Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/SnKUM1z9HInvUAxb2N5mCcH_Mbw.roa
File: SnKUM1z9HInvUAxb2N5mCcH_Mbw.roa (raw, json)
Hash identifier: dLG/FFHIHsZuRGx+nB5nGlibW+uM3WWSOnzykV50c0g=
Subject key identifier: 4A:72:94:33:5C:FD:1C:89:EF:50:0C:5B:D8:DE:66:09:C1:FF:31:BC
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0195F5D98C3A0B56A874ED25231882AF8A85
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/SnKUM1z9HInvUAxb2N5mCcH_Mbw.roa
Signing time: Wed 02 Apr 2025 09:33:49 +0000
ROA not before: Wed 02 Apr 2025 09:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206589
IP address blocks: 85.202.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:d9:8c:3a:0b:56:a8:74:ed:25:23:18:82:af:8a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Apr 2 09:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a7294335cfd1c89ef500c5bd8de6609c1ff31bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:99:2c:0d:30:2b:04:5a:5c:0d:72:ed:db:
7b:09:c8:1c:24:da:f5:16:a4:29:9e:f0:f4:9d:c1:
e3:17:9f:8a:a3:d2:44:8c:70:1d:e8:51:26:64:2d:
15:0e:8b:8b:d7:d5:81:a1:35:e2:51:4d:8e:06:8e:
f2:bc:6b:ae:dd:c9:89:da:3b:aa:2b:e7:30:14:6f:
8a:bd:0b:ec:4f:f1:d7:08:b8:7d:58:de:80:40:db:
bc:3f:6a:cd:55:91:7d:7f:80:41:26:95:b1:aa:30:
e6:02:ca:a0:3b:41:db:64:f1:ee:37:ef:72:5b:02:
22:85:a8:5a:cd:18:6d:7e:9d:26:68:5c:97:2f:95:
df:19:d7:44:89:93:da:a4:21:27:8b:12:5d:67:dd:
cd:42:6e:7a:5b:32:9e:42:40:8e:31:69:36:04:dd:
1e:47:5a:04:12:64:b5:a6:41:aa:a3:dd:f7:32:6a:
90:78:c5:ac:ff:75:29:8f:40:33:d0:54:66:1c:a1:
a0:a5:b0:d1:6b:73:a0:76:41:f5:48:9f:b3:f0:eb:
bf:eb:de:c7:09:d7:c4:4a:fb:d2:9d:59:ba:64:b4:
a9:c1:cb:da:40:a1:f6:80:6a:7b:34:93:be:52:8c:
a8:a7:32:47:6f:24:5a:4c:08:23:84:ef:ba:17:33:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:94:33:5C:FD:1C:89:EF:50:0C:5B:D8:DE:66:09:C1:FF:31:BC
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/SnKUM1z9HInvUAxb2N5mCcH_Mbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:25:34:1c:ad:4f:b3:59:3e:e9:e7:9c:85:36:12:d1:d7:73:
e1:e7:51:db:61:9e:e5:e8:6b:84:96:9a:dd:f0:47:53:36:ce:
85:cf:60:b5:ce:3e:39:e6:6d:f8:64:31:c2:22:53:50:91:f4:
14:20:8f:96:0e:89:72:fc:3a:a9:ec:ab:eb:e9:5d:f7:6f:ea:
7d:d4:fb:f2:22:df:53:58:cf:1e:28:f9:07:7d:59:c9:f6:d5:
e8:f2:90:af:fd:e1:42:f4:64:bd:cf:7c:d8:c1:a7:5f:ee:45:
dc:f5:d8:34:83:a8:86:a7:8e:8c:82:5b:85:5d:32:77:2d:76:
80:4e:90:50:f6:db:20:15:16:f6:ec:a4:13:32:6a:f8:c7:fc:
dd:a8:4d:35:78:bc:d1:f5:83:4d:f3:f6:22:4b:1b:a0:59:40:
71:d3:43:28:d1:72:61:f5:38:be:5d:eb:0c:a6:ac:14:65:3b:
0e:43:31:cf:75:b8:41:d3:e5:f7:c8:04:86:99:58:26:cb:7c:
ee:3d:4d:96:3d:11:97:09:eb:38:bb:20:72:8c:b9:7f:21:bb:
f8:39:9d:ce:b0:ea:50:30:a7:18:1d:02:3b:14:e2:3b:71:72:
9b:da:15:8d:00:68:d8:c5:0c:88:f0:e6:fe:7a:74:37:5e:8b:
f7:00:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net