Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa
File: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (raw, json)
Hash identifier: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=
Subject key identifier: 9F:D9:AE:24:84:41:C3:87:81:BD:93:F5:86:FB:7E:60:A5:A1:43:58
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 019425223BA860F79F597F4D94D5125F7EBD
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62340
IP address blocks: 92.43.166.0/23 maxlen: 23
185.39.112.0/23 maxlen: 23
185.39.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3b:a8:60:f7:9f:59:7f:4d:94:d5:12:5f:7e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fd9ae248441c38781bd93f586fb7e60a5a14358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:a4:73:5b:7f:ff:60:d0:4b:63:8c:41:d6:
9f:ae:b6:96:58:3b:0c:9d:10:66:8a:13:ff:ae:11:
e2:d1:54:ff:fe:24:23:14:b5:15:a2:b8:8f:84:2f:
06:74:15:e0:0b:fc:7f:35:77:f8:89:d8:4e:2a:df:
93:0b:cb:a2:65:d1:3a:76:af:b0:10:5a:de:77:4d:
f9:f9:9f:55:93:dd:04:67:e6:37:01:f8:bd:ab:4a:
87:38:68:40:77:28:4f:91:16:f5:99:c2:e2:1e:79:
c6:de:33:8a:3a:f3:7e:0e:f6:32:92:bb:58:b1:8f:
9a:a2:dd:8b:d7:b8:b1:65:c6:ae:26:18:6a:98:ce:
6c:a5:d2:10:b6:43:78:57:1c:17:f5:01:f3:5d:da:
8d:82:9e:5d:e6:10:18:e7:f7:36:e2:01:39:44:d5:
81:83:10:99:c7:f9:aa:18:72:4d:be:3e:ae:bd:a7:
81:61:e9:51:18:32:d3:8d:3b:60:da:ae:cd:5f:c0:
77:e5:48:e1:5a:3a:3d:63:c4:26:ea:da:5a:e1:e9:
a0:74:9f:a5:01:9f:8c:08:a4:8c:cc:54:e6:4a:0c:
89:a7:61:60:de:42:23:7c:84:c1:fd:4b:2a:07:56:
e1:45:8e:6f:be:75:18:ca:79:4a:e6:86:83:b5:76:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D9:AE:24:84:41:C3:87:81:BD:93:F5:86:FB:7E:60:A5:A1:43:58
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.166.0/23
185.39.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:40:2d:ce:a4:53:c8:58:57:6f:bf:39:a9:5c:55:61:6d:fe:
f0:81:0b:87:9f:4f:43:83:96:4f:c7:4d:bf:da:60:85:07:db:
48:3f:0e:b9:e8:83:1a:c5:6a:61:6b:3a:f0:16:e9:c6:ed:2a:
4f:7e:02:38:22:40:1e:5b:45:e8:9e:33:88:73:97:61:25:95:
8e:8e:53:22:44:1e:dc:ea:54:23:45:96:3c:53:f1:00:cf:8b:
0f:3e:96:50:40:46:f8:5c:e5:ff:7c:bf:06:d6:59:e8:f6:74:
50:ee:07:0a:b5:f7:0b:32:ad:93:a9:a2:34:ab:c2:a2:cb:6c:
db:d9:f8:7f:57:c1:92:70:49:f2:35:0e:00:26:bd:e2:52:63:
87:b7:51:7b:ae:08:ca:9c:68:12:90:fc:80:c0:f2:5f:94:73:
76:75:e4:a1:a4:28:a4:96:cd:9d:9c:86:73:cc:31:08:f5:4b:
c4:00:13:a5:8d:41:f4:3c:c0:24:17:47:1e:fa:c1:1f:5f:16:
3d:f7:ca:4d:2b:69:aa:ac:19:e4:1f:e6:2d:79:8c:51:6b:2d:
a1:fd:5f:df:2d:f9:29:c2:d9:c4:81:9b:de:50:47:64:89:76:
79:74:8f:ed:73:3d:43:15:b6:1e:bc:9c:c5:d0:cc:e4:2d:43:
07:66:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net