Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/g9MAIleMyYdSsNd8vqrwDUwOQl4.roa
File: g9MAIleMyYdSsNd8vqrwDUwOQl4.roa (raw, json)
Hash identifier: vMX3Pa2f/He7F/fZkN04odgU+HmGv4FaiPNtPWvHa5o=
Subject key identifier: 83:D3:00:22:57:8C:C9:87:52:B0:D7:7C:BE:AA:F0:0D:4C:0E:42:5E
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019421B1DC84DCD13A5CBEAFDE76C21586EC
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/g9MAIleMyYdSsNd8vqrwDUwOQl4.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44673
IP address blocks: 185.29.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:dc:84:dc:d1:3a:5c:be:af:de:76:c2:15:86:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83d30022578cc98752b0d77cbeaaf00d4c0e425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:a8:61:91:b9:fd:be:b3:6c:b4:e9:53:d0:
fa:49:a4:64:51:6a:31:38:63:39:21:44:f5:e3:ea:
82:47:36:25:eb:ca:98:62:02:0c:6a:16:c2:25:53:
43:cf:1d:73:11:18:15:8d:8e:db:87:ad:e0:cc:e7:
14:0e:97:09:e8:b5:9e:8d:bf:9e:4e:05:86:9c:6d:
e6:73:15:84:52:02:5c:58:a4:a4:2f:1f:42:18:56:
f3:31:51:2c:45:84:70:6e:6a:06:f3:76:2b:69:31:
ae:c8:b0:12:fb:82:43:c8:b2:2c:e0:32:fb:f1:7f:
a6:49:92:69:cf:c3:ad:ec:ee:70:09:8b:f9:b7:07:
d9:0f:3a:76:35:af:36:0d:ef:07:4c:64:7b:1d:d0:
e9:8c:18:54:56:c6:04:52:1f:51:ce:15:e5:b3:9b:
72:6f:eb:65:4b:d9:1e:e8:1a:05:2f:b2:fe:83:12:
d8:81:30:35:09:92:16:cf:90:c7:39:d0:12:75:6a:
9d:36:8e:ad:e9:7a:b0:0c:c2:a8:0e:cd:18:16:af:
be:24:e9:b0:d8:af:e4:3e:16:46:c1:8e:fd:da:4a:
85:fb:31:f8:d5:b8:8e:8a:1b:6e:b3:d4:e4:8a:19:
14:32:f1:f5:12:1e:1e:b1:d6:f7:f1:6f:c0:ee:6f:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D3:00:22:57:8C:C9:87:52:B0:D7:7C:BE:AA:F0:0D:4C:0E:42:5E
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/g9MAIleMyYdSsNd8vqrwDUwOQl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a7:40:e3:32:d1:fc:4a:81:36:90:70:98:09:a8:30:2a:3b:
f4:79:74:ab:15:df:0f:94:6c:ba:31:3e:30:f7:4f:03:64:8a:
6f:b3:d8:f9:11:07:05:39:7f:79:6e:96:7e:dd:21:19:67:73:
99:af:0b:27:df:3d:43:4c:8e:98:10:5b:4f:f5:4e:ca:bc:c8:
4d:6a:37:20:f5:5e:e1:7c:af:2a:e3:82:7d:ab:f9:6e:09:f6:
34:95:61:31:06:19:51:dd:b8:8a:e2:3a:77:ea:d3:28:6f:c1:
41:e2:6c:fc:85:b8:d1:ab:e0:92:74:2a:f4:e6:9a:fa:4b:42:
3d:af:0c:2f:f4:9d:b8:b3:90:5b:32:3a:54:f6:b7:fc:4b:25:
4d:66:b5:39:01:e6:56:ca:d1:c4:c6:27:78:79:81:f8:34:d7:
ec:b5:c8:d5:47:7a:a4:01:7b:07:4c:39:85:ba:00:74:01:d3:
cd:08:f6:50:0a:05:2e:fa:e6:c0:d6:37:e2:13:b3:23:30:52:
7a:27:17:5b:b7:9a:45:bf:25:1c:27:73:97:a7:d5:68:f0:d9:
4f:e5:5d:3e:94:07:63:e7:3a:b4:fb:3b:80:cf:dd:2d:a3:bd:
49:a0:11:a3:01:ed:8b:5f:9a:27:c5:15:58:82:9d:67:4d:44:
9c:74:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:38 2025 by rpki-client on console.sobornost.net