1f:ff:bb:0d:a5:6b:
74:ab:fc:bf:60:7f:51:15:9e:e4:97:ee:6e:86:48:
9c:32:03:1a:67:67:1a:78:1a:f7:11:a9:37:5d:2e:
3b:6e:16:66:75:f7:53:c6:51:5f:5e:ea:d6:3b:db:
da:d7:5e:89:98:a2:05:3e:fc:2e:17:11:1b:c8:82:
cb:d0:a2:ba:62:9f:a1:03:c2:04:9e:ad:29:80:7a:
2e:73:45:46:01:1d:28:83:14:52:fc:fe:60:1e:29:
49:6e:e3:0c:32:88:b6:7e:b4:68:50:f3:a0:9d:1b:
70:a6:1e:86:69:31:5b:73:68:66:01:50:9b:91:8e:
43:d3:c4:ec:7c:19:4f:9f:0b:ce:05:bf:2e:dd:66:
19:de:2e:79:81:9d:75:39:26:db:0d:00:1b:85:fd:
4a:c3:8f:06:c0:8c:a2:0e:f7:ce:39:31:a1:52:22:
78:9a:c3:bc:0b:17:e0:25:71:cc:ab:19:fa:ac:d5:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:45:DE:DE:13:CD:6C:8C:EE:4A:B0:96:40:81:39:D9:70:8E:20
X509v3 Authority Key Identifier:
keyid:85:86:02:73:EB:27:19:22:B9:F7:EC:8F:4A:59:10:16:35:6D:73:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYYCc-snGSK59-yPSlkQFjVtcys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/mddF3t4TzWyM7kqwlkCBOdlwjiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0157c9-3488-4fb8-9b4f-9909ee2f33b2/1/hYYCc-snGSK59-yPSlkQFjVtcys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f0:ba:76:ac:85:f1:0f:37:cf:61:75:b4:8e:37:b2:a2:d4:
a0:7a:b3:08:9d:05:e6:85:29:2e:24:e9:d3:26:10:04:9b:eb:
ee:31:b4:c7:b0:d7:51:f6:d9:97:40:99:b5:84:40:8b:96:de:
2a:13:7e:39:29:41:ef:86:61:e1:45:c3:c2:50:79:86:21:bb:
c2:46:f1:44:65:c9:38:a4:c7:44:bd:59:71:5a:67:9f:38:d1:
1f:d9:95:23:b9:99:da:17:79:d4:de:06:ad:ba:da:76:b8:33:
44:4a:f2:c3:58:c0:aa:e6:14:7f:e1:ad:b4:13:fd:a4:5e:3c:
81:80:4f:60:9b:9b:0c:dc:37:71:70:44:a1:b3:81:f8:83:1d:
94:a2:bf:02:9b:07:0a:f6:be:b7:f7:e3:5e:48:c9:85:1b:21:
12:3a:71:5c:d7:9e:8d:30:59:60:79:3a:45:e8:ec:68:8c:6c:
76:6b:8c:bb:a7:ca:cd:a1:3b:02:f6:fc:81:4b:df:4c:41:1d:
43:22:a2:0e:96:64:46:f2:8d:28:20:21:23:54:7a:17:0d:26:
02:5d:1b:e7:de:58:6c:35:da:5c:be:ee:a2:c7:31:2b:af:6e:
9e:23:ff:47:59:d9:a4:a6:8b:fe:5e:f7:37:64:6e:6f:e2:1f:
56:db:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net