Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/hnuhuS0YrQGdjTQRIpxs4Wvf2fs.roa
File: hnuhuS0YrQGdjTQRIpxs4Wvf2fs.roa (raw, json)
Hash identifier: Hp9SysXyt9mq4hm8fSV42S86rV21TF0tL/0ofX/fZL4=
Subject key identifier: 86:7B:A1:B9:2D:18:AD:01:9D:8D:34:11:22:9C:6C:E1:6B:DF:D9:FB
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 0194266C360D5A5A495114B77470A7E2BB57
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/hnuhuS0YrQGdjTQRIpxs4Wvf2fs.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16371
IP address blocks: 185.25.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:36:0d:5a:5a:49:51:14:b7:74:70:a7:e2:bb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=867ba1b92d18ad019d8d3411229c6ce16bdfd9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:12:3b:94:0a:3a:63:79:15:a8:24:d8:a3:
d4:7e:f8:9c:01:67:6a:0d:8b:3b:46:64:5e:65:ee:
4c:14:e5:88:ed:38:81:69:33:ac:3c:ea:15:c7:05:
4f:21:f4:e6:83:19:b2:11:4c:51:4b:b8:ac:b4:59:
2f:cc:e0:0f:63:e1:66:8e:af:de:c9:9a:fa:53:e0:
c5:cb:1f:99:d5:c5:f5:4f:9d:55:83:d3:80:c0:95:
44:91:37:24:d7:06:dd:b0:86:1c:c5:3d:4e:73:12:
a1:79:de:01:2b:d0:63:4d:97:bf:e0:65:56:2b:1e:
51:fe:01:e2:97:35:20:d2:3a:c9:53:35:32:44:b0:
fb:5c:d0:5e:72:42:fb:1e:fb:fa:e1:f0:55:71:5e:
cb:43:65:99:0b:f8:b3:d1:8b:9b:cd:3f:b1:3c:25:
36:f5:4a:5b:99:5f:25:67:3b:0f:71:b9:a6:8d:b9:
2b:52:c6:b2:63:22:1f:78:4c:5e:b4:64:79:0d:69:
93:42:19:4e:da:f9:36:f1:07:0f:65:a0:3d:09:29:
38:aa:77:bb:70:c3:e5:d7:77:23:d4:00:6c:65:f6:
1f:74:d4:65:88:61:50:bd:94:59:03:b9:49:3e:88:
e2:dc:89:13:0c:a6:41:9f:0d:c7:df:1d:03:c0:fd:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:A1:B9:2D:18:AD:01:9D:8D:34:11:22:9C:6C:E1:6B:DF:D9:FB
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/hnuhuS0YrQGdjTQRIpxs4Wvf2fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f1:b6:e7:dd:65:90:a6:a2:41:9e:9f:88:ae:41:c8:b0:18:
1c:72:8f:19:0a:8e:68:e3:87:67:a9:3a:ea:b6:2b:cc:8d:a9:
b3:ea:68:e1:4a:ea:4d:3a:ec:bd:63:36:84:c0:1c:42:25:60:
54:a8:16:3e:3f:4b:c3:18:8f:ce:13:6a:b7:f9:ca:6d:81:d3:
dc:df:6d:28:f7:53:54:28:28:d0:18:cd:70:30:ab:54:61:c2:
08:b2:a4:21:0a:03:6f:e3:04:3d:63:18:0c:99:48:8c:5c:79:
b8:3a:fb:f5:10:4f:3d:77:56:28:86:fd:5f:fa:1d:5c:e1:91:
b4:f0:a0:58:97:a4:cd:2e:39:68:15:b5:bb:92:2e:e7:3c:4b:
62:58:5c:bd:83:ce:d2:70:95:37:6d:8b:a1:7f:45:bb:aa:76:
4c:c7:35:8e:ac:64:03:4d:ad:2e:7e:29:71:f4:76:b3:62:9a:
59:df:e2:5b:dd:61:7b:85:f4:6f:3e:b1:da:40:cc:ae:bd:f4:
18:bf:d0:17:10:71:8a:d0:7e:a4:be:7a:78:c3:4d:7a:a0:ef:
13:e3:54:df:b4:cb:a1:58:02:78:18:89:26:15:6e:61:2c:ed:
03:2d:d9:95:fa:f9:81:86:12:ab:bf:ae:0c:70:a0:9c:bb:a4:
84:a6:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net