Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/l7WjKJBoi3ZOMaBwpHnPjLLele8.roa
File: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (raw, json)
Hash identifier: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=
Subject key identifier: 97:B5:A3:28:90:68:8B:76:4E:31:A0:70:A4:79:CF:8C:B2:DE:95:EF
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019428233E83DD55CEB81E955398466000F8
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/l7WjKJBoi3ZOMaBwpHnPjLLele8.roa
Signing time: Thu 02 Jan 2025 17:49:45 +0000
ROA not before: Thu 02 Jan 2025 17:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206874
IP address blocks: 185.164.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3e:83:dd:55:ce:b8:1e:95:53:98:46:60:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Jan 2 17:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b5a32890688b764e31a070a479cf8cb2de95ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:5b:7f:c0:b7:cc:99:cc:c6:0b:87:12:c5:
d7:c1:e5:e5:69:52:ce:cd:db:5c:0c:6c:c8:d7:a1:
fb:c2:b2:58:f5:55:ba:f8:2b:b0:06:70:11:29:95:
60:52:eb:a9:a5:19:bc:b7:6d:72:8c:f1:e6:56:23:
4a:13:40:d4:92:70:6c:f8:a6:1d:27:ae:3e:c9:90:
bc:30:c0:11:31:83:b2:82:7b:13:48:53:e3:90:94:
96:3e:f9:61:5a:07:9b:58:67:a0:b5:e8:cb:63:1e:
6a:a5:3c:2a:7c:32:bf:ab:a3:71:91:a8:9b:2f:96:
75:b3:b4:45:d8:47:ef:0f:77:ac:8c:a1:85:70:da:
c1:fd:42:56:d3:15:79:45:c0:7f:a1:c8:bb:28:c8:
bf:79:4f:9e:57:9e:6f:ab:91:a6:ec:ba:9f:68:3c:
68:c8:cf:17:db:32:8a:6a:3b:a1:85:51:ae:02:5b:
f4:19:0a:0d:67:f9:4f:d6:3b:77:be:99:06:de:92:
d9:9f:9f:50:86:9a:18:3b:6d:fd:ab:95:59:c1:80:
bb:e2:2a:98:25:7a:8c:3b:4a:40:b2:ad:1e:2e:a5:
10:1d:7b:93:66:e9:49:af:31:9c:22:cb:b5:97:34:
c7:76:88:8e:82:89:09:a7:6d:72:16:97:c2:15:47:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B5:A3:28:90:68:8B:76:4E:31:A0:70:A4:79:CF:8C:B2:DE:95:EF
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/l7WjKJBoi3ZOMaBwpHnPjLLele8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.124.0/22
Signature Algorithm: sha256WithRSAEncryption
89:27:73:68:75:b4:fc:96:08:64:c8:fc:59:85:a2:df:cf:4b:
70:e4:80:e3:d4:18:f1:9b:5c:1e:f8:d2:9c:f2:f2:65:e7:91:
17:cb:3b:76:29:48:cf:ff:81:72:c6:3b:10:1a:87:c4:77:1a:
f6:5f:7f:ff:7d:bc:14:f4:43:fc:bf:74:af:c2:15:a2:34:57:
b2:6c:31:3b:bf:2f:29:76:9c:99:3e:2c:97:69:95:4b:ca:65:
8a:83:2c:39:a8:5e:23:f4:10:72:02:5c:e6:9e:d4:4f:ab:5f:
d5:58:54:10:8e:77:41:49:46:18:39:3b:22:d6:42:71:df:44:
47:4a:50:39:86:e6:3a:43:e6:8a:f8:49:f7:fd:4f:9a:2c:ed:
48:d5:f2:64:c6:56:24:69:fe:cb:77:e9:aa:34:99:0e:eb:b5:
83:f7:1d:19:de:9b:3b:d5:ad:a4:6a:bc:c4:29:71:58:c3:90:
a7:c2:67:34:df:60:dc:93:9e:a7:51:d9:06:c9:10:c6:d2:9b:
a9:61:51:86:e9:78:b6:5e:ec:6f:a1:8b:c2:13:76:1a:38:49:
5a:17:5d:8e:c1:25:ed:89:26:3f:ad:f7:f7:cc:c9:8f:0b:09:
c2:f8:7b:ef:25:91:29:9a:92:27:af:ab:4f:8d:d1:d9:6d:97:
94:a4:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net