Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/N0McjdXZl5TUnCSac35uIbLCfTQ.roa
File: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (raw, json)
Hash identifier: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=
Subject key identifier: 37:43:1C:8D:D5:D9:97:94:D4:9C:24:9A:73:7E:6E:21:B2:C2:7D:34
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 019426D9788E141B1A79F6496097BD53CD5C
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/N0McjdXZl5TUnCSac35uIbLCfTQ.roa
Signing time: Thu 02 Jan 2025 11:49:33 +0000
ROA not before: Thu 02 Jan 2025 11:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39307
IP address blocks: 185.210.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:78:8e:14:1b:1a:79:f6:49:60:97:bd:53:cd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Jan 2 11:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37431c8dd5d99794d49c249a737e6e21b2c27d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ab:8a:30:03:ba:1a:76:ad:16:38:41:cb:09:
e4:52:b6:9b:d5:75:1f:37:d0:b7:e5:aa:85:07:40:
88:30:2c:ae:2a:41:38:fb:95:d1:bb:bb:3d:25:d1:
52:5b:7a:09:c3:56:12:13:d6:f3:9b:aa:a4:a7:f4:
f2:8b:51:9d:9c:56:53:72:7b:07:ae:7c:e3:85:13:
48:ed:ae:20:86:41:97:ab:e3:15:f3:d4:9c:65:f4:
a9:f3:fa:d6:cc:ce:c8:03:6c:90:14:f3:4a:93:f2:
02:4d:1f:f0:d8:fa:70:b3:65:3d:09:dc:4a:1f:2f:
db:c7:8e:aa:70:03:d2:b9:6c:8f:57:35:f2:cb:25:
b6:dc:19:27:bf:96:d0:09:e8:2b:11:df:7a:82:58:
d9:d4:6d:62:63:e1:cf:01:68:82:81:29:23:e8:d6:
96:12:19:ff:ba:d8:7e:30:ad:35:96:8e:5c:ae:77:
07:6e:64:6c:64:e5:91:56:19:29:a0:48:bd:0e:cc:
8b:5e:fd:50:dc:0a:21:cc:7a:c6:31:c0:a6:92:c2:
02:19:67:74:1e:95:24:8d:c7:ba:31:b6:0a:63:3e:
44:5a:1a:80:77:54:81:9c:cd:56:9b:88:ed:2d:c3:
c6:b2:db:3a:7a:f6:54:73:44:11:5f:c2:78:e8:bf:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:1C:8D:D5:D9:97:94:D4:9C:24:9A:73:7E:6E:21:B2:C2:7D:34
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/N0McjdXZl5TUnCSac35uIbLCfTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.160.0/24
Signature Algorithm: sha256WithRSAEncryption
09:11:c0:5f:26:54:65:e9:49:86:a6:e2:08:32:8d:a8:e2:87:
fd:3a:e7:e0:26:79:2f:d0:a6:2e:c7:7e:dc:96:53:fc:b7:dc:
b4:1d:50:d2:6f:2d:e7:b5:76:b2:dc:de:4f:cb:fc:7d:50:b3:
87:68:98:18:2a:b5:85:0b:50:7e:5d:08:7b:a3:9a:81:d2:8a:
8d:5e:4a:c0:33:b1:a1:24:5f:0a:2a:04:cb:35:bf:fb:0f:d9:
e5:5c:1e:72:0e:f8:74:ae:fa:c8:14:bf:17:77:fa:c4:c9:73:
89:36:cb:7e:63:bf:76:d5:81:46:32:69:db:16:20:64:61:26:
e6:62:c9:13:13:82:e4:0a:fd:b1:2b:01:53:00:fd:7e:d5:0c:
32:b1:f8:d1:b9:d7:34:c7:e3:fb:5f:bd:52:c3:3b:34:8d:bd:
25:08:8f:25:16:18:e8:08:0b:da:9d:55:8f:71:50:33:b2:f5:
93:a9:c9:2f:1d:1f:5c:8e:e3:85:5b:c8:2d:ac:36:ec:43:71:
65:05:55:1c:59:55:ce:29:a9:59:dc:a1:63:52:c2:9d:bc:1d:
fa:ea:0f:14:ae:79:a9:d8:b0:7b:6e:16:9b:10:d4:42:7d:68:
51:e3:f4:b2:a0:e5:58:1b:59:b0:d1:61:5b:5f:86:18:ce:4a:
c2:67:0a:66
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQm2XiOFBsaefZJYJe9U81cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzI1Njc0NWJkMjczYzkxODZhZTI5NjM2OGEyMTE3ZDNk
MmNhZDkwHhcNMjUwMTAyMTE0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzQzMWM4ZGQ1ZDk5Nzk0ZDQ5YzI0OWE3MzdlNmUyMWIyYzI3ZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7auKMAO6GnatFjhBywnkUrab1XUf
N9C35aqFB0CIMCyuKkE4+5XRu7s9JdFSW3oJw1YSE9bzm6qkp/Tyi1GdnFZTcnsH
rnzjhRNI7a4ghkGXq+MV89ScZfSp8/rWzM7IA2yQFPNKk/ICTR/w2Ppws2U9CdxK
Hy/bx46qcAPSuWyPVzXyyyW23Bknv5bQCegrEd96gljZ1G1iY+HPAWiCgSkj6NaW
Ehn/uth+MK01lo5crncHbmRsZOWRVhkpoEi9DsyLXv1Q3AohzHrGMcCmksICGWd0
HpUkjce6MbYKYz5EWhqAd1SBnM1Wm4jtLcPGsts6evZUc0QRX8J46L8Y4QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDdDHI3V2ZeU1JwkmnN+biGywn00MB8GA1UdIwQY
MBaAFPnCVnRb0nPJGGriljaKIRfT0srZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jSldkRnZTYzhrWWF1S1dOb29oRjlQU3l0ay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNDRjYmIwLTFhZWUtNDQ5MC1hYzUy
LWM5NDFlNmE5MTM5Zi8xL04wTWNqZFhabDVUVW5DU2FjMzV1SWJMQ2ZUUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWQvNDRjYmIwLTFhZWUtNDQ5MC1hYzUyLWM5NDFlNmE5MTM5
Zi8xLzEtY0pXZEZ2U2M4a1lhdUtXTm9vaEY5UFN5dGsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC50qAw
DQYJKoZIhvcNAQELBQADggEBAAkRwF8mVGXpSYam4ggyjajih/065+AmeS/Qpi7H
ftyWU/y33LQdUNJvLee1drLc3k/L/H1Qs4domBgqtYULUH5dCHujmoHSio1eSsAz
saEkXwoqBMs1v/sP2eVcHnIO+HSu+sgUvxd3+sTJc4k2y35jv3bVgUYyadsWIGRh
JuZiyRMTguQK/bErAVMA/X7VDDKx+NG51zTH4/tfvVLDOzSNvSUIjyUWGOgIC9qd
VY9xUDOy9ZOpyS8dH1yO44VbyC2sNuxDcWUFVRxZVc4pqVncoWNSwp28HfrqDxSu
eanYsHtuFpsQ1EJ9aFHj9LKg5VgbWbDRYVtfhhjOSsJnCmY=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net