Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa
File: 1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa (raw, json)
Hash identifier: SF5ovM+mleomLfSZp/NHDAE5s82AVbxDbWTJFXrQrE0=
Subject key identifier: F9:D4:AB:FD:BC:2B:B1:4C:2F:7D:CF:6A:40:4B:EC:5C:82:CC:BF:7C
Certificate issuer: /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial: 019424457E8727B1ADB9C753E72EC10C39F7
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56974
IP address blocks: 185.44.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7e:87:27:b1:ad:b9:c7:53:e7:2e:c1:0c:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9d4abfdbc2bb14c2f7dcf6a404bec5c82ccbf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:1f:08:51:38:8d:65:d8:f4:32:81:a3:74:
04:da:eb:66:3a:2e:d2:c7:8b:e7:d8:9f:6f:04:55:
6a:35:6b:e9:cd:3a:e6:7d:9f:29:03:e6:6b:04:38:
f7:21:4e:fe:33:01:0d:93:b1:d1:a2:48:e5:1a:9c:
0a:40:fd:b1:6b:fe:3c:ee:c4:97:70:45:4e:6c:4c:
e6:13:cc:e4:cf:9a:6d:a9:a9:bb:b3:44:18:1d:ee:
a5:0b:96:35:d8:f3:98:b0:53:66:4a:5f:70:51:60:
04:c2:27:d3:26:db:28:d5:65:61:07:3d:f0:07:ce:
9e:a9:b5:22:7f:61:4b:83:c6:fa:8d:a7:46:ae:9f:
24:45:ee:06:14:fb:c8:3f:f0:04:1c:36:14:a3:9e:
de:9a:41:55:bb:b9:e1:ce:e8:d2:9d:8f:a8:b6:83:
cc:45:e8:0e:70:f9:e1:e3:33:9c:e5:36:6c:55:1a:
99:da:cd:3d:be:d6:ea:91:74:23:37:ce:c8:9a:d0:
b7:20:1d:5f:20:b7:6b:6a:56:b5:3d:04:50:58:87:
2c:cd:79:ee:45:8f:54:1a:c3:b0:54:0f:04:30:cf:
2f:cb:54:23:4e:4f:28:e0:26:f6:66:9c:a6:03:25:
2e:75:57:62:83:04:93:63:12:c1:73:ea:ea:c5:c9:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:AB:FD:BC:2B:B1:4C:2F:7D:CF:6A:40:4B:EC:5C:82:CC:BF:7C
X509v3 Authority Key Identifier:
keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.228.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:80:2a:d5:1f:d7:47:d1:d8:74:59:7a:0f:8d:92:c2:8d:19:
30:55:66:45:cb:a6:82:9d:52:0f:41:7a:46:3b:eb:41:06:a5:
48:6a:cf:fe:67:7e:dc:93:b8:c0:5a:8c:8c:a2:74:3a:5e:3b:
51:8d:b7:cd:e8:bb:36:d3:14:8b:31:b4:ff:53:15:42:a1:13:
db:5b:1b:fc:d8:69:ee:b1:31:57:c0:c1:9c:bf:7f:a8:4a:1a:
84:5d:e0:f3:e3:7f:46:8b:12:e4:c0:05:f8:46:75:35:27:3c:
54:69:23:e9:d7:aa:97:b5:b4:26:de:df:9c:a9:45:ff:e3:98:
7b:a3:57:c0:5a:b6:7b:40:70:7d:53:26:8e:30:2c:7d:71:eb:
f5:6a:60:e1:c0:1f:11:d3:d3:73:15:1b:92:d4:fa:1f:ed:04:
e8:a5:2b:6c:3f:74:ba:14:f1:6a:f2:fa:cb:0f:09:2c:3c:43:
b3:55:f9:1b:dc:e6:2c:79:71:14:a8:93:e0:dd:8c:11:01:b6:
b2:d3:75:3c:72:79:67:bd:a7:67:88:b0:78:86:9d:2a:ae:6f:
f6:83:07:d8:fb:63:3e:4f:f3:ea:3f:73:92:c5:01:fe:af:8f:
d1:e3:fc:2a:e9:10:13:15:05:1c:7b:ac:63:8d:6e:d1:10:4f:
7d:af:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net