Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/nO178ZXZFGT-qdK_Xds7cj8ID2A.roa
File: nO178ZXZFGT-qdK_Xds7cj8ID2A.roa (raw, json)
Hash identifier: R+EUO1OAijizTswHRqjO5HgUg8gwhN35ZvzlFNDGCnM=
Subject key identifier: 9C:ED:7B:F1:95:D9:14:64:FE:A9:D2:BF:5D:DB:3B:72:3F:08:0F:60
Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial: 01958AA5B2B754CCDE81392284B2F69EEA9D
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/nO178ZXZFGT-qdK_Xds7cj8ID2A.roa
Signing time: Wed 12 Mar 2025 13:57:49 +0000
ROA not before: Wed 12 Mar 2025 13:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3342
IP address blocks: 185.232.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:a5:b2:b7:54:cc:de:81:39:22:84:b2:f6:9e:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Validity
Not Before: Mar 12 13:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ced7bf195d91464fea9d2bf5ddb3b723f080f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:5a:ff:55:83:e3:25:a7:fe:62:28:43:b8:
72:43:66:20:de:c8:36:11:ee:3b:a9:c8:1d:b4:39:
6e:cf:f1:54:53:99:36:e8:0d:6c:85:1a:c2:77:55:
79:9a:03:00:1d:46:2f:4a:9c:93:97:c4:65:fa:32:
c4:36:9e:11:ef:7c:d3:1c:4e:4b:35:3f:c2:72:c5:
88:bb:3b:05:22:2e:94:24:34:ab:3b:f2:10:7a:7a:
5a:fe:88:33:24:a3:17:ba:5e:d7:2b:d9:2a:37:4e:
d6:7a:45:fb:86:07:52:a1:e9:e7:b6:e7:94:3f:bc:
59:47:8c:fa:47:42:87:eb:74:58:7f:05:d1:f5:33:
7e:ea:49:9c:59:fd:c8:73:35:f6:cd:e9:b3:b4:5c:
97:3a:93:41:dc:50:35:bc:ee:f5:d8:55:f2:19:e5:
49:8b:bd:d4:b0:76:05:47:9e:93:a7:b8:5e:b2:44:
e1:1d:73:f5:36:60:42:61:33:9f:cd:b3:77:b1:7a:
95:1c:77:64:94:e9:d3:95:f0:26:3c:bc:36:36:f5:
7c:9b:31:b3:1b:9f:54:14:8a:63:6e:4f:71:61:99:
07:7b:b5:f5:09:29:56:a3:b3:4e:54:20:84:4e:be:
bb:80:74:52:10:b7:ed:88:4f:4a:d6:e8:6e:e4:e7:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:ED:7B:F1:95:D9:14:64:FE:A9:D2:BF:5D:DB:3B:72:3F:08:0F:60
X509v3 Authority Key Identifier:
keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/nO178ZXZFGT-qdK_Xds7cj8ID2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:75:c5:f0:91:c7:98:67:f9:51:f2:58:14:af:d0:83:be:eb:
bf:a6:f6:b1:ad:58:43:f6:a9:c7:ba:55:25:b4:2e:39:24:4d:
27:bc:58:3e:9a:24:c4:44:f8:1b:ba:e3:d8:e6:ec:4c:15:ae:
19:6a:5c:8a:9a:99:0d:3f:b7:fe:c5:e6:2c:67:85:e0:69:50:
7d:d4:f6:89:ab:b9:46:91:ea:76:47:65:02:9b:08:aa:41:05:
3b:0b:10:72:60:24:90:d7:b0:23:e1:6f:db:a9:2f:bb:dc:10:
3a:7e:83:91:aa:e6:7e:02:e7:a0:95:14:46:20:eb:26:96:8f:
98:e9:42:ae:ff:10:c7:34:d7:06:0e:5e:2d:84:3c:10:55:06:
30:68:28:77:8d:7a:f7:de:26:63:ac:30:01:4e:4e:98:66:97:
50:63:26:bb:5d:d3:da:7c:be:a1:6b:a5:fe:56:4d:a5:aa:9c:
35:be:89:21:61:10:da:48:93:e6:56:95:00:b6:18:d8:7f:ad:
71:ee:ab:79:9d:02:8e:d0:f2:b7:f8:b5:0b:fa:ed:01:05:ad:
18:09:68:c9:21:71:25:55:63:83:b0:61:a4:83:b7:25:41:65:
c5:ff:39:78:48:70:fa:cc:b5:65:90:cf:1a:04:de:a7:d0:cb:
47:2e:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:48 2025 by rpki-client on console.sobornost.net