Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ev4qAZxPyDVe1fzvmsra_eujOoU.roa
File: ev4qAZxPyDVe1fzvmsra_eujOoU.roa (raw, json)
Hash identifier: HFLW2F6W7JxQUwoPI2JmRMt/NzyrebxUZlSAcm1ib6I=
Subject key identifier: 7A:FE:2A:01:9C:4F:C8:35:5E:D5:FC:EF:9A:CA:DA:FD:EB:A3:3A:85
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 0194228DF7D0AFA619785F84A287E51DE832
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ev4qAZxPyDVe1fzvmsra_eujOoU.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201639
IP address blocks: 185.3.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f7:d0:af:a6:19:78:5f:84:a2:87:e5:1d:e8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7afe2a019c4fc8355ed5fcef9acadafdeba33a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:1a:07:dc:2e:99:8e:5f:90:72:90:00:37:
3f:35:ba:6e:c2:e2:e3:73:a9:f5:d0:b8:05:1c:d9:
13:4a:63:2e:6e:d6:da:fb:0b:63:13:3b:f0:bd:65:
10:cc:1f:c4:15:b5:55:ac:e3:e2:fb:7d:24:7a:45:
7e:4a:3c:aa:e6:69:19:6b:97:3d:6d:e6:86:7b:e4:
20:49:87:78:49:47:a9:ed:fb:d7:32:40:14:16:61:
60:99:95:98:47:1c:a1:4d:4c:4c:96:fb:d6:c8:b8:
5c:91:67:bb:58:b9:6b:10:ea:63:ad:70:9f:dc:a5:
92:b4:95:a1:e9:9f:b5:1d:70:a4:a1:1f:47:00:ca:
be:4c:c2:27:5e:92:77:93:0c:0e:51:42:ae:cb:2c:
27:93:54:0f:ad:fa:10:6a:f9:e3:c9:c7:56:b7:21:
bf:03:33:41:16:6f:aa:70:53:6f:92:b1:ac:70:54:
13:28:4c:8d:67:48:13:d4:c7:84:cc:9f:9f:5f:2f:
1e:fc:67:51:01:ca:02:65:28:03:ed:4a:25:6c:84:
22:a4:6c:b6:de:76:ec:64:7b:f8:2c:d7:bf:16:84:
a8:a9:df:a4:e8:b9:aa:d5:f8:8a:42:dc:0a:3a:54:
c4:69:20:5d:0f:26:7b:a6:1b:19:89:3c:6c:64:70:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FE:2A:01:9C:4F:C8:35:5E:D5:FC:EF:9A:CA:DA:FD:EB:A3:3A:85
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ev4qAZxPyDVe1fzvmsra_eujOoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.188.0/24
Signature Algorithm: sha256WithRSAEncryption
69:63:f1:eb:5c:2e:79:1b:d8:42:45:c3:20:15:3d:6d:58:fb:
a2:63:92:ca:ee:26:47:ab:e5:b8:42:6d:71:79:da:50:e4:76:
2d:bc:e2:75:c0:49:42:98:76:a9:07:bc:a6:36:75:67:91:ae:
49:6d:db:10:53:ca:7e:8b:5f:5f:34:46:bf:ce:23:b2:f4:eb:
72:d1:5f:c8:6b:d5:01:ab:e6:04:18:84:10:b6:93:7b:9a:c9:
2d:12:a6:00:8f:ce:9d:12:3c:f3:d4:73:45:21:9c:77:75:c2:
d0:cb:fa:ad:9a:4a:2e:ea:97:14:44:95:b3:a0:cc:da:c4:c5:
c8:06:00:85:46:dc:40:88:7d:1c:53:9a:49:20:fa:75:bf:5e:
78:ac:71:91:50:8f:7f:4c:8c:75:fb:7e:09:57:19:54:6e:d3:
3f:20:17:91:b8:0a:3e:db:7b:f6:20:b7:c6:80:11:51:db:58:
3d:82:e7:0e:0a:90:9e:d2:fa:b5:47:42:64:f6:ff:6e:41:47:
27:24:55:ea:f3:e7:fa:04:f0:8e:64:92:d6:33:de:ac:80:49:
96:11:ec:5c:8b:fb:04:28:08:60:db:f9:79:aa:8e:06:40:7f:
05:7f:c8:28:26:8e:e6:20:09:47:f1:0a:48:1a:4c:80:1d:17:
a5:f8:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net