Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/noXpNkRfHqMEolb1UNkEr_hyFQc.roa
File: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (raw, json)
Hash identifier: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=
Subject key identifier: 9E:85:E9:36:44:5F:1E:A3:04:A2:56:F5:50:D9:04:AF:F8:72:15:07
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 0194252219E86A164763A948DB36637FD5F1
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/noXpNkRfHqMEolb1UNkEr_hyFQc.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34447
IP address blocks: 185.97.92.0/22 maxlen: 22
185.97.94.0/24 maxlen: 24
185.97.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:19:e8:6a:16:47:63:a9:48:db:36:63:7f:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e85e936445f1ea304a256f550d904aff8721507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:31:cd:49:95:72:b9:34:c2:64:36:05:0d:
58:b6:1e:69:43:d0:d9:75:b2:db:3f:c1:f0:18:14:
ed:b1:0c:4b:a6:05:5e:b9:5f:46:8b:39:91:72:89:
29:d0:08:f3:56:fd:3b:3a:22:03:44:8b:c5:af:45:
b1:fb:9b:64:ce:57:36:6f:94:2f:d7:f8:97:3d:61:
6a:12:9f:e0:fe:e6:f6:7d:8a:e0:b4:92:74:92:4e:
07:b4:a0:e0:5f:90:5d:1c:8c:ba:0b:10:4d:06:50:
c4:60:df:83:c2:85:b8:08:7b:67:b0:c3:ca:54:8e:
c2:9d:ce:00:c5:00:f2:1d:8a:e5:a2:70:c6:41:00:
15:41:d5:64:1f:f8:e2:81:47:90:af:03:ea:40:1f:
10:83:2f:2c:9b:0f:6c:3d:40:5f:48:6e:80:f9:71:
ee:33:77:2e:23:ed:d8:4b:09:32:11:3e:1f:88:7a:
e7:9a:4c:10:f2:a9:67:2a:1a:24:49:4f:9a:c2:36:
9a:41:f9:3c:9e:6b:99:9a:d2:40:d5:c7:9a:b4:01:
08:4c:fd:d8:04:16:e9:7c:cd:18:62:76:80:86:f1:
8e:54:f5:b0:31:c0:32:b1:27:b5:67:fa:9d:7f:36:
0c:06:28:5a:92:bd:96:eb:a1:45:14:9e:e5:99:7b:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:E9:36:44:5F:1E:A3:04:A2:56:F5:50:D9:04:AF:F8:72:15:07
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/noXpNkRfHqMEolb1UNkEr_hyFQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.92.0/22
Signature Algorithm: sha256WithRSAEncryption
74:32:2c:17:e4:a5:8b:7e:fa:c9:3a:a7:1b:82:53:30:7a:c4:
3c:bd:0a:db:c7:b4:6c:22:79:bb:6d:e1:03:73:4b:19:f2:ef:
2f:f3:21:12:f0:b7:c2:1d:2d:22:80:c6:f9:15:75:bc:0e:d1:
5e:f6:fd:ed:03:3b:1b:d0:fb:3c:f0:54:13:21:bd:60:03:76:
29:d9:36:02:6a:94:bf:40:83:fe:fa:bc:19:58:bc:ab:3e:a2:
9a:71:40:18:e7:ad:1f:e8:a1:00:52:79:99:23:3e:e2:fc:15:
21:31:89:49:0f:7e:33:f8:d6:1c:16:3b:68:52:48:36:0c:8a:
c4:76:12:93:7a:22:41:0b:d1:11:13:fe:39:43:a4:32:f7:72:
9d:68:ee:50:52:a4:42:82:4c:da:ca:05:48:5f:22:e0:ad:9f:
a6:f9:43:12:ff:f1:04:19:29:77:56:c1:f0:ec:7b:52:48:9d:
fc:ae:c2:48:9d:17:23:24:c9:c8:6a:ef:98:ff:10:d1:78:b2:
51:ff:ba:09:39:06:ec:00:3b:12:97:01:44:44:79:88:b5:89:
df:81:6a:90:a3:29:96:e4:97:86:4f:05:6d:7b:e2:02:e9:57:
ab:4b:d8:1c:dc:9f:c9:69:12:64:6f:e1:9b:cc:2c:61:c1:b0:
85:d5:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net