Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/UezMgLKKI-WhO1czQILLBRClTv8.roa
File: UezMgLKKI-WhO1czQILLBRClTv8.roa (raw, json)
Hash identifier: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=
Subject key identifier: 51:EC:CC:80:B2:8A:23:E5:A1:3B:57:33:40:82:CB:05:10:A5:4E:FF
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019427B64C1EA2F949AB812F81067C123B4D
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/UezMgLKKI-WhO1czQILLBRClTv8.roa
Signing time: Thu 02 Jan 2025 15:50:45 +0000
ROA not before: Thu 02 Jan 2025 15:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203273
IP address blocks: 185.95.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4c:1e:a2:f9:49:ab:81:2f:81:06:7c:12:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 2 15:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51eccc80b28a23e5a13b57334082cb0510a54eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:dc:af:da:a6:34:30:25:a6:e3:ae:2b:46:
2d:b4:80:57:f2:f8:b3:6d:c8:af:68:f9:3b:92:90:
39:ff:9d:43:e1:f4:0b:24:ef:7a:4c:03:ab:db:f5:
41:7a:1c:96:19:76:5d:c2:a5:80:72:4e:3e:69:71:
a0:dd:04:77:da:02:d2:b8:ef:0d:ba:e0:a0:6c:be:
ca:4a:cb:c2:6a:48:e6:e0:8f:82:92:03:4b:5d:c1:
ac:5e:cc:77:2b:ef:82:7d:2f:43:e2:f5:38:80:1d:
99:cf:69:c5:5c:ec:f7:01:5b:f9:46:e0:ca:85:18:
45:67:cd:09:cd:fb:d0:b6:f2:f9:3e:1a:d9:3b:4b:
2e:73:57:36:96:35:94:66:50:8e:bc:7d:d5:d7:df:
37:57:6b:c7:35:49:7c:30:1f:2e:c9:bd:75:4e:53:
1d:9e:41:a2:d0:f7:32:f2:4f:6e:ab:4f:ac:9d:35:
5c:68:2a:9e:0e:66:92:ab:a9:e9:ef:23:9b:19:c8:
43:7b:04:42:f3:72:2e:a9:38:4a:4d:1e:40:c3:37:
a7:b3:17:35:45:57:83:d9:f9:1c:d8:4f:09:cb:19:
07:44:5f:9c:f6:70:3a:55:6c:32:16:aa:23:c3:c6:
45:55:4b:61:24:e4:87:1c:91:c2:05:cb:4f:77:48:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:CC:80:B2:8A:23:E5:A1:3B:57:33:40:82:CB:05:10:A5:4E:FF
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/UezMgLKKI-WhO1czQILLBRClTv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.4.0/24
Signature Algorithm: sha256WithRSAEncryption
af:9e:3e:29:e4:ec:d0:7a:4e:cc:71:7f:fb:b6:cb:f7:89:5f:
51:c9:35:78:a6:90:c0:60:88:1e:38:9e:41:a5:cf:01:de:3b:
ca:e4:86:93:52:fb:81:94:06:95:89:a2:07:85:c4:6a:b2:77:
ab:b8:00:00:d3:72:a5:45:d1:67:30:33:0b:39:73:26:b8:7a:
7d:f6:1f:b8:a6:84:19:5d:27:8c:20:74:1e:75:99:94:cb:e9:
d6:d1:da:d8:38:56:53:87:12:68:8a:7b:09:22:fd:e3:09:8a:
d1:86:b4:e5:8d:ab:32:5d:83:83:f4:0c:92:33:23:71:2a:6c:
20:d8:d1:50:d2:04:49:c1:51:cb:d3:ca:11:fd:ed:4b:9c:af:
ef:1f:34:f7:0e:9f:23:f6:f9:ad:da:f1:44:7c:c5:77:30:9b:
6f:f1:a6:a7:ce:a1:e3:91:f9:7f:0b:97:58:bf:29:06:01:8f:
52:06:ab:9d:b4:d4:b8:aa:b8:37:36:61:ce:46:66:51:e0:b7:
ab:c5:d4:3e:c3:ec:d9:58:f7:0b:4b:5e:c2:e3:ea:8f:09:9d:
55:aa:35:a7:62:ea:4c:f4:5b:4d:c5:8d:78:63:ee:3b:04:e3:
57:3a:cb:fa:56:f9:3e:84:68:92:32:a4:20:28:88:6d:80:83:
08:c1:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net