Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/3zMSBZwOQqPD-VFxKGBGdbifN4M.roa
File: 3zMSBZwOQqPD-VFxKGBGdbifN4M.roa (raw, json)
Hash identifier: gWqAEUpvadY+kHwSZFnOfJpueDeFHy77N/q2ejRJGbU=
Subject key identifier: DF:33:12:05:9C:0E:42:A3:C3:F9:51:71:28:60:46:75:B8:9F:37:83
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0193F0AF9A6E7801054D38BD8BFB3A176743
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/3zMSBZwOQqPD-VFxKGBGdbifN4M.roa
Signing time: Sun 22 Dec 2024 23:24:20 +0000
ROA not before: Sun 22 Dec 2024 23:24:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135402
IP address blocks: 185.250.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f0:af:9a:6e:78:01:05:4d:38:bd:8b:fb:3a:17:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Dec 22 23:24:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df3312059c0e42a3c3f9517128604675b89f3783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:bf:0c:bc:34:64:48:73:a8:e6:b4:68:ae:
3c:83:b8:91:4e:dd:a2:7f:9f:86:59:0d:67:e0:fd:
bc:b9:c9:b4:86:e0:b8:a7:c9:9a:78:ca:8e:29:60:
0b:9f:3c:47:e9:2a:33:0f:26:09:ba:ae:6f:37:db:
bd:9b:0d:b0:1d:ab:5f:8b:64:b9:18:da:c0:9f:a2:
f7:0c:2b:40:be:68:a3:f0:81:f8:d1:3b:52:86:b4:
32:aa:09:f1:b2:7a:18:00:86:ab:f0:9f:49:26:da:
cc:18:77:d4:9c:db:de:c1:76:21:90:36:c7:54:ba:
63:be:4f:a1:ff:f7:07:34:98:8d:5d:87:0f:9a:37:
d4:4b:55:a6:4a:ce:0b:11:8d:30:5f:37:b7:17:34:
6b:9b:74:62:6f:f1:34:68:b1:27:51:9f:e2:3d:d1:
47:b5:49:97:26:03:c3:85:e9:de:5a:50:90:54:c4:
71:c3:81:55:f4:84:81:8e:41:a7:d1:fd:93:b3:d5:
e4:db:d8:34:09:dd:e5:85:20:6f:f6:13:29:78:b7:
3f:7e:ff:06:f5:01:6b:1c:05:4c:83:b3:eb:56:7d:
68:9a:a3:6e:a7:2b:e3:5f:2e:75:3f:9d:e2:b5:eb:
61:91:af:b9:b7:9f:89:f4:7c:0d:8d:97:28:1d:47:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:12:05:9C:0E:42:A3:C3:F9:51:71:28:60:46:75:B8:9F:37:83
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/3zMSBZwOQqPD-VFxKGBGdbifN4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b1:b3:11:93:9b:d1:3c:fa:c0:da:8d:f3:37:2d:97:ec:34:
28:68:d2:ae:af:6d:70:74:39:fa:34:a2:0f:b3:b2:4a:e6:08:
07:56:6d:aa:12:f9:ae:99:aa:20:9d:57:3f:5d:15:88:e5:d0:
4b:97:e4:93:70:6b:93:12:30:c4:04:cb:44:ba:23:38:8a:c5:
5b:b7:5b:41:53:ec:17:e0:42:38:5e:1d:80:9f:60:e9:f1:68:
fa:da:26:cb:c4:8d:4e:79:cc:cf:a1:32:93:7b:6c:40:b1:d9:
c1:32:1d:f1:98:65:fa:cb:78:47:dd:97:68:59:15:42:c0:dc:
85:df:a5:70:20:de:5a:d6:38:18:3d:f6:21:a9:14:90:15:b6:
ae:c7:b6:cf:0a:bc:4f:d3:1c:2c:7e:42:0d:81:0c:ed:38:ce:
2d:c3:0a:72:53:1b:94:7e:2b:46:ac:24:a0:1d:4f:8b:aa:da:
8d:37:9b:00:63:65:13:84:f1:ce:7c:c8:41:1a:d4:02:13:e8:
f6:49:6a:9f:ac:ed:36:92:f3:01:07:e1:c4:a2:dd:51:aa:e6:
bd:dd:1b:fa:d9:ad:e2:a3:58:e3:41:46:04:76:15:ff:d5:b6:
39:89:eb:c1:fb:e6:0a:62:43:d0:35:6f:f2:8d:3c:4e:df:4e:
22:dc:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net