Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa
File: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (raw, json)
Hash identifier: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=
Subject key identifier: AE:6A:C2:6D:BA:D2:D5:3C:3F:ED:92:A8:F0:18:D8:96:F2:FA:4A:3F
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1F295EB4599223F217812DDF3C22A
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62048
IP address blocks: 94.182.195.0/24 maxlen: 24
94.182.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f2:95:eb:45:99:22:3f:21:78:12:dd:f3:c2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae6ac26dbad2d53c3fed92a8f018d896f2fa4a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:ad:5e:7d:b3:10:68:e4:1e:7e:30:7f:f5:
3a:ba:41:b5:fb:ed:a3:b7:b6:ed:80:99:85:5d:5a:
2c:50:cb:c7:4b:24:d2:69:a5:8c:06:06:7b:09:64:
a5:cc:d3:fa:ba:76:83:65:33:84:df:79:94:62:da:
ee:31:9e:25:2d:b8:5b:97:86:d4:aa:e4:fc:3c:7b:
0d:17:67:3b:8c:46:43:8b:4b:5e:5c:82:70:3b:d9:
e9:fd:26:e2:b7:f3:a7:30:6f:c5:99:c6:38:f6:e5:
e6:a7:fb:ff:b2:75:6c:1e:a8:bc:0e:4d:6a:25:51:
06:e5:38:28:3f:8b:03:67:c7:45:e5:63:fa:0f:4c:
51:e5:19:2c:7b:2d:67:a1:88:66:10:b6:2a:23:ae:
aa:05:a5:ed:6a:a7:40:54:3d:56:de:2b:70:41:b0:
ce:8d:4b:4d:cd:82:c0:12:2d:3f:5c:06:07:05:7e:
a6:fa:d3:2b:05:db:a5:f7:0b:ba:59:67:79:62:78:
7f:19:d4:0d:52:d9:a0:71:5b:e8:ea:ba:16:65:86:
ff:37:3b:00:2d:6f:15:15:2b:5e:d5:74:e0:55:b8:
0c:72:b8:5d:42:fc:84:9a:e2:5d:97:87:ab:cc:c2:
52:5f:c1:3d:e2:68:76:a0:83:b8:3c:f0:60:a3:1d:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:C2:6D:BA:D2:D5:3C:3F:ED:92:A8:F0:18:D8:96:F2:FA:4A:3F
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.195.0/24
94.182.227.0/24
Signature Algorithm: sha256WithRSAEncryption
36:62:af:c6:dd:c2:88:d7:a2:f8:0d:e0:68:44:fd:24:ae:6a:
0c:1a:09:2a:57:49:8a:3a:99:67:df:3e:15:cb:44:55:6f:86:
37:8b:b7:26:fa:44:04:fd:d0:ef:22:e7:ed:ab:7b:03:bd:27:
98:9b:01:dc:a1:b8:da:00:5e:08:08:69:ae:99:4c:91:1c:50:
f0:32:ae:0d:05:97:e0:00:81:fa:8a:73:a2:f3:60:44:12:67:
fe:2b:18:1f:6e:46:ff:7f:66:04:53:8e:a7:e8:c3:49:93:24:
d7:18:55:46:d1:a1:78:5c:2b:01:f0:0a:26:8a:dd:12:20:85:
e6:15:98:8c:56:ac:1b:ed:3e:9c:a9:b7:c6:1b:33:1b:f0:7e:
78:98:34:31:25:cc:e1:c8:ee:a1:23:39:42:91:37:ff:76:f5:
f3:4b:4b:fd:3a:e5:90:50:6a:3f:5d:c9:e3:33:17:99:ac:79:
bb:d5:8b:1d:e3:e4:66:52:d4:27:0d:b7:b5:18:a0:67:1d:c9:
38:12:cf:fb:7e:28:4a:9c:fe:e2:c7:05:f6:e1:81:d3:44:ba:
39:c6:20:19:88:3a:07:83:54:53:ec:86:be:90:90:7b:30:87:
1e:6b:b8:29:d8:96:f8:01:9f:ce:33:cd:ce:95:c6:c8:cf:44:
90:3f:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net