Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/9Rv9UA6xqHbqOVDX3M_ewENA274.roa
File: 9Rv9UA6xqHbqOVDX3M_ewENA274.roa (raw, json)
Hash identifier: CV9IQyD4yDSrfmV6gwR5PLHm4BEjsLgc7yXn2cWM6fU=
Subject key identifier: F5:1B:FD:50:0E:B1:A8:76:EA:39:50:D7:DC:CF:DE:C0:43:40:DB:BE
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 01942445575F1B3AAF752A2096DB84739E7C
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/9Rv9UA6xqHbqOVDX3M_ewENA274.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206922
IP address blocks: 185.171.246.0/24 maxlen: 24
185.171.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:57:5f:1b:3a:af:75:2a:20:96:db:84:73:9e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f51bfd500eb1a876ea3950d7dccfdec04340dbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:64:ad:66:f5:e5:4c:eb:09:42:95:04:b1:
ba:08:aa:46:2d:12:8d:a6:9a:92:79:7d:0b:8a:56:
b1:35:24:31:f2:69:05:50:8d:f0:00:10:69:98:fc:
ef:1f:b2:f6:2e:95:ba:8f:55:83:31:18:d4:a8:18:
91:17:7b:7f:e0:b8:dc:1d:c9:47:4f:48:3e:e1:d9:
7a:3f:15:38:ef:e8:6f:6c:b8:0d:6a:0d:b3:13:c3:
aa:09:23:2d:03:af:33:d4:0a:21:d7:26:8e:18:5e:
c5:34:eb:d2:16:d2:28:5e:b0:2d:66:d0:1a:6b:52:
06:79:a6:db:b4:1b:2d:fd:85:48:d3:a0:78:8d:6e:
65:4b:69:93:98:8b:67:a6:f8:39:52:6e:df:a8:8b:
38:56:3e:09:7c:f2:40:ff:c7:cd:f0:67:e9:ec:82:
d9:39:93:1a:02:ca:b5:58:1a:69:d2:87:de:0e:52:
7d:ef:a9:9e:57:b2:ac:d8:10:6b:8b:2d:1a:e2:b7:
ee:32:ca:56:ea:d0:46:66:61:7e:7d:0e:fd:01:a2:
c6:28:b5:ff:c9:cd:8f:56:31:7a:ef:ae:dd:4b:f2:
3e:c4:74:4a:e6:16:7a:46:86:d7:8f:ad:1b:14:e5:
86:67:dc:28:0a:06:ba:38:ed:61:0e:66:a0:45:0a:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:FD:50:0E:B1:A8:76:EA:39:50:D7:DC:CF:DE:C0:43:40:DB:BE
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/9Rv9UA6xqHbqOVDX3M_ewENA274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.246.0/23
Signature Algorithm: sha256WithRSAEncryption
02:43:0a:0c:af:d2:7d:ad:04:b4:a9:5a:78:57:20:19:10:18:
a9:0f:f0:b6:76:d9:3d:94:aa:1a:3d:14:0c:a7:8e:0d:cf:45:
71:12:c0:a6:b7:40:16:c5:fa:c9:92:16:1e:ca:47:c5:bb:d5:
af:0d:67:79:28:29:a4:b5:df:aa:b7:55:93:54:21:bf:a8:0f:
17:90:90:b5:32:49:9c:9f:01:1c:fc:5c:86:ae:74:76:37:8c:
ee:f6:ee:9b:fd:e4:33:5d:73:86:d9:b5:cf:29:52:a9:25:05:
22:e2:a7:d7:bb:8e:15:ee:ae:7f:0c:a0:f2:15:31:f2:9b:81:
ad:35:dd:c8:fd:ba:b6:b4:aa:f6:23:c3:a5:82:df:e0:8b:60:
78:65:99:99:48:2a:00:75:72:d3:59:0f:29:2c:54:fa:19:d7:
14:bb:e8:f7:24:40:12:01:27:9d:32:fd:34:69:4a:fb:a0:35:
eb:a1:9c:f3:b8:40:ef:6d:5d:6d:09:22:a5:de:b3:20:03:ca:
e2:07:88:61:a9:d5:88:89:7b:07:09:54:ed:a9:71:99:46:f3:
94:c5:1b:22:92:fa:bf:f5:2a:19:48:b8:8a:3c:a6:90:a3:de:
23:b2:6d:7b:bb:47:cc:bc:0a:55:b1:49:36:57:4f:7d:cf:85:
0d:a3:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net