Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/P5dWxSLpxtp-49eZGd_31_JRHHo.roa
File: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (raw, json)
Hash identifier: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=
Subject key identifier: 3F:97:56:C5:22:E9:C6:DA:7E:E3:D7:99:19:DF:F7:D7:F2:51:1C:7A
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019421B2392921A5B01400A78EC25E256091
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/P5dWxSLpxtp-49eZGd_31_JRHHo.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8641
IP address blocks: 185.212.88.0/23 maxlen: 23
185.212.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:39:29:21:a5:b0:14:00:a7:8e:c2:5e:25:60:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f9756c522e9c6da7ee3d79919dff7d7f2511c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:b2:7d:a1:41:8b:dd:10:e2:0e:2e:7f:2f:
c6:81:1e:25:91:0f:92:bc:9b:0b:0a:65:db:d8:60:
27:48:aa:9a:e0:69:84:96:10:d3:91:cd:06:20:f4:
0f:f7:f4:0c:e6:0f:5f:31:12:63:99:4e:bd:70:9c:
26:6f:40:94:11:f5:0a:06:25:a7:40:a4:27:72:7c:
5b:be:e2:e6:e1:78:39:91:40:33:d7:ea:2b:86:c8:
c1:71:60:08:6e:37:f4:d0:12:aa:28:9f:0d:58:78:
c3:b5:0d:bb:27:94:57:c9:41:60:12:28:f6:41:f2:
a1:98:02:7e:31:a3:96:99:e5:f5:e9:a3:e0:05:b9:
78:49:8b:57:8c:ae:41:6e:55:6c:6d:f0:08:a8:77:
3d:24:5f:1d:64:95:5d:3a:07:f5:31:d6:93:79:43:
6b:b2:ab:82:9e:8c:1a:bb:18:eb:29:59:9d:fa:1f:
b9:68:e1:eb:c9:85:e5:24:06:00:e8:a6:18:b3:82:
5d:9d:a0:18:6b:51:8f:24:b9:c7:0e:36:2a:03:02:
50:87:ee:d5:48:25:0f:1d:20:0b:3d:da:ea:a9:07:
71:da:3e:72:78:a2:3f:49:91:5b:d9:1c:c6:03:62:
9a:07:f9:14:7d:da:d3:02:92:32:9d:0c:d5:e1:6b:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:97:56:C5:22:E9:C6:DA:7E:E3:D7:99:19:DF:F7:D7:F2:51:1C:7A
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/P5dWxSLpxtp-49eZGd_31_JRHHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.88.0-185.212.90.255
Signature Algorithm: sha256WithRSAEncryption
6a:92:de:e3:83:cb:da:a6:cc:9d:2f:6f:59:f1:c9:a7:aa:6a:
ae:68:67:fa:ac:4f:83:02:b9:7b:9c:77:64:d7:47:e9:58:67:
46:d6:44:8c:90:f4:89:72:5f:21:bd:c6:2f:0a:11:b9:db:9f:
e6:6b:4a:65:f9:30:cc:ee:74:43:20:1d:fe:06:bf:dd:b7:3a:
e6:68:ac:cf:f1:b0:27:18:fe:54:21:70:24:4c:ab:17:68:02:
6d:de:ce:17:4d:2e:3e:7f:3b:f5:16:7b:ac:70:fa:2d:d3:4e:
f7:41:f4:e0:d3:30:01:ba:e4:c6:90:37:d3:d2:54:a6:ba:6e:
0a:86:31:4c:4c:41:a2:0d:13:db:4d:e2:df:52:51:36:ce:9c:
c0:a3:85:1e:ce:ce:a0:1b:20:18:a5:1c:de:cc:10:2d:a3:78:
1a:79:18:f4:e0:2c:10:08:93:2f:ee:fb:bd:47:d4:90:0c:7c:
8e:58:eb:07:4b:e4:e7:ae:4d:15:ff:e2:c4:be:4a:0d:6e:1d:
45:0c:a2:72:36:c7:9a:d6:2d:e9:ef:82:58:bf:00:33:5d:95:
f1:af:aa:c8:36:41:b2:fa:b8:03:a9:73:a1:7e:da:1a:a9:bf:
d0:88:bf:0c:c8:4f:fa:85:d0:4e:8b:98:d7:36:4c:75:72:0f:
03:e5:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net