Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/p906kmkgY0qUYyVJw53cck20ZMc.roa
File: p906kmkgY0qUYyVJw53cck20ZMc.roa (raw, json)
Hash identifier: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=
Subject key identifier: A7:DD:3A:92:69:20:63:4A:94:63:25:49:C3:9D:DC:72:4D:B4:64:C7
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 019420680AAA07C21FE0E0E869EBBB0D980F
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/p906kmkgY0qUYyVJw53cck20ZMc.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43652
IP address blocks: 185.83.248.0/22 maxlen: 24
195.200.252.0/23 maxlen: 24
2a05:a040::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0a:aa:07:c2:1f:e0:e0:e8:69:eb:bb:0d:98:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7dd3a926920634a94632549c39ddc724db464c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:00:dd:0b:9a:f9:cb:51:36:b9:99:c9:5c:
cb:75:56:35:da:40:eb:5e:6e:1e:77:5a:61:59:6e:
57:15:1d:e9:03:67:eb:3c:1d:99:08:db:ef:58:2b:
2c:44:38:2a:ab:02:71:80:1d:73:04:44:17:f0:8a:
b7:a8:6d:67:6e:22:60:d7:06:90:81:a6:ff:40:a1:
36:ef:5d:1f:53:50:50:03:31:b9:f6:3c:27:94:47:
c1:75:dd:8d:75:bd:39:ef:29:e4:a1:9c:3f:54:2f:
f7:7d:b3:5e:2f:7c:c0:82:dd:03:d3:75:1c:13:27:
dd:e4:dd:d0:8c:25:c2:7e:e7:86:08:cc:33:53:23:
e9:a6:3d:6b:9c:d8:8a:a7:1a:07:8b:99:c7:ca:32:
d7:09:06:c9:80:aa:55:48:ce:68:2a:88:7c:73:04:
f6:0e:b0:4f:14:97:71:9f:c7:53:45:1d:31:21:e9:
21:f1:04:51:83:a7:63:7f:47:7e:eb:a4:b2:e4:63:
f5:76:db:94:0b:68:98:f8:f4:e6:a2:1e:ab:2f:b4:
65:9c:92:c7:48:fa:6a:9f:19:64:5e:b5:ed:eb:d6:
4d:8e:2c:ea:53:78:ca:3e:cc:b2:18:69:4b:44:26:
75:53:3a:09:68:b8:05:30:ff:3c:be:35:94:61:a6:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:3A:92:69:20:63:4A:94:63:25:49:C3:9D:DC:72:4D:B4:64:C7
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/p906kmkgY0qUYyVJw53cck20ZMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.248.0/22
195.200.252.0/23
IPv6:
2a05:a040::/29
Signature Algorithm: sha256WithRSAEncryption
5c:ea:36:30:e1:ee:7e:4d:f9:d1:89:2c:26:45:39:85:20:03:
97:8d:69:32:98:96:24:cb:f2:5a:75:60:ca:68:14:27:96:6f:
b2:73:9a:8f:2c:99:7d:cd:0b:d2:c3:44:b8:ce:35:46:d0:a3:
15:0f:af:5f:83:1f:ad:39:a9:56:5c:1e:a1:8e:43:52:b9:ea:
9e:90:cb:57:1f:fc:b7:73:06:60:a2:db:0e:a0:34:4a:40:1d:
02:e0:c3:1a:f0:bf:3f:eb:f6:aa:53:95:28:6c:62:c5:c3:4e:
cc:fa:b9:23:93:cd:9f:1e:47:71:88:9f:b7:bd:eb:0e:54:ec:
57:c1:63:b2:ae:34:22:9a:f7:24:40:b8:af:98:b9:b8:f1:25:
0d:ff:d7:22:e0:b4:fe:8d:40:2f:1f:3d:40:1a:23:fd:ce:5a:
c6:87:cf:82:ff:fb:a7:c7:d6:4f:e9:ca:9a:40:e0:8a:9a:68:
e8:af:d9:65:96:5c:a7:32:ec:15:54:ef:79:f7:8d:46:84:0c:
e1:77:7e:bc:fc:57:79:68:5b:92:1b:90:3a:fc:23:e9:f0:45:
5f:c2:a2:37:88:f1:67:40:e2:4d:ef:56:35:52:fe:ec:f9:97:
b5:33:cd:16:8a:59:46:f8:af:da:5e:0c:52:02:2c:76:c5:95:
75:40:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net