Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa
File: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (raw, json)
Hash identifier: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=
Subject key identifier: 53:D3:5D:E2:50:35:9D:F6:20:15:BC:C6:D9:9A:66:7C:A8:EB:43:D7
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 019424B37AA24277F8CC71650A3FB562A718
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa
Signing time: Thu 02 Jan 2025 01:48:49 +0000
ROA not before: Thu 02 Jan 2025 01:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24953
IP address blocks: 157.97.68.0/22 maxlen: 22
185.20.236.0/22 maxlen: 22
185.232.188.0/22 maxlen: 22
2a00:5320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7a:a2:42:77:f8:cc:71:65:0a:3f:b5:62:a7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d35de250359df62015bcc6d99a667ca8eb43d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:e9:41:8e:e8:97:b2:00:57:c9:0e:6a:5c:
83:b5:ce:7c:9e:d1:e5:46:c8:2c:cd:eb:8d:35:13:
34:00:fa:85:6b:80:f4:8b:80:60:c1:02:cc:7e:3a:
eb:6a:66:85:b9:12:d9:5d:03:12:29:81:a2:d9:48:
bf:b3:b9:97:b2:3f:1d:3c:13:cb:50:3e:b7:de:15:
4b:ad:a1:4d:a7:20:c1:38:c5:bb:6d:ed:a3:ce:7e:
ad:c8:2b:8d:13:c8:32:fa:bf:df:42:85:6b:b4:65:
b6:a5:5e:14:1a:7c:28:ec:7c:89:41:87:04:3a:0b:
31:9a:ad:a1:8d:f7:08:e9:03:db:ed:f2:54:48:18:
a2:cf:a3:ad:96:3e:1f:cb:4e:95:65:79:6e:86:da:
67:58:1c:16:9b:6f:73:fb:4c:c9:49:95:a0:55:50:
c0:62:67:a5:a3:9d:26:f1:22:58:18:bd:da:82:3a:
86:c8:ce:82:7a:af:2c:d5:8a:0d:21:69:6d:c7:82:
70:0e:6b:4c:53:2a:79:c5:c7:2c:62:a0:47:cb:49:
84:97:3f:90:b5:f7:5f:b1:79:1f:ed:66:27:a5:b8:
59:7b:b5:a9:0e:d1:b3:4b:69:24:b4:72:41:99:db:
d7:43:37:e0:bb:73:91:d8:4a:42:a3:68:1a:82:b1:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:5D:E2:50:35:9D:F6:20:15:BC:C6:D9:9A:66:7C:A8:EB:43:D7
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.68.0/22
185.20.236.0/22
185.232.188.0/22
IPv6:
2a00:5320::/32
Signature Algorithm: sha256WithRSAEncryption
09:f1:5b:cb:7a:3a:7e:ef:de:8b:9f:f9:90:57:aa:ed:f2:f5:
38:bf:51:c3:ea:15:71:3a:b5:76:ee:d2:b7:aa:82:43:f9:ad:
a1:e0:8f:e8:58:32:b3:c0:15:72:3f:ba:20:8d:14:6d:a4:d0:
e7:83:7e:7a:85:88:90:f2:46:01:e2:5c:41:23:23:2b:05:a8:
82:26:e9:d5:90:06:17:02:df:48:ce:a3:f0:72:08:76:27:8f:
38:41:13:fd:17:f5:37:75:a7:0b:f6:41:91:7b:95:06:ff:be:
ce:86:6a:6c:ca:f5:81:73:41:0f:d3:93:a2:22:77:00:7b:91:
a3:e5:1c:e8:83:dd:c1:81:9c:5f:54:80:84:b6:b6:70:d7:fa:
af:34:09:15:9c:f8:eb:c1:44:49:71:01:75:37:7f:9b:f0:6e:
28:2e:fa:0f:ca:04:8f:73:15:eb:28:e9:15:c2:07:3a:43:11:
a0:48:9e:de:58:da:f7:ad:d8:90:ac:a5:d2:a9:aa:9d:30:33:
fc:e2:c1:61:44:c9:7b:d0:7e:b1:d1:d1:29:ae:f9:82:80:7e:
55:a6:4e:29:6e:d8:cf:0e:f9:1c:45:ae:67:93:94:0d:04:31:
0d:42:40:99:c8:0b:88:cc:4c:8d:16:3d:78:9d:81:a8:f0:2f:
7c:27:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net