Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/AXdtgA9HD_eEgv2xOauCB5PRPTI.roa
File: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (raw, json)
Hash identifier: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=
Subject key identifier: 01:77:6D:80:0F:47:0F:F7:84:82:FD:B1:39:AB:82:07:93:D1:3D:32
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019619FC99F4E8A4371F3C0F643A2F8B8702
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/AXdtgA9HD_eEgv2xOauCB5PRPTI.roa
Signing time: Wed 09 Apr 2025 09:58:27 +0000
ROA not before: Wed 09 Apr 2025 09:58:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204499
IP address blocks: 185.251.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:fc:99:f4:e8:a4:37:1f:3c:0f:64:3a:2f:8b:87:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Apr 9 09:58:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01776d800f470ff78482fdb139ab820793d13d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:26:83:90:95:f9:22:d5:d7:d7:b7:3f:26:4a:
1d:60:36:81:e6:84:ce:18:38:89:b6:07:36:a6:34:
93:d0:46:1f:59:89:ff:1c:e2:01:a7:df:63:cb:bc:
bd:b3:d6:a2:06:59:ce:d6:be:47:1a:4c:49:23:fa:
df:c4:b7:d4:65:ba:00:73:70:7f:c6:63:68:58:ea:
8b:6a:82:68:a3:18:93:44:61:7e:75:36:8a:de:67:
3e:b5:de:78:e4:11:3d:98:e9:5f:5a:9d:b2:7d:62:
1f:71:cc:d6:ff:54:8e:b4:32:37:6a:40:21:66:11:
8a:2c:67:fd:de:f4:c5:63:e6:26:38:aa:33:fd:91:
0b:e0:ba:96:6d:2a:59:b5:7f:a3:58:03:95:6b:92:
ed:df:e6:39:35:63:3c:6a:16:36:ac:c5:fa:ba:2b:
5a:bc:d3:1b:c1:02:18:f2:b6:8f:1e:4c:8b:27:2b:
46:32:7d:af:50:f8:d2:21:04:17:60:83:64:89:0a:
16:20:b9:a8:ee:de:8f:4d:48:03:c1:44:ae:54:03:
5d:e6:93:59:54:eb:1d:4f:bf:77:f9:13:08:f6:64:
67:4b:fa:67:1b:a5:c2:55:9b:df:e6:70:c9:e6:89:
82:61:1a:ab:f3:c3:df:c2:d8:00:63:69:f6:61:e4:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:77:6D:80:0F:47:0F:F7:84:82:FD:B1:39:AB:82:07:93:D1:3D:32
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/AXdtgA9HD_eEgv2xOauCB5PRPTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.76.0/22
Signature Algorithm: sha256WithRSAEncryption
47:eb:84:3a:92:06:00:21:f9:cc:f0:ca:a1:f0:e4:f8:87:88:
b6:bd:22:80:4a:93:da:f2:f8:06:5e:39:e8:ed:15:d3:66:2a:
6c:4c:db:34:33:16:87:82:a9:29:5f:81:71:a4:f5:1c:b5:10:
fb:a6:13:9a:6d:b6:ce:d1:cc:fc:fd:71:be:75:6f:47:a3:36:
6c:1e:2a:e7:31:06:86:a7:61:a9:12:f4:f7:5c:93:9d:76:77:
94:dc:50:12:48:f4:72:f0:72:2d:9f:b0:5c:f7:33:ea:a9:22:
0a:02:1e:30:e0:a0:95:a6:ce:b0:b6:f6:e6:0e:9e:1f:13:8e:
6f:12:a3:9d:d0:65:cc:25:da:dc:8d:51:8f:4d:6a:db:a1:d0:
ed:50:4e:0c:fd:9a:a5:62:24:64:73:c3:0a:14:6c:9f:e4:a4:
80:cb:7e:ff:4a:18:79:8c:33:c6:e7:7f:e7:81:58:7e:56:f9:
d9:0f:5d:c4:69:c2:7c:cf:39:4c:76:a5:18:c7:93:fc:99:1c:
d0:7d:d2:05:86:fa:ee:76:4b:e5:65:27:0a:e0:a5:7e:88:1e:
9d:7c:6c:77:f7:c6:18:de:43:a7:63:d5:f7:43:8b:56:11:fd:
f6:a9:cf:a6:d4:9c:39:c6:87:6d:91:82:07:16:78:62:ec:51:
4d:3e:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net