Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa
File: zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa (raw, json)
Hash identifier: SDcPgjrr8y9zPr3/XTNgtJ+0oZH17N4IYV4VzMId4hs=
Subject key identifier: CD:89:CD:FA:2F:14:D4:F5:FE:BD:5C:B4:2A:4A:3E:90:BC:5E:06:C5
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 019425FC08FDC99B7FF5F0FB09FF7AFE5C16
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa
Signing time: Thu 02 Jan 2025 07:47:41 +0000
ROA not before: Thu 02 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 185.140.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:08:fd:c9:9b:7f:f5:f0:fb:09:ff:7a:fe:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd89cdfa2f14d4f5febd5cb42a4a3e90bc5e06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:15:78:0b:49:8b:a7:db:8c:a2:15:a6:1f:b1:
86:d1:4a:0f:4a:a9:85:5e:a4:8b:16:2b:24:6b:94:
14:4a:f8:56:98:29:e1:e0:82:9e:08:00:32:af:97:
23:d3:9d:73:7e:07:6d:7f:e9:4b:a4:4d:76:ec:58:
68:2f:b6:43:97:07:3f:57:56:5f:1d:21:69:3c:d5:
52:16:ca:6c:a9:a8:76:ee:92:ee:52:2e:7c:f5:6d:
21:0a:bd:b6:a3:35:f7:db:81:e3:bd:da:aa:ad:87:
01:ad:a7:bd:31:fc:65:eb:23:5e:73:42:05:4b:29:
3f:13:4c:9d:01:8d:f3:95:23:87:60:cf:06:83:73:
59:6b:02:87:1f:04:13:ca:dc:e5:55:9b:7f:e0:0a:
5e:0f:51:12:49:3d:cc:f4:a0:53:68:ee:07:c0:36:
68:9b:61:c4:b9:26:ce:d1:fe:6e:19:7a:42:fa:f4:
67:3d:6c:96:27:51:9c:cb:26:40:9f:e3:38:e9:c6:
6c:ab:3c:a2:3d:b2:68:a5:ad:29:d2:57:21:64:09:
bd:8d:b7:1f:15:fb:6f:5e:dc:ba:64:cb:fa:e3:cd:
95:62:23:31:bc:a0:ea:6d:43:d8:c4:ad:f7:b3:26:
57:f8:83:dd:ca:b9:e3:74:2c:e9:21:67:ff:b4:ac:
86:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:CD:FA:2F:14:D4:F5:FE:BD:5C:B4:2A:4A:3E:90:BC:5E:06:C5
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/zYnN-i8U1PX-vVy0Kko-kLxeBsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:71:b4:4f:7f:73:23:72:4c:e9:84:2e:3d:f3:8c:dd:6c:f1:
65:c7:b3:7f:7a:74:98:59:a6:f1:a8:5d:ce:fc:f5:3c:58:1b:
99:4a:73:66:42:b7:11:bd:91:61:e6:d6:1d:69:18:ca:07:af:
5a:03:ac:86:fb:84:2f:2a:1e:a6:f7:e4:fa:c6:52:8f:2e:ac:
75:5a:4f:f6:00:cb:75:2d:e1:d3:6d:5a:f5:9e:cb:c2:b5:b3:
af:15:13:68:2d:1d:15:2f:a3:d4:bf:bd:e6:92:ae:02:48:a3:
d8:ed:b2:ba:44:9b:96:04:98:69:29:01:2f:eb:a4:a4:67:31:
bd:95:bc:b8:77:4f:46:22:ed:8d:f7:db:59:e3:6d:cb:ad:e7:
4e:ea:41:2a:ec:c6:3f:18:d2:81:1d:41:32:53:79:65:80:11:
bd:bb:21:9e:35:1c:4f:2a:22:3e:f7:39:39:6f:83:68:b9:1d:
89:51:de:88:b3:d8:99:9b:7b:12:d3:54:27:8d:7c:f4:90:3a:
dd:62:f1:00:8a:4a:f1:c1:5a:42:b1:7d:2a:5c:a3:70:25:f7:
36:a7:19:fa:7c:23:bf:b7:22:b6:69:1d:b3:8d:58:6f:46:05:
f5:8f:1f:66:9a:b6:80:39:96:07:92:c6:b4:b9:ac:65:ba:e3:
6e:3a:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net