Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/qaZi9O_cl0MumDzO9hU8yRiyop0.roa
File: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (raw, json)
Hash identifier: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=
Subject key identifier: A9:A6:62:F4:EF:DC:97:43:2E:98:3C:CE:F6:15:3C:C9:18:B2:A2:9D
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 01942068062F1185567E1D9474EF56D4F6FC
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/qaZi9O_cl0MumDzO9hU8yRiyop0.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31587
IP address blocks: 185.99.220.0/24 maxlen: 24
185.99.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:06:2f:11:85:56:7e:1d:94:74:ef:56:d4:f6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a662f4efdc97432e983ccef6153cc918b2a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:cd:81:14:80:21:d4:1e:f3:41:03:f6:2b:
a3:1e:05:10:d6:c6:c0:eb:0e:8a:03:f7:7f:dd:21:
f7:a8:54:87:2d:9d:06:de:68:5f:86:a0:d7:a5:61:
2c:12:e1:f1:bc:47:f2:9f:2f:c9:9c:e4:4b:29:68:
b3:76:40:32:c6:14:b9:50:33:a4:0c:a9:db:58:c4:
80:fe:8b:a8:24:d0:04:b8:6c:f7:0d:f9:c1:61:0d:
34:db:ac:a8:48:ea:fa:14:e1:5c:bd:4f:e2:f3:db:
4c:5f:cc:7b:46:15:67:44:dd:fd:46:fa:71:09:87:
c6:6b:7e:21:80:2f:2b:3e:01:a8:26:07:a7:b7:b4:
5a:70:a1:b1:e6:4a:d5:3a:c3:be:e5:5e:f0:63:e9:
fe:b9:53:5f:d0:b7:92:11:e2:0e:2c:2f:bb:c2:30:
6e:06:ef:a7:a2:06:c6:86:68:e2:75:37:b8:92:4e:
1a:60:6c:95:6a:2c:1f:3f:8d:e6:77:ef:2f:1d:94:
de:6a:35:99:01:14:65:bb:ce:03:f6:b9:87:af:91:
e1:77:97:f3:f5:dc:e0:e1:6d:63:60:23:25:8e:80:
01:a9:da:22:96:91:e4:94:fd:39:b6:61:47:5e:fd:
b0:23:07:d8:5d:a9:16:f8:a9:e6:d3:85:88:d2:a5:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A6:62:F4:EF:DC:97:43:2E:98:3C:CE:F6:15:3C:C9:18:B2:A2:9D
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/qaZi9O_cl0MumDzO9hU8yRiyop0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.220.0/24
185.99.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:92:6e:66:2a:c9:aa:8c:94:b6:56:46:55:e4:8d:14:62:6f:
e5:b1:e3:2a:9d:98:79:97:3f:01:46:af:0e:a8:2d:21:0d:f6:
d6:5e:c4:d5:61:5b:4d:21:40:3d:71:71:be:93:8d:75:1e:09:
9b:06:3c:25:5d:9f:85:5c:d8:66:55:a3:56:cb:2a:13:ef:0a:
e5:a5:3a:61:47:f6:99:81:ef:fc:31:39:f5:cb:8f:26:d3:20:
96:90:a0:c7:2c:38:c4:92:a0:7b:d4:f6:c6:b9:42:b8:5a:93:
b0:d0:56:b3:cd:bd:67:9f:de:ec:b1:af:bf:b0:aa:c5:8b:c2:
54:8e:46:f6:d2:a0:35:8d:02:6d:94:a6:a6:0e:7c:d5:26:55:
de:e1:d9:0f:a2:2c:e5:40:cb:15:c4:2f:dd:6d:91:eb:66:75:
7d:f8:e1:30:3d:5f:48:8c:12:41:5f:dc:01:3b:6e:e5:01:74:
92:8f:4c:26:23:e1:75:62:7f:28:08:b5:21:cc:9f:eb:f4:ae:
ec:cf:00:ae:56:ab:50:d0:8c:69:f8:ee:88:47:29:e5:73:57:
42:4d:55:16:8b:f5:6b:0c:ba:19:90:4f:3f:8d:1c:0d:c9:5e:
47:9f:4d:0c:ce:8f:e2:4c:7e:ad:f3:7b:7b:e5:b5:90:e7:d6:
e0:14:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net