Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/dnna3QdlDeomv7D_EwLJ_fnfivI.roa
File: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (raw, json)
Hash identifier: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=
Subject key identifier: 76:79:DA:DD:07:65:0D:EA:26:BF:B0:FF:13:02:C9:FD:F9:DF:8A:F2
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 01941F8C5625DF71031255C291B91CD45715
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/dnna3QdlDeomv7D_EwLJ_fnfivI.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64415
IP address blocks: 185.100.248.0/22 maxlen: 22
185.100.248.0/24 maxlen: 24
185.100.249.0/24 maxlen: 24
185.100.250.0/24 maxlen: 24
2a00:9da0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:25:df:71:03:12:55:c2:91:b9:1c:d4:57:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7679dadd07650dea26bfb0ff1302c9fdf9df8af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:72:8d:b2:6f:7e:2b:a6:31:72:3b:8a:a1:
7a:f7:21:a2:9c:19:57:18:e8:94:9a:f4:4e:ba:7f:
dd:4c:8f:45:8a:d6:d7:e3:1d:6e:48:30:52:0d:eb:
0b:02:23:5d:53:3b:55:c7:eb:74:ec:ed:87:85:7a:
14:3b:2b:66:17:66:af:51:ec:de:f4:f0:7f:13:82:
b2:0a:3d:5e:24:2f:08:80:4a:51:75:28:2e:ab:70:
bb:81:4f:2f:5b:7d:a0:c4:ea:90:b6:88:ec:77:83:
68:19:f9:42:78:47:b8:3d:f2:23:b4:47:b2:31:91:
9c:e2:be:11:f3:95:bc:cd:d9:b9:d4:a0:1d:0e:a3:
16:3a:b1:2b:9b:ac:81:64:51:be:35:7e:b3:f2:63:
7e:6a:ee:03:d5:0f:40:af:5f:46:68:7b:04:9f:d0:
a9:4d:48:c8:90:9a:72:c6:b7:cc:19:21:42:e5:2d:
a6:8e:00:e3:6b:20:52:18:0d:5e:c7:3e:bc:b3:64:
ff:40:28:c1:aa:cd:12:80:6a:eb:88:54:2b:82:7b:
48:8f:99:e6:7c:12:74:3a:dd:9a:b6:f0:d1:ba:d8:
b7:7f:12:67:8c:06:b9:17:57:18:ff:5e:46:27:ff:
af:2e:bb:c3:5c:7d:e9:62:a9:94:df:9e:08:ad:9a:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:79:DA:DD:07:65:0D:EA:26:BF:B0:FF:13:02:C9:FD:F9:DF:8A:F2
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/dnna3QdlDeomv7D_EwLJ_fnfivI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.248.0/22
IPv6:
2a00:9da0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:69:c7:03:d7:fe:d4:2d:ab:c4:95:14:5b:6b:3c:8f:84:aa:
10:27:21:ee:0c:33:2f:29:fc:dd:bf:6c:51:6d:1a:e5:7b:09:
61:3d:95:19:a1:a0:71:5f:20:2a:7b:16:cf:17:14:01:51:da:
72:fe:51:8a:96:6d:51:9b:86:8b:7f:e7:0c:0e:cf:f3:ea:05:
a8:33:e6:7f:51:b3:0a:8c:04:20:f2:5c:5e:df:f5:2f:3c:6a:
27:e4:f0:67:28:4f:6a:ef:ce:04:7f:85:be:97:44:99:7f:22:
71:af:4d:8e:08:b0:df:ff:99:52:0d:49:38:f9:1d:3b:8e:ec:
32:04:f9:05:dc:4a:c6:4a:de:eb:22:b7:b0:1c:be:2a:58:5d:
43:76:a7:74:b0:f9:14:8c:a8:1d:e9:3e:45:52:ec:b0:c2:3d:
aa:df:da:ee:18:40:f6:a5:5f:1a:a2:33:1a:d6:5a:37:74:9b:
a7:10:57:2b:7f:ee:7d:54:e7:49:16:e2:f2:72:6f:3d:b4:26:
ec:d8:5d:50:b0:63:a6:70:e0:82:ef:6d:a0:0e:68:35:79:f4:
46:dc:b4:c3:f3:fb:ec:97:e8:1d:06:69:bb:b7:34:62:7a:ae:
7b:54:be:a0:7f:03:92:c1:ec:d2:59:0e:8b:14:9c:bb:c2:3a:
57:f8:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net