Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/I9n8PdlI12zk3ftrt5ZejA1FrCU.roa
File: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (raw, json)
Hash identifier: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=
Subject key identifier: 23:D9:FC:3D:D9:48:D7:6C:E4:DD:FB:6B:B7:96:5E:8C:0D:45:AC:25
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 01942B2538E3C964638F55DED04D3FF9BFD8
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/I9n8PdlI12zk3ftrt5ZejA1FrCU.roa
Signing time: Fri 03 Jan 2025 07:50:47 +0000
ROA not before: Fri 03 Jan 2025 07:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211261
IP address blocks: 185.223.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:25:38:e3:c9:64:63:8f:55:de:d0:4d:3f:f9:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 3 07:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23d9fc3dd948d76ce4ddfb6bb7965e8c0d45ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:eb:41:db:4d:c6:f2:13:d3:4b:cb:29:58:
b3:39:2a:f8:d3:9d:83:55:d4:40:34:b6:ca:7b:85:
f6:86:dc:00:be:7b:dc:bf:86:b6:c0:5a:78:b4:5f:
16:ca:bc:75:3d:39:ce:07:80:10:37:57:80:36:f3:
39:4b:78:20:4e:2d:c9:0e:18:99:33:2a:61:f7:73:
75:08:3d:5e:76:47:be:a9:e7:80:7c:ac:2c:36:8a:
46:15:93:ab:0c:bd:97:2d:72:1a:a5:57:c5:81:01:
63:bc:77:b8:47:c1:a4:b6:1f:29:f0:9c:c3:e3:af:
cd:85:74:93:08:ba:e1:c6:62:5e:a8:ca:84:34:97:
f2:e8:1b:4e:88:9f:f2:e8:8a:26:7a:b0:dc:9c:09:
c2:c4:f4:b9:a7:3c:c3:33:0c:ce:b6:a7:df:31:7f:
52:e8:09:bc:93:96:68:19:e5:e6:84:62:13:21:05:
e3:4b:95:35:29:e0:e0:a7:65:ec:da:82:c9:78:ae:
d1:ff:18:68:d4:70:93:db:75:ef:57:2e:e2:d8:d3:
5b:64:df:49:c9:f9:f6:bb:a6:e0:04:00:82:81:47:
a0:93:54:0a:cd:96:b8:8a:79:36:a3:bf:e4:83:f9:
56:41:bb:fe:41:da:c8:a4:48:6a:e2:ea:f3:bd:03:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D9:FC:3D:D9:48:D7:6C:E4:DD:FB:6B:B7:96:5E:8C:0D:45:AC:25
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/I9n8PdlI12zk3ftrt5ZejA1FrCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:55:a9:73:8b:1f:b6:17:28:32:3d:77:30:c4:29:ed:b7:64:
8c:47:97:4e:fc:c9:2f:f9:35:dc:ef:50:a9:0b:c7:e6:49:08:
56:d4:f8:6f:fc:ca:99:b3:ec:fb:ec:89:eb:ca:fe:e6:d6:ae:
86:38:4c:27:da:74:e6:33:08:2b:f6:7c:56:8f:45:57:ea:bc:
e9:ef:e7:51:d3:d3:47:66:9b:44:e2:58:0b:25:27:74:be:2b:
a0:41:c1:ab:cd:e8:87:3d:77:8f:0a:bb:9a:a1:60:c5:6c:e3:
98:83:63:bd:b1:a8:b6:ff:29:00:46:8f:9f:78:13:36:78:0d:
8b:ea:ad:c6:0a:69:65:28:9b:0c:66:bc:5c:ef:36:aa:ed:fd:
f5:48:4c:0b:5e:72:96:ac:1e:61:02:cd:dd:8d:5b:7c:94:1d:
e6:1e:ae:e3:16:82:ea:6b:c7:e7:40:3c:8a:9c:6f:72:cb:10:
fb:c1:3c:d7:71:c6:e9:87:ea:c5:eb:7d:32:41:21:ef:45:38:
4e:ee:96:67:63:75:ea:82:b1:cf:63:b9:09:7e:fb:98:56:4b:
21:17:39:30:da:7a:71:f4:90:ac:af:6b:c9:16:59:14:7d:e1:
a7:45:ed:86:84:97:d6:cb:54:4a:71:f6:8b:68:33:cb:74:eb:
4f:b4:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net