Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/1xvntgtwN598Xt12Wp30p-iFY40.roa
File: 1xvntgtwN598Xt12Wp30p-iFY40.roa (raw, json)
Hash identifier: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=
Subject key identifier: D7:1B:E7:B6:0B:70:37:9F:7C:5E:DD:76:5A:9D:F4:A7:E8:85:63:8D
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 01941F8C32E17BDD7997D894BD6440386E4C
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/1xvntgtwN598Xt12Wp30p-iFY40.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57335
IP address blocks: 185.203.204.0/23 maxlen: 24
185.203.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:32:e1:7b:dd:79:97:d8:94:bd:64:40:38:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d71be7b60b70379f7c5edd765a9df4a7e885638d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:ae:91:4e:fd:6d:98:e4:c7:7a:68:5d:f3:
e9:ee:d7:21:c1:41:fe:45:68:e6:f0:16:7c:18:fe:
cc:ce:c2:a3:46:c4:60:9c:8f:b1:06:78:24:be:f3:
85:34:2d:5a:85:7d:d0:fe:9a:0c:6b:3a:d1:f5:c2:
e2:58:fe:37:65:bb:58:dd:04:f1:05:04:26:31:20:
7d:24:35:73:30:fd:3f:fd:fe:11:3b:0e:e6:e8:08:
51:14:64:a4:9c:54:85:b2:17:8b:64:4f:e1:a4:56:
3a:2a:bd:27:92:23:7c:ca:7e:2e:c2:e1:88:84:b8:
af:1b:39:61:29:40:9a:3e:ba:40:3a:41:65:28:f8:
de:54:1e:17:05:a3:a4:8f:32:39:f8:4d:0f:9a:f9:
86:04:33:39:79:a8:62:cb:3c:c4:99:00:a7:4b:95:
5f:ec:0d:67:c8:12:d1:30:9d:24:33:bb:28:fc:9d:
68:e3:11:47:3f:9d:7c:80:fc:80:9a:51:1d:e5:74:
a2:d6:61:54:22:9f:a0:b7:4f:4d:0a:6e:cb:cb:a3:
c7:c1:c6:70:29:3d:a5:51:1d:3e:4b:57:6c:4e:aa:
dd:e6:dc:23:88:a4:c4:06:b7:89:aa:66:5d:86:c8:
d3:cb:1e:ef:e2:fa:9b:44:89:f2:e1:e4:69:1f:1d:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:E7:B6:0B:70:37:9F:7C:5E:DD:76:5A:9D:F4:A7:E8:85:63:8D
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/1xvntgtwN598Xt12Wp30p-iFY40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.204.0-185.203.206.255
Signature Algorithm: sha256WithRSAEncryption
28:f9:ac:2f:ea:10:53:fa:56:f1:22:6a:e4:d6:09:df:89:8a:
4c:6b:75:fa:a3:50:57:de:4e:6d:17:f9:be:cd:e2:d7:3d:11:
fd:bb:c3:f7:6e:26:95:f0:af:1d:5f:38:eb:08:1f:72:9a:1b:
a4:33:61:23:c9:fb:19:9c:69:4d:45:ef:35:96:ae:28:80:d1:
98:31:e0:c2:b6:88:8b:d5:0a:fa:87:9f:ff:8b:2f:74:9e:ad:
44:ff:8a:0c:46:af:8b:2d:ff:1f:79:ad:95:98:71:f8:f4:b6:
70:e2:de:dc:29:b9:42:9d:59:c9:65:d9:18:d8:06:64:4d:d4:
49:03:f4:19:f6:20:9c:f1:88:bc:62:6e:15:89:78:fe:d8:c2:
cb:3e:79:eb:21:17:64:6e:72:d5:22:50:ef:fc:dc:a4:7b:9b:
e5:1f:62:d2:27:89:f1:9c:66:a3:d6:be:07:0f:36:fb:23:75:
b5:dd:2b:e1:c7:ac:2c:82:16:98:6c:65:c9:6b:d3:2c:96:cc:
2f:17:e5:d4:9f:6e:9b:e3:4c:4c:c5:1c:9d:aa:f9:c2:95:3c:
eb:fe:ff:d4:49:31:48:d5:09:2a:96:60:5c:9c:ce:84:00:5b:
28:eb:50:f0:7f:71:04:9b:83:83:2c:c3:b8:2c:4a:ae:12:7a:
e7:2b:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net