Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/KwnSHUkKazWxA-UlGNkJfBx24J8.roa
File: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (raw, json)
Hash identifier: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=
Subject key identifier: 2B:09:D2:1D:49:0A:6B:35:B1:03:E5:25:18:D9:09:7C:1C:76:E0:9F
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 01941FFA39A14E7D560286B122C66A84F199
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/KwnSHUkKazWxA-UlGNkJfBx24J8.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199749
IP address blocks: 84.39.32.0/24 maxlen: 24
185.47.80.0/24 maxlen: 24
185.47.81.0/24 maxlen: 24
185.47.82.0/24 maxlen: 24
185.47.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:39:a1:4e:7d:56:02:86:b1:22:c6:6a:84:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b09d21d490a6b35b103e52518d9097c1c76e09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:66:e9:9f:a3:4d:61:de:85:63:86:d7:25:
a2:06:3e:ef:4e:73:2b:8c:db:9b:79:ed:ed:db:41:
b4:22:15:19:96:99:f4:29:f8:54:0f:dd:e8:e0:c8:
2e:f8:d3:11:64:5d:68:d6:ec:07:a8:c7:e8:8d:5e:
4f:f5:52:a1:a9:e8:e0:79:c3:9d:e0:f7:82:6b:e2:
3f:eb:0f:6a:c0:7c:28:2c:19:4f:f8:a8:c1:5f:df:
0e:09:b8:1c:e6:33:8d:05:62:26:42:0e:88:47:09:
65:19:e7:d0:aa:6f:48:16:cd:24:3b:60:34:40:2a:
04:9b:1c:1e:8b:34:3f:07:56:52:a7:ff:99:2b:48:
ac:74:4c:90:0c:4c:86:39:f1:32:a2:a4:e5:30:fc:
be:1c:2b:97:d3:e4:c9:b4:eb:9d:5c:8d:2a:14:2f:
e3:c8:5f:ad:f4:41:9a:4b:c1:94:02:52:a4:0e:93:
50:52:9f:62:70:f0:d4:22:af:f6:e6:bd:07:1c:15:
0f:39:b2:d2:e5:52:7b:06:97:d6:a2:02:a0:84:94:
38:cb:de:2f:ca:fd:f2:60:34:af:33:d5:4c:a9:90:
d5:a4:be:22:63:c3:c9:a9:89:a9:e9:97:91:49:bb:
61:09:f7:c2:76:99:06:ae:0d:f0:05:0b:40:cd:d6:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:D2:1D:49:0A:6B:35:B1:03:E5:25:18:D9:09:7C:1C:76:E0:9F
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/KwnSHUkKazWxA-UlGNkJfBx24J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.32.0/24
185.47.80.0/22
Signature Algorithm: sha256WithRSAEncryption
58:4e:06:71:e2:d2:42:f5:5a:7f:a3:6d:a2:06:92:5e:e7:06:
47:2d:04:69:39:dc:fc:3e:5e:3c:0b:53:69:35:a2:2c:3f:06:
6e:e2:0d:58:5d:b7:94:8f:3e:ad:35:56:e1:90:48:f0:ec:3b:
eb:d0:22:d8:6a:d3:cc:88:95:f9:07:86:2a:3e:77:37:cd:b3:
05:3b:9b:bf:3f:13:0d:47:8e:77:b1:8d:7f:63:27:5a:05:b2:
fb:cb:20:37:e4:91:e0:0e:17:ab:6b:d9:d4:cc:4f:e3:38:80:
5e:d9:80:60:70:8c:1f:2a:21:7a:df:9c:aa:c0:14:d4:97:e1:
30:33:95:b7:9f:65:cc:d4:7b:56:93:f5:bb:02:35:0a:40:e6:
ce:27:2f:f1:45:0b:e4:1a:63:45:c8:8c:8e:38:d0:e9:64:b8:
e9:a7:6b:93:a4:f9:f8:e5:71:2e:29:35:91:79:e0:b2:06:f0:
13:39:e0:fe:5b:12:94:22:8a:52:9b:6d:8e:d9:a3:3a:1f:5b:
a8:72:65:3a:d8:1a:1b:17:b6:6d:c2:80:58:ef:26:2e:96:9c:
91:87:13:db:a7:3b:6b:b2:65:e2:96:e7:13:35:b6:51:51:27:
85:04:4d:00:e3:0c:a3:4e:cb:45:34:f3:ad:12:0b:69:af:a1:
d7:32:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net