Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/V0aRJCOG2a9twiI1SK4HfmRChII.roa
File: V0aRJCOG2a9twiI1SK4HfmRChII.roa (raw, json)
Hash identifier: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=
Subject key identifier: 57:46:91:24:23:86:D9:AF:6D:C2:22:35:48:AE:07:7E:64:42:84:82
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019427B638EFF2CD3E52BF81370C99DE7B5B
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/V0aRJCOG2a9twiI1SK4HfmRChII.roa
Signing time: Thu 02 Jan 2025 15:50:41 +0000
ROA not before: Thu 02 Jan 2025 15:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211211
IP address blocks: 185.23.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:38:ef:f2:cd:3e:52:bf:81:37:0c:99:de:7b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=574691242386d9af6dc2223548ae077e64428482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:12:9b:a7:83:00:f5:48:1f:ee:b4:ec:54:
14:2c:c2:94:0c:2d:3b:6a:6a:e2:2f:db:ab:8e:5b:
bc:86:13:a1:1c:66:78:f2:b6:08:f1:1f:d3:10:e0:
34:b0:eb:73:76:c6:6b:f6:66:fd:80:df:0a:51:18:
cf:b3:d7:0f:f2:c3:fe:eb:f8:95:c8:91:d8:a0:83:
cb:a4:fc:4d:10:0b:f7:76:23:69:70:9e:92:cf:85:
99:14:71:05:77:17:15:43:c5:fa:50:97:ec:0f:e7:
4b:7b:0b:7f:cd:a4:c0:dc:52:3d:ac:69:4d:f6:25:
0c:b3:9a:09:99:3e:5a:2f:d3:f1:d5:74:29:8c:d1:
f9:95:35:b6:39:dd:93:90:2f:34:07:25:bb:38:33:
58:50:ba:0b:f0:a0:28:2c:f9:4c:36:d9:1a:75:ab:
6f:9e:fc:63:2d:c5:12:f0:03:1c:05:c6:1a:c4:3e:
6e:5e:7d:ef:02:36:0f:b2:5f:38:5e:ee:15:2b:53:
f2:35:c5:16:c0:52:1e:47:2a:1f:d7:e0:74:af:21:
5d:42:43:fe:76:2d:c5:f2:da:ca:ad:89:00:b0:fc:
f0:b9:c2:a4:08:50:3c:55:fd:eb:e0:d7:8c:f2:c3:
2b:42:ee:0f:f4:3e:c3:97:74:c6:76:e8:e0:74:c5:
df:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:91:24:23:86:D9:AF:6D:C2:22:35:48:AE:07:7E:64:42:84:82
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/V0aRJCOG2a9twiI1SK4HfmRChII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.236.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f5:34:0c:fa:eb:38:9e:17:33:1e:62:c3:73:b5:f4:7c:1a:
5e:eb:e0:72:3a:57:4d:1f:e2:3c:e6:92:24:f2:3d:4a:ee:af:
ee:b1:e6:8d:82:37:05:6a:6e:2c:2c:e6:5b:24:0b:df:0a:6e:
c4:e4:7c:c8:06:b9:4d:2c:c9:e9:da:46:6c:04:a3:d0:4a:51:
02:f4:a9:65:d1:e8:37:32:34:4c:f4:10:73:d6:4c:bf:e4:dc:
56:7a:56:4d:4d:12:df:6c:ad:51:dc:70:d3:f1:c4:4e:0a:70:
7f:33:ce:67:24:58:50:58:86:89:cb:14:05:e3:48:9c:a2:36:
0b:73:cf:bf:76:d7:4e:97:7e:74:a3:47:65:d7:91:8f:04:94:
21:1a:fc:99:09:d2:dd:57:a4:f4:db:9a:6d:2d:cf:f9:d0:e9:
76:ee:27:ef:44:8e:cb:f6:4a:6f:32:d8:a0:7f:f8:7a:82:d8:
02:6c:11:94:80:4a:60:d6:64:3b:51:29:e5:48:93:b1:f1:00:
5c:3c:b2:b1:e3:16:2d:b3:10:b0:13:6d:5d:25:50:a5:85:7d:
46:f8:cf:75:1a:37:18:18:08:5e:aa:d7:6c:7d:11:b6:1b:46:
37:b6:8c:bb:ce:8c:86:d8:1e:f7:8a:a5:bf:db:aa:38:28:27:
04:2b:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net