Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa
File: gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa (raw, json)
Hash identifier: knELgWCfA/Sf8Z/AQKl4MF48MxHULiqnBptb464jAhc=
Subject key identifier: 81:04:58:82:30:EA:37:BE:3B:61:C1:52:67:FD:0B:EC:6F:18:D1:0C
Certificate issuer: /CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Certificate serial: 0194258F59740321020659A31C3E9E5E956B
Authority key identifier: F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207996
IP address blocks: 185.203.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:59:74:03:21:02:06:59:a3:1c:3e:9e:5e:95:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f724cba521c080db72a6e54a1b8cf4495cbbc7d6
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8104588230ea37be3b61c15267fd0bec6f18d10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:f4:78:54:a0:1a:6e:6d:25:eb:38:33:ae:
e8:f0:b7:c9:74:83:ea:f0:19:ec:08:bf:c0:1b:ab:
dd:a2:c5:a9:04:b3:3e:72:58:e0:d3:8f:75:6b:6a:
b2:a0:f3:09:5a:3f:ca:02:0f:d2:fa:ff:ff:94:6b:
be:a8:97:6a:82:0f:c1:32:54:97:34:b5:d4:67:bb:
d8:11:76:d0:87:43:20:58:69:e8:92:83:65:ca:4b:
14:67:b4:2e:4c:ba:8a:37:0f:1b:34:09:95:aa:36:
c0:34:53:98:34:08:a6:0b:2b:e6:a3:c7:1d:3b:56:
89:8f:29:02:bd:08:07:d2:ee:0e:3f:f6:01:76:38:
79:0a:92:fd:e4:80:d1:a2:a8:70:66:41:be:9c:91:
1c:b2:66:cb:d7:4b:27:3a:9c:20:e4:71:18:e0:0b:
06:5b:92:24:52:7a:6f:59:30:ef:d8:bc:eb:2b:3b:
12:cf:2d:d7:68:95:c6:60:6b:01:1f:07:0b:7e:f7:
2b:0e:9b:83:0f:26:f9:f8:aa:72:1f:8c:5e:90:a4:
2d:c4:51:8f:2d:94:6c:a2:27:00:8a:63:3c:46:17:
14:5f:77:7d:b2:75:3b:6e:a9:40:dc:71:e6:a3:5c:
5c:34:6e:ee:ca:ec:53:d9:d5:1c:5f:f5:e5:d7:93:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:58:82:30:EA:37:BE:3B:61:C1:52:67:FD:0B:EC:6F:18:D1:0C
X509v3 Authority Key Identifier:
keyid:F7:24:CB:A5:21:C0:80:DB:72:A6:E5:4A:1B:8C:F4:49:5C:BB:C7:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yTLpSHAgNtypuVKG4z0SVy7x9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/gQRYgjDqN747YcFSZ_0L7G8Y0Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/48b50b-adfe-4dfb-ad80-103b206ba28b/1/9yTLpSHAgNtypuVKG4z0SVy7x9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.113.0/24
Signature Algorithm: sha256WithRSAEncryption
57:65:dd:3d:3c:6e:b6:32:b1:93:e2:a2:d8:e4:02:22:89:13:
70:a5:df:ba:96:8e:6d:d3:49:fc:90:6c:ae:41:b8:c0:ff:8a:
15:f2:00:b8:0a:91:59:17:ed:5b:a5:02:d3:39:13:fc:74:e4:
6f:12:35:f9:b8:67:9e:8a:3f:20:6b:c5:ac:1e:38:ec:64:5b:
aa:b6:bb:ac:e4:08:10:ca:0a:ae:4c:e6:7c:ea:9f:a5:34:56:
6c:b6:37:a1:c9:3f:ad:f5:32:74:d0:13:9d:f4:3c:a2:8d:70:
2b:cc:b8:34:83:d9:0a:aa:2c:b9:c5:e3:a3:cd:26:4c:5e:22:
dd:87:76:94:92:ea:fa:d0:cd:27:a8:03:60:2d:c9:7e:9e:ff:
6d:f6:56:47:34:ab:f0:d3:3b:bd:8f:30:b5:d5:f2:06:2d:83:
e0:ac:a8:7c:a3:65:84:de:93:cc:70:08:62:51:c7:9c:21:04:
70:dd:ff:50:08:cd:03:00:ac:ce:0a:56:86:ea:7e:67:68:27:
e1:71:87:c4:0e:6d:40:f3:73:03:29:3d:74:7d:33:31:c9:94:
85:d9:eb:3b:83:3d:dc:40:fd:aa:9b:e6:16:e6:a0:10:9f:2c:
25:40:56:c7:ef:53:3a:6e:09:d7:66:e9:33:b3:41:ec:53:bc:
e7:26:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net