Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa
File: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (raw, json)
Hash identifier: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=
Subject key identifier: 00:CF:FC:16:7C:C1:5A:FA:69:09:61:2A:E4:BD:A6:EF:33:B0:E1:7B
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 0194274649DD8BDFEE88BE05BDD27F10ACFF
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa
Signing time: Thu 02 Jan 2025 13:48:25 +0000
ROA not before: Thu 02 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206959
IP address blocks: 185.170.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:49:dd:8b:df:ee:88:be:05:bd:d2:7f:10:ac:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jan 2 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00cffc167cc15afa6909612ae4bda6ef33b0e17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:cc:24:45:07:b4:4b:a0:6f:ce:19:6c:84:
a4:83:e3:d6:0e:d8:b6:19:f6:46:d7:64:16:42:f6:
83:2e:a6:52:17:62:bd:0d:73:75:9f:d8:e2:54:46:
73:58:bf:93:62:5c:e1:87:25:5f:67:fd:46:f8:d7:
68:55:0f:82:6b:43:d1:73:7f:b2:b8:05:bd:ea:b0:
7d:1f:30:76:aa:b4:85:9e:d6:ee:46:ac:e3:90:64:
91:6d:88:ff:10:84:0b:18:5f:f8:4b:c9:b2:4c:0c:
a9:d5:32:fa:de:09:7f:6e:de:20:2e:73:75:a5:ef:
76:2c:43:35:e0:65:bc:a5:2f:c3:5e:45:b5:3c:1d:
b5:a6:4e:9d:d2:5e:47:b9:10:c3:30:95:63:55:cb:
b8:71:8d:d4:9e:53:83:67:36:19:8b:c3:6c:38:41:
48:a3:f7:be:19:69:60:53:52:16:58:04:b2:9d:8a:
40:c6:fd:f7:a5:7c:ab:46:eb:99:35:f7:b0:84:e8:
3e:4c:97:8d:81:7e:bb:d8:3a:56:41:92:37:40:77:
52:9d:e8:d0:13:cc:e3:26:df:9c:f4:50:ed:7b:25:
9c:a4:50:45:cc:59:44:d0:30:a0:88:23:63:94:58:
8e:43:a8:bf:ef:b3:28:70:b6:05:a3:93:49:66:be:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:FC:16:7C:C1:5A:FA:69:09:61:2A:E4:BD:A6:EF:33:B0:E1:7B
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.174.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c0:30:11:e5:ae:40:b3:86:a0:47:91:9d:6a:91:29:68:c1:
11:15:45:44:96:76:5a:6d:94:5b:27:91:19:1f:fc:f2:9e:76:
91:ff:87:72:d7:d4:85:8c:d9:0f:c0:b7:dd:39:64:c8:29:65:
a4:85:ba:21:f9:82:50:ce:2e:30:41:0f:9d:e4:73:2e:f3:43:
5e:77:1c:cc:d1:a6:3e:49:42:55:71:53:1f:c9:b2:ff:ce:9b:
d2:89:81:13:e9:5c:a2:d2:38:f8:60:af:c0:0a:5a:17:81:5d:
ff:4b:a2:3d:53:cd:26:be:b6:30:54:36:4a:85:db:f4:96:7c:
76:49:96:d8:b1:74:96:f8:9b:8e:f5:5f:40:cd:72:a9:03:d0:
9b:5b:47:ce:3a:78:b1:9c:d9:02:b1:6f:0a:4c:ed:1e:31:7e:
80:95:fc:b6:91:32:be:4a:56:80:fb:66:f0:92:0a:fc:e8:64:
cb:47:c4:09:3b:f0:44:42:69:c3:e5:54:c0:83:b8:09:bc:ea:
7c:ac:06:d1:42:3c:62:54:64:52:dd:ce:44:4f:4e:53:3e:cd:
13:3e:5a:89:83:44:3c:90:f1:74:91:47:22:bb:d3:49:c7:10:
ff:e1:61:9e:bf:03:01:73:e8:a4:c4:95:16:47:a1:dc:71:a3:
68:1b:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net