Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa
File: Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa (raw, json)
Hash identifier: /89yG0WnFcE05IMFp3mM3/qP9TrscwAHv2Gfhcc6Cj0=
Subject key identifier: 52:68:F6:AD:B8:EA:13:C1:C8:57:EA:EE:19:E5:5E:A9:96:30:83:DB
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0194266BEB0FE68D7A67778F34E8E7E7B59D
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39918
IP address blocks: 85.112.73.0/24 maxlen: 24
212.98.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:eb:0f:e6:8d:7a:67:77:8f:34:e8:e7:e7:b5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5268f6adb8ea13c1c857eaee19e55ea9963083db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:d1:5f:e8:a0:2c:d4:60:41:e7:9a:6a:82:
2d:c0:24:5f:f0:31:9c:f7:8c:b4:2f:4c:44:3f:59:
b4:7b:f6:cb:56:fa:2e:1c:04:2b:8a:20:a0:54:18:
dd:79:64:04:e9:90:48:db:ef:de:4a:33:09:cb:6f:
a3:b8:f5:2b:1a:cd:ce:b1:81:df:9b:42:52:4c:6c:
5a:3a:32:f0:48:ed:c8:b9:28:ac:98:29:f3:d8:1e:
67:bd:92:ba:f9:2f:e4:cc:0c:ed:f0:43:e5:f0:5b:
c2:6e:ef:ed:ee:4e:09:45:3d:bb:ba:97:1d:ce:55:
5c:5a:64:1c:6d:34:36:6c:d7:c1:e5:10:55:88:31:
36:cd:ba:5d:06:91:6c:c7:ad:c2:65:b9:e5:da:40:
08:27:6b:56:88:e9:4f:4f:7e:05:2c:cc:5e:81:f8:
c4:d2:fd:6b:89:63:2a:b3:78:92:fb:a7:bf:29:cb:
2a:c0:f8:1b:ff:c2:f3:92:5d:cf:35:79:5d:b3:af:
e0:bc:d0:e3:19:06:61:df:88:ef:b2:0f:8e:c3:16:
17:0e:5d:a5:1e:16:a6:f0:b9:db:ed:a8:73:01:a5:
3b:0e:24:72:f4:b9:20:99:20:6e:28:58:55:d2:c8:
82:67:e4:0e:92:b3:81:60:56:c0:ab:c6:64:e8:ae:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:68:F6:AD:B8:EA:13:C1:C8:57:EA:EE:19:E5:5E:A9:96:30:83:DB
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/Umj2rbjqE8HIV-ruGeVeqZYwg9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.73.0/24
212.98.128.0/24
Signature Algorithm: sha256WithRSAEncryption
52:54:d0:c5:25:99:f8:66:0a:aa:53:1f:55:1c:c1:05:18:fc:
de:3d:5d:2f:8a:6a:38:b0:62:45:59:ed:64:5d:31:91:65:ac:
bd:e2:0b:9b:73:1e:44:fe:3c:b9:41:da:68:87:00:79:e8:46:
22:db:7c:50:a9:fa:e5:78:9c:cf:d7:0a:6b:12:50:25:1c:2d:
bc:e2:de:04:4c:57:cb:f5:85:0b:19:04:36:3b:1c:bf:24:5a:
48:38:04:72:65:7c:26:29:f9:00:a6:6b:2d:d4:4f:6d:26:fe:
3b:98:36:b1:58:b4:9b:62:55:2b:b2:dc:bb:2b:37:12:3c:e9:
3c:02:3c:5a:04:58:de:f1:61:9d:e2:bf:d9:53:ff:df:49:46:
27:0a:16:43:c7:f2:72:c8:8e:92:4d:10:c9:6b:6c:be:80:cd:
5b:81:b3:77:38:74:31:03:60:03:ea:8b:9e:1b:ab:a1:fa:8d:
7e:5b:57:33:86:57:bd:39:f7:fd:b1:63:55:cd:91:f6:0c:a9:
75:b9:c6:51:c6:41:58:17:c1:95:fe:0d:bd:e6:66:f1:9b:08:
81:53:b6:02:3f:8c:6a:78:f4:db:5d:07:87:6f:09:ca:4c:54:
49:d2:e7:1f:19:10:11:0f:25:02:5e:d8:f9:76:7a:b8:d8:2b:
34:c4:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net