Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/AaM-pqC2G1Ii-4FRyyYRtfA0Ooo.roa
File: AaM-pqC2G1Ii-4FRyyYRtfA0Ooo.roa (raw, json)
Hash identifier: mQFbvzX+Y9dZrtK2BakuFJ5sm6Ogm235Vho6rN3XTII=
Subject key identifier: 01:A3:3E:A6:A0:B6:1B:52:22:FB:81:51:CB:26:11:B5:F0:34:3A:8A
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019426D9A4653FE8722A7FD12ECF12BC22F4
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/AaM-pqC2G1Ii-4FRyyYRtfA0Ooo.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203709
IP address blocks: 185.214.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a4:65:3f:e8:72:2a:7f:d1:2e:cf:12:bc:22:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01a33ea6a0b61b5222fb8151cb2611b5f0343a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:6f:2a:b9:e4:4e:a6:ae:a7:a4:74:9e:6d:
b1:c0:a2:4b:4e:26:3d:ec:88:63:ea:2a:3d:13:95:
ca:67:88:f2:02:e8:61:e9:ca:e0:7a:48:9b:89:0a:
81:e3:be:be:19:71:79:d6:b0:67:7b:d3:05:05:2d:
41:05:c9:c9:9d:7a:35:b5:21:e8:75:51:4e:8d:5f:
e2:e2:91:be:67:5c:58:29:45:35:36:85:62:d5:be:
ea:21:e0:f2:2a:1d:77:25:b5:2a:3a:7a:da:46:b9:
30:83:61:85:3c:f9:fd:e2:bf:86:e0:e7:3f:44:9e:
84:9c:62:5d:5b:65:8c:44:49:53:15:22:45:41:ef:
f7:b1:76:98:0e:75:70:d1:0f:c9:f7:59:ec:dd:07:
8b:52:fa:5b:0d:8d:47:fc:b3:a2:f0:11:c3:c6:f0:
fb:d8:1c:fc:60:03:e0:f7:4d:68:e2:ee:24:c0:ed:
f5:4f:cd:21:c6:40:57:cc:ba:b5:7b:cf:74:11:b2:
94:fe:06:6b:45:ff:81:41:26:da:57:92:db:56:e9:
54:db:50:8e:96:17:5b:3a:2f:84:5c:14:2c:47:13:
78:6f:af:23:7e:6a:15:2f:6f:0c:b2:1f:63:08:69:
10:37:4b:35:ff:38:39:24:76:8c:c0:62:80:2d:bc:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:3E:A6:A0:B6:1B:52:22:FB:81:51:CB:26:11:B5:F0:34:3A:8A
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/AaM-pqC2G1Ii-4FRyyYRtfA0Ooo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5a:7b:b9:6b:3b:66:7f:db:bb:2e:d1:e7:be:2d:53:28:48:
73:49:88:57:09:5a:f7:9c:da:b2:dc:b4:ea:b2:71:13:19:3a:
90:bf:01:ee:fa:20:85:a3:48:d9:7b:70:d2:28:0b:9f:ce:9f:
d2:47:db:d2:d1:ae:79:c3:78:2b:f1:97:c3:8b:ba:12:b0:cc:
d9:c4:15:3a:d0:52:a3:78:e8:e3:0f:dd:27:d4:61:89:8b:dc:
63:9b:c1:a4:3e:17:1c:ce:81:5f:e9:2b:e1:20:b6:42:d3:35:
f4:9f:a8:34:aa:a6:41:0d:d1:b6:bf:c7:df:f6:dc:34:45:4f:
c2:5e:48:ca:84:ad:ab:13:8c:cb:ea:d3:47:1b:84:2f:9c:1c:
63:94:f0:0d:7c:fb:63:bc:92:34:b8:99:c3:a4:5d:ce:b7:3a:
b0:e6:34:74:84:47:ac:2a:07:ce:64:92:d3:5d:26:58:f6:e4:
ba:ad:8d:ae:2d:8b:da:a6:97:a9:11:c5:71:9e:a3:82:1f:65:
f5:5a:8d:b5:5f:49:ac:e5:6b:b3:98:71:a0:3c:5f:80:45:b8:
35:54:16:e4:bc:ca:90:2c:da:07:6c:ff:bb:d6:28:93:50:0c:
90:f3:16:af:06:81:02:78:81:5b:fb:16:61:7b:ab:20:19:3b:
07:5c:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:39 2025 by rpki-client on console.sobornost.net