Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/6yVMq5BTt8MOOejBYcSjDgADz6M.roa
File: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (raw, json)
Hash identifier: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=
Subject key identifier: EB:25:4C:AB:90:53:B7:C3:0E:39:E8:C1:61:C4:A3:0E:00:03:CF:A3
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 01942143E75167AE4303B71DFDD85F2E27AF
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/6yVMq5BTt8MOOejBYcSjDgADz6M.roa
Signing time: Wed 01 Jan 2025 09:48:05 +0000
ROA not before: Wed 01 Jan 2025 09:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31122
IP address blocks: 185.69.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e7:51:67:ae:43:03:b7:1d:fd:d8:5f:2e:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb254cab9053b7c30e39e8c161c4a30e0003cfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:47:66:81:a4:7c:26:5a:76:0e:46:ef:24:
cc:3a:da:4a:7c:ed:2e:16:48:ed:2c:7b:e3:15:57:
95:17:1e:eb:fa:6d:b0:7d:6a:67:1c:25:7f:15:76:
c1:a7:18:0c:c4:bc:34:ff:01:dd:21:0b:ce:7c:02:
52:76:30:ca:51:84:b4:1b:f8:04:2b:1a:1b:c9:f4:
96:fb:87:0a:38:ef:9d:a7:a4:b2:f5:2c:34:6e:40:
71:2e:8c:53:c3:c9:53:7e:78:44:0f:49:a3:ec:cb:
42:9d:68:1e:e2:25:a1:00:24:80:3a:b3:58:cf:ac:
2f:5b:f5:bf:6a:65:3e:e9:43:78:f9:07:85:a1:c1:
2f:6d:bd:c5:89:d6:5d:e4:bb:dc:75:95:0e:af:5e:
46:50:93:9e:f7:13:94:e2:af:db:83:48:df:94:0d:
8b:63:27:ed:e0:50:46:1b:d3:8d:72:15:9a:9c:b7:
88:33:4d:b3:af:5b:0f:24:06:91:3d:67:c2:cc:a5:
95:5a:b8:d7:33:9d:b9:3f:64:f9:6d:63:ce:eb:94:
6d:31:4e:57:eb:60:5b:c2:4b:7f:29:1e:04:26:fe:
8a:5c:93:48:07:38:79:8c:49:7e:a5:09:3e:05:f6:
80:9a:2b:89:55:ca:a7:21:7d:db:9e:64:f0:4b:35:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:4C:AB:90:53:B7:C3:0E:39:E8:C1:61:C4:A3:0E:00:03:CF:A3
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/6yVMq5BTt8MOOejBYcSjDgADz6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c1:02:87:b3:92:a7:2d:f0:ae:1d:bb:ff:12:5c:10:a2:6a:
ce:fe:48:f9:ca:3c:ef:7c:1c:c1:d1:40:60:5c:e2:0c:9a:1b:
31:75:fc:89:51:b5:fc:c3:8d:bf:c1:88:e2:4a:d8:8f:64:9c:
a0:67:8c:7d:40:52:28:a8:37:12:9f:99:3d:7a:07:7d:f3:04:
63:25:4b:f9:0a:8c:e4:e9:e9:b7:7a:5d:96:6c:65:6d:0a:35:
98:a2:23:59:73:2b:d1:13:c3:aa:06:61:a0:a4:7d:bd:3e:3a:
89:4b:59:a6:54:96:45:53:1a:3d:76:22:1c:26:e6:94:88:89:
24:cb:f3:a2:3c:25:15:0d:53:85:14:ce:0a:3c:53:ac:d2:65:
ab:f4:a7:57:b9:69:dc:f5:be:06:b3:5f:89:19:1c:77:02:a9:
51:7b:2b:eb:6e:ed:bc:67:25:5d:76:f3:57:db:0f:43:46:71:
a2:6d:ab:09:e2:11:92:0c:ab:8a:14:84:87:04:1a:d2:c7:8d:
3f:b8:c8:82:2c:c3:54:c2:c6:43:f2:9b:17:72:23:f3:d3:be:
4f:68:b8:61:51:00:bf:e0:cc:cc:75:14:07:f6:a0:bc:d5:17:
ba:3f:c4:f3:6c:e0:6d:74:9b:27:ad:23:02:3c:4f:57:78:3b:
f4:11:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net