Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa
File: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (raw, json)
Hash identifier: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=
Subject key identifier: 7C:8F:F5:84:35:5C:D0:02:2C:AB:99:CC:42:62:FD:C5:FC:F5:91:70
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 0194236A4A58380A0DFD7AEAEC2F2A76B676
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199758
IP address blocks: 185.86.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4a:58:38:0a:0d:fd:7a:ea:ec:2f:2a:76:b6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c8ff584355cd0022cab99cc4262fdc5fcf59170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:92:74:28:f4:78:f9:a1:c3:3c:bb:fa:73:
25:ac:2a:03:44:34:f2:bb:77:32:d6:5f:4b:fe:44:
9d:f6:78:e5:13:49:f5:ad:14:b9:e9:19:74:a9:2b:
71:74:57:69:0a:56:28:e4:b5:52:59:7a:37:fd:91:
3c:e8:8c:5c:88:34:d1:d4:83:fe:d3:a1:70:a1:2c:
a4:0d:8e:c2:99:5e:8b:23:95:e1:6b:bb:34:1c:7a:
63:c3:67:f2:49:8f:67:be:08:ec:7e:33:24:24:24:
92:f2:7f:12:a0:30:86:5e:54:7a:4a:42:3b:23:29:
0b:ea:84:e9:40:03:42:7a:8b:bb:c9:ff:52:eb:9e:
70:e7:c3:13:c4:2c:41:56:ab:34:d3:33:60:4d:1a:
ea:e2:90:18:c7:ac:b0:27:b0:a5:e5:d7:07:9b:80:
e3:db:fb:fe:d6:ae:fc:b1:59:01:2e:ff:3e:f0:b0:
73:92:57:c9:10:f0:9b:41:ef:d7:28:86:da:01:46:
c5:e6:75:36:ba:1d:93:b5:b4:60:9e:e1:72:5a:2c:
ca:4f:c8:b4:a5:89:65:ed:3d:6b:b3:75:9d:d6:ef:
18:90:2c:07:d0:e1:ed:77:f0:9a:a9:44:f4:92:54:
eb:f1:5a:54:ce:f2:b0:fe:80:b2:12:2e:7a:80:cf:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8F:F5:84:35:5C:D0:02:2C:AB:99:CC:42:62:FD:C5:FC:F5:91:70
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:8f:88:75:8e:cd:2b:52:02:55:a1:af:fa:10:a8:be:58:04:
36:41:9c:60:26:e4:9d:ec:9d:5d:cf:57:ad:ff:75:7a:b9:09:
b2:79:a7:6d:b9:a0:78:84:10:77:f7:d9:94:23:c2:16:3e:63:
fa:e0:6a:9b:a5:23:3f:41:73:dd:9d:ab:b0:27:09:a9:3b:90:
52:9f:63:6c:91:90:6e:77:f2:c6:c9:be:20:77:fc:50:85:6f:
33:27:af:aa:d5:1a:1b:94:54:26:34:eb:c6:54:80:3b:85:5c:
40:2f:86:81:97:09:5d:a3:f8:fe:a9:81:36:ca:c5:65:fa:9a:
3a:71:0b:a4:c9:f9:35:44:4e:de:45:2a:82:a9:af:c7:60:ac:
24:71:2c:7a:88:9a:7b:d9:21:a8:a9:16:1b:fa:73:9f:13:61:
c2:7e:1c:35:9e:1f:a4:21:35:e6:b4:9e:fd:4b:fd:96:16:2e:
ad:6e:d3:a0:0d:f5:75:bc:b6:85:d1:3a:1b:0b:f5:bc:0c:4b:
dc:e9:2e:38:49:47:58:5d:d7:0f:e5:9f:9f:15:85:7d:50:e1:
9b:b3:26:5d:70:ca:23:d2:ec:3a:76:69:b4:a1:e9:9f:a2:e5:
86:68:fc:3c:bb:67:f5:cc:38:21:5f:f2:c3:de:a6:49:bd:e3:
e2:c4:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:03 2025 by rpki-client on console.sobornost.net