Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/aAJKdn_u125mac3iiC8QVztvInI.roa
File: aAJKdn_u125mac3iiC8QVztvInI.roa (raw, json)
Hash identifier: 3b7fusF13hIUnZIhVd8QQY5Oa5mdPkxjIJ0o8cOzBGI=
Subject key identifier: 68:02:4A:76:7F:EE:D7:6E:66:69:CD:E2:88:2F:10:57:3B:6F:22:72
Certificate issuer: /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial: 019426D9E67459342B8B0298329EC2171602
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/aAJKdn_u125mac3iiC8QVztvInI.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200638
IP address blocks: 185.26.86.0/24 maxlen: 24
2a13:3640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e6:74:59:34:2b:8b:02:98:32:9e:c2:17:16:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68024a767feed76e6669cde2882f10573b6f2272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:d9:10:63:73:24:db:c7:93:3c:0e:31:3b:
29:e2:f8:a6:56:78:07:26:c0:55:ab:d1:a2:65:96:
40:87:5c:8f:cb:ae:85:b3:38:89:30:df:33:eb:15:
14:3c:7f:57:11:ce:98:a1:ce:06:d4:f4:f0:6c:22:
f1:a8:fd:5b:5c:76:7b:63:34:91:26:17:cf:70:43:
1e:ab:d0:19:9c:2b:2c:76:24:e2:47:f8:61:fa:b2:
dd:09:0a:f3:83:f5:93:b3:1a:68:65:51:a0:dd:c8:
20:cc:45:b1:22:35:52:76:71:f6:69:06:79:77:36:
d9:10:96:c8:3b:06:d0:6b:80:c7:7b:5e:ec:89:fa:
f5:38:e4:09:10:e5:0e:5b:fa:0d:ff:fa:18:c3:a1:
2a:c4:54:c1:83:6d:59:af:e5:71:38:95:9b:63:88:
03:c9:8a:ca:f5:53:1d:41:c3:34:72:c0:54:94:12:
d2:70:be:67:48:b4:eb:58:b4:df:a1:8b:7b:ad:83:
0a:8c:5f:d4:74:2a:93:92:60:30:42:4e:f0:e4:28:
4d:23:68:b2:d7:8c:6c:a9:59:3f:a0:20:fe:25:9a:
c6:c6:68:c0:cf:1f:9d:1c:f7:05:8e:b9:a1:24:aa:
ad:77:39:e3:41:20:d4:3c:5b:f3:9a:7b:b8:7b:c1:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:4A:76:7F:EE:D7:6E:66:69:CD:E2:88:2F:10:57:3B:6F:22:72
X509v3 Authority Key Identifier:
keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/aAJKdn_u125mac3iiC8QVztvInI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.86.0/24
IPv6:
2a13:3640::/29
Signature Algorithm: sha256WithRSAEncryption
64:a0:a7:3b:15:fc:c3:13:0f:65:26:5e:25:78:4c:60:07:c7:
1c:1c:fd:23:9d:6d:c2:11:25:1c:f2:e9:29:0b:e2:e3:a5:c5:
7c:65:37:a1:1c:f3:c0:4b:3a:b8:b7:e5:d0:2f:6d:54:cb:33:
f0:b6:ea:d2:81:24:33:93:94:a7:6f:53:65:24:48:72:74:fc:
53:c3:21:5d:21:8b:e9:b0:d2:62:e3:f3:be:9b:ff:38:ed:1b:
91:02:f4:57:46:e9:14:ac:b5:c6:dd:f8:1a:fd:b6:7b:4a:00:
99:e1:35:8c:6d:e0:d3:32:14:5a:35:f6:39:15:4f:71:0a:85:
05:b7:5d:cd:3d:35:93:2f:41:6c:0f:03:5f:6c:66:35:d8:52:
41:c4:5c:82:bd:2e:79:ee:6c:9d:68:a4:fd:eb:86:0d:a6:36:
b5:85:c9:c5:3d:b0:96:8d:61:31:ff:3e:a4:5e:d9:18:20:91:
5a:ec:03:df:c5:8c:6f:7f:87:b9:a2:5e:ee:07:25:68:d5:1a:
4d:80:96:18:7e:b2:62:f4:e7:32:dd:5d:53:08:12:43:a7:10:
1c:ed:99:cc:55:1d:ad:cf:15:10:8e:39:db:b8:c4:49:33:df:
c5:e8:00:b7:36:cb:08:91:09:18:f7:14:ba:16:f4:02:e9:0e:
0b:3b:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:09 2025 by rpki-client on console.sobornost.net