Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/l6NuhpIFjug9aR50hHY9zndshII.roa
File: l6NuhpIFjug9aR50hHY9zndshII.roa (raw, json)
Hash identifier: hvqFGCQClSUIMBrBN8lIb1eSZFaogGVgQNbsBPhOLY4=
Subject key identifier: 97:A3:6E:86:92:05:8E:E8:3D:69:1E:74:84:76:3D:CE:77:6C:84:82
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 01942748252796846AC57D890CAC96D93560
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/l6NuhpIFjug9aR50hHY9zndshII.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57935
IP address blocks: 185.104.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:25:27:96:84:6a:c5:7d:89:0c:ac:96:d9:35:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97a36e8692058ee83d691e7484763dce776c8482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:44:34:cf:db:f1:45:92:82:14:da:0f:0d:
f5:7b:fe:57:32:ef:e0:84:8f:94:b4:b6:7b:1f:b1:
9f:79:8e:dc:0e:b7:c0:5b:08:67:cc:e4:7c:a1:b0:
46:81:bc:5a:38:36:9c:07:e9:bf:2c:47:04:fa:98:
7d:aa:c0:6c:bc:62:83:e5:e4:b4:24:29:ad:7e:3e:
6c:ef:a8:ce:7f:b0:5c:f1:17:8e:7f:74:f3:59:ac:
3b:76:36:75:ad:4e:e3:58:6b:12:4e:07:e1:b3:8b:
0b:be:73:1c:d7:54:4c:84:34:37:61:71:51:6d:d8:
06:f7:67:2e:04:c4:ce:c9:bd:bd:02:0a:3d:5d:da:
85:70:4d:74:d3:be:cc:88:0f:95:25:1a:86:fb:20:
b2:ff:b6:43:e0:b6:5e:7b:b4:0b:b8:c0:bf:0d:46:
16:c9:f1:5f:16:f6:6c:d2:28:47:44:1b:07:22:f0:
ae:29:c8:ce:64:16:dc:f6:d7:2d:11:75:b0:4a:5e:
1d:d4:e9:92:16:0f:0f:f3:db:68:62:dc:db:96:88:
c0:38:44:5b:4a:e2:44:6b:3e:1d:68:c6:51:34:cf:
a7:16:68:df:9e:91:a0:9b:51:4d:dd:4b:ef:ee:dd:
72:3b:1b:14:d5:d7:69:a7:27:28:b4:5f:d1:01:e9:
6e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A3:6E:86:92:05:8E:E8:3D:69:1E:74:84:76:3D:CE:77:6C:84:82
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/l6NuhpIFjug9aR50hHY9zndshII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:29:ce:11:44:06:4c:50:69:bb:8e:dc:a7:6a:36:c7:fb:99:
45:6f:b0:d9:d4:f5:3e:a0:25:64:1e:ed:5b:15:ff:92:90:4a:
24:9f:4b:f3:c6:8f:7b:62:fd:23:f6:af:e1:56:2c:c3:4d:b6:
7d:00:6e:3c:ef:89:73:47:d7:d0:29:d0:7b:63:7f:4d:ab:d6:
68:94:34:03:6a:4c:b5:8f:95:fc:ed:68:7c:1a:8d:6f:59:01:
cb:74:0c:5c:6f:e2:83:ef:a3:9f:c0:48:6a:e0:2f:17:aa:ff:
77:d6:19:3f:d2:ad:cf:3b:15:24:dd:30:19:b6:94:9d:f0:05:
1a:63:52:3c:37:92:8a:92:eb:b1:b8:31:8a:a2:29:33:81:bb:
a8:69:2f:99:f7:a1:13:e5:00:1c:f3:03:57:57:98:cf:58:cb:
9e:97:d8:d9:3e:93:fc:b2:c6:59:22:c1:47:8e:99:56:5e:94:
32:bb:d2:ca:9c:02:4d:a3:5a:24:c0:04:be:54:6d:01:c3:d8:
f2:03:8c:5d:e0:10:31:6a:4c:99:8b:cd:fe:3d:cc:12:eb:bd:
e4:90:f2:1d:c1:4b:f5:6d:c2:01:f1:14:97:7a:d7:df:59:72:
53:f5:36:d5:63:b8:70:83:43:83:63:62:6a:d8:95:d9:e4:71:
cc:43:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:48 2025 by rpki-client on console.sobornost.net