Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/oudSfHdCLiNB6U8UydMcb_Ovg84.roa
File: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (raw, json)
Hash identifier: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=
Subject key identifier: A2:E7:52:7C:77:42:2E:23:41:E9:4F:14:C9:D3:1C:6F:F3:AF:83:CE
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 019427B6084421DDED141958584981CD57E1
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/oudSfHdCLiNB6U8UydMcb_Ovg84.roa
Signing time: Thu 02 Jan 2025 15:50:28 +0000
ROA not before: Thu 02 Jan 2025 15:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205832
IP address blocks: 185.204.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:08:44:21:dd:ed:14:19:58:58:49:81:cd:57:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Jan 2 15:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2e7527c77422e2341e94f14c9d31c6ff3af83ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:f2:27:1b:b7:f1:1d:59:04:41:1c:0d:fb:
48:f9:4f:10:69:68:9c:97:3c:b7:d0:1d:72:e0:32:
80:ee:e4:8a:e1:de:ff:06:36:d0:41:2d:b7:2e:ec:
50:b5:65:40:59:2a:b8:8d:4c:c9:ee:12:9c:4e:f8:
c2:52:7c:f2:a1:d7:53:15:e3:8c:0b:b8:02:d5:59:
43:6c:cf:b7:18:fb:fc:52:fd:15:21:6b:f4:f1:36:
a3:29:c7:56:18:c2:55:9c:58:85:67:72:10:66:9a:
5d:70:1c:a7:04:a5:79:f4:d7:2f:d2:72:97:cc:55:
a9:e0:68:c7:1a:34:20:dc:c3:0c:db:8d:21:0e:c6:
04:12:33:4c:51:09:9b:59:51:1c:0d:ba:d4:ea:d4:
dd:80:4b:73:d6:d9:90:de:83:e2:bc:7f:77:a9:83:
a4:ce:0d:70:70:b6:6e:52:2e:f1:d2:0b:3c:bb:3f:
31:49:89:b6:ac:30:50:0c:0a:6d:08:fe:20:16:95:
b0:8b:b0:6d:e5:e8:e7:b0:63:93:55:7c:7e:4d:a6:
f2:35:71:73:ea:a2:ef:c5:31:f6:86:80:1b:85:92:
04:51:ca:ca:86:60:aa:c1:8f:83:b2:dc:35:7d:aa:
46:8b:b5:96:01:ab:19:89:71:37:47:45:68:85:69:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:52:7C:77:42:2E:23:41:E9:4F:14:C9:D3:1C:6F:F3:AF:83:CE
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/oudSfHdCLiNB6U8UydMcb_Ovg84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:a1:bb:a5:97:b6:84:de:ab:1d:16:b1:62:ce:95:65:80:e5:
e2:30:4a:e3:a4:3f:54:e2:a4:73:e5:25:cc:62:0b:78:c2:d2:
58:db:51:3e:dd:a4:5c:c8:ab:db:f0:3d:01:9a:3c:60:aa:0d:
e3:a7:e0:c2:5c:89:8b:45:85:62:ee:d2:8e:b1:95:65:d7:e3:
22:b7:49:3f:28:40:62:17:63:bb:73:61:ac:51:87:6b:8d:11:
a4:7a:e3:19:c6:56:3c:87:ed:dc:78:77:98:bd:b0:1a:5d:b4:
ef:82:b6:76:7e:16:34:be:f0:95:dd:dd:5d:70:4b:f9:36:72:
7f:76:f9:ff:b8:94:da:0f:c5:ca:d4:b5:e6:83:67:74:15:89:
29:6d:a7:99:4f:94:6a:d3:19:f4:9c:58:c4:6c:a6:ff:65:dd:
54:c6:5f:37:3e:68:41:68:46:bd:a1:52:67:dd:81:78:7f:75:
a5:52:70:78:ac:65:cf:dd:aa:a5:f0:bf:aa:2d:a9:75:51:7f:
2f:62:db:80:ef:38:cc:ea:21:03:bf:af:8d:3d:39:87:f7:01:
3a:31:b8:67:5b:bd:51:e5:40:56:ee:32:aa:3d:bc:57:77:6f:
4d:55:87:62:72:37:8f:09:a0:93:60:12:95:98:eb:6d:20:d6:
fb:83:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net