Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/1-ZBmv1mQ9vwPEnj588yxjzPNwOc.roa
File: 1-ZBmv1mQ9vwPEnj588yxjzPNwOc.roa (raw, json)
Hash identifier: 6l8luKDIOBTHmzYMqxo/V/zEzyP22JR0ZWMYmDNcxMc=
Subject key identifier: F9:90:66:BF:59:90:F6:FC:0F:12:78:F9:F3:CC:B1:8F:33:CD:C0:E7
Certificate issuer: /CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Certificate serial: 019421437E79304FD757727E301F46FFFBFD
Authority key identifier: 1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/1-ZBmv1mQ9vwPEnj588yxjzPNwOc.roa
Signing time: Wed 01 Jan 2025 09:47:38 +0000
ROA not before: Wed 01 Jan 2025 09:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48795
IP address blocks: 185.237.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:7e:79:30:4f:d7:57:72:7e:30:1f:46:ff:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d80373e3e34d00a85b84128d405399bcf8a45
Validity
Not Before: Jan 1 09:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f99066bf5990f6fc0f1278f9f3ccb18f33cdc0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:f1:dd:8a:df:16:5b:92:c1:5a:01:4c:72:
31:22:5d:88:01:67:07:de:5b:dd:83:e0:af:fd:ba:
5e:68:d6:bd:4a:b7:bc:ff:19:3f:17:2e:28:79:7f:
99:50:14:55:42:99:6f:64:64:17:92:87:c0:d9:b7:
54:4a:b4:60:0b:c9:b8:af:d5:81:69:46:08:9d:16:
68:db:44:5f:73:01:33:03:7a:99:db:58:d1:8b:12:
2d:af:86:e0:8b:5d:c8:20:df:cc:a8:24:a1:fe:26:
5c:83:37:32:68:21:36:3b:1c:68:84:0b:5d:6e:dc:
9d:1b:45:66:5b:5f:b8:f2:67:7e:40:d8:3a:67:83:
be:03:0c:75:b3:e4:74:ac:a4:a9:97:c7:c2:c4:fd:
fd:51:2b:b8:fd:b7:39:28:b1:26:24:bc:e6:78:5f:
17:09:77:a2:3c:75:5c:f9:b5:45:84:db:d5:31:8b:
58:00:7a:53:d1:56:03:14:b8:9e:83:a8:67:83:65:
5a:02:a8:9b:9b:55:f3:45:65:a1:bc:56:76:4e:15:
d8:a5:bf:b9:7c:5b:49:9b:f4:d8:06:02:ff:9f:c2:
9c:a1:74:c4:25:9d:a1:db:20:4e:30:0e:00:e9:58:
a0:18:89:3f:84:2e:c1:d2:39:24:28:84:5a:fb:13:
2b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:66:BF:59:90:F6:FC:0F:12:78:F9:F3:CC:B1:8F:33:CD:C0:E7
X509v3 Authority Key Identifier:
keyid:1B:4D:80:37:3E:3E:34:D0:0A:85:B8:41:28:D4:05:39:9B:CF:8A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G02ANz4-NNAKhbhBKNQFOZvPikU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/1-ZBmv1mQ9vwPEnj588yxjzPNwOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2574d2-cb0c-4b2a-be83-8e00bda3b245/1/G02ANz4-NNAKhbhBKNQFOZvPikU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:70:8e:0c:be:8a:6b:ec:60:eb:a7:7c:2d:92:a6:ef:5c:86:
1d:b9:ab:e0:42:fa:25:81:42:34:2c:c2:fd:dd:17:79:0a:d3:
d0:79:b1:a6:08:02:68:47:fd:10:14:4d:eb:bd:67:f3:43:70:
33:18:69:a9:df:41:99:5a:e0:54:5d:cc:bd:04:5a:0c:4e:f8:
8c:16:5f:56:5b:bf:bf:e5:e1:ba:69:c0:3b:0e:54:aa:81:e9:
40:97:e0:79:05:3e:a1:3b:18:6d:13:04:97:90:eb:67:7a:83:
8a:ac:77:79:0c:e2:f8:6d:d8:0a:5d:f8:5e:1a:ed:be:24:c1:
bd:18:a7:57:fc:5a:15:87:23:3e:18:bf:76:6a:ac:1d:43:c3:
e5:6a:28:e6:0b:f2:a3:94:13:00:b6:b2:5a:85:e6:25:be:e2:
6e:7f:84:da:3f:3b:09:15:be:ea:2d:be:01:14:f2:31:64:60:
b8:71:c6:d4:a2:3a:ba:df:9a:aa:4d:b7:16:5d:2a:aa:3f:e0:
c4:95:f2:f9:19:84:2c:f0:67:78:55:4a:a6:04:5a:51:dd:16:
4e:4d:b3:ba:d1:fd:93:e1:3b:62:e2:c1:30:6e:42:1f:0b:8f:
72:7d:7a:2c:45:fe:c5:0c:e7:06:87:24:e0:ce:13:19:c3:c6:
18:64:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:33 2025 by rpki-client on console.sobornost.net