Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa
File: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (raw, json)
Hash identifier: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=
Subject key identifier: A1:57:64:8D:60:A8:3B:A5:0A:89:49:C2:2C:60:00:1E:30:4E:F6:6B
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01942444BAB5D084CC85478A66B2CCD8265A
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38999
IP address blocks: 185.127.183.0/24 maxlen: 24
185.127.183.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ba:b5:d0:84:cc:85:47:8a:66:b2:cc:d8:26:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a157648d60a83ba50a8949c22c60001e304ef66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:55:14:2f:72:f3:67:f4:a4:27:cc:c3:cd:
c3:b7:b3:c4:36:a4:b6:f3:de:d0:d7:53:75:27:8c:
f8:49:08:11:c9:ce:e1:88:b8:72:13:6f:3d:1f:93:
95:cc:a3:6f:0b:0d:24:2c:8d:f7:f1:c6:d6:b0:dc:
7f:f6:00:6b:1b:5b:00:4d:8a:87:94:9b:39:99:83:
95:fa:f4:29:b5:6f:ef:76:8f:64:11:14:b8:06:c2:
dd:1c:62:d7:7b:ba:a0:c2:a2:3c:9b:b9:fe:da:b6:
73:5d:50:23:9e:22:28:32:33:09:ec:64:ed:a9:fc:
e9:7b:03:87:fb:28:2b:58:86:ec:88:8c:30:98:11:
db:23:1d:e6:61:63:b3:f7:35:11:49:85:3c:c1:5d:
e1:61:a8:bf:1b:40:ab:1f:14:e1:ed:70:b8:7f:f1:
e9:d7:67:d4:18:18:43:0e:09:99:cf:e5:6d:d7:27:
02:43:75:40:b9:d3:7a:eb:ca:1d:b9:99:aa:76:54:
ba:79:d7:72:bf:66:c4:e1:80:8a:1f:6e:51:da:3a:
32:1f:6a:54:ce:60:a6:11:4b:ee:7b:94:5c:a4:83:
39:97:6a:b1:c1:53:1e:55:2a:3d:0f:22:e1:b1:f7:
e3:ac:c5:2c:4a:6b:18:b1:7d:5f:af:87:c9:1a:cb:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:57:64:8D:60:A8:3B:A5:0A:89:49:C2:2C:60:00:1E:30:4E:F6:6B
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.183.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c8:7a:fd:e7:df:6f:ea:4b:95:c5:40:b7:78:93:f7:56:5c:
f3:75:23:71:96:1e:06:22:ad:75:19:27:a5:1c:87:af:7e:9b:
5a:40:05:ad:3a:9c:a8:d4:71:82:a2:9d:6e:bd:77:af:25:71:
8c:fd:5a:2a:fb:07:40:47:d2:74:d0:bd:ab:b1:2e:24:bc:7d:
ef:dc:11:ea:a3:ef:b6:a5:f9:96:69:a3:d1:d2:f4:32:d2:30:
57:de:72:ed:68:c8:e4:ac:e3:f0:bf:ca:3d:b2:d1:6b:84:6e:
b5:5c:ee:53:77:8d:b3:0a:32:3b:c6:40:a8:d8:bf:e6:b0:15:
d1:33:e4:4f:51:b6:d3:b8:ee:d9:2e:f4:4f:e1:40:e8:6b:e7:
cb:f3:13:aa:7f:6d:7f:bc:5e:a1:28:9f:62:9f:fc:62:85:6f:
cd:c2:64:cd:ea:86:9e:97:08:2e:ed:24:38:ef:60:59:30:30:
c2:c2:60:08:fe:6e:14:7a:77:93:44:3a:c5:e0:ce:24:37:72:
92:ac:3f:7c:56:ae:94:34:67:81:67:6f:b3:44:5f:a3:5c:93:
1a:e9:47:70:3d:ce:a1:9f:62:12:fd:45:94:f9:2f:7e:b4:a3:
fc:94:76:fa:89:bc:0a:f1:16:59:6f:8f:5c:33:5f:c6:6a:ea:
a9:35:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net