Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa
File: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (raw, json)
Hash identifier: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=
Subject key identifier: 03:F9:EC:AD:37:D0:EF:5B:B4:52:BC:C4:43:A4:8D:52:6F:F7:1B:65
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01958A1E33297564F17897CDFB1BC0CDBFAE
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa
Signing time: Wed 12 Mar 2025 11:29:49 +0000
ROA not before: Wed 12 Mar 2025 11:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51026
IP address blocks: 185.3.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8a:1e:33:29:75:64:f1:78:97:cd:fb:1b:c0:cd:bf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Mar 12 11:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03f9ecad37d0ef5bb452bcc443a48d526ff71b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:59:45:ad:8b:b5:f0:16:e1:1d:c3:ec:70:
ca:fc:0c:38:df:cc:8d:fd:6c:4a:cf:9b:d0:1d:b8:
cf:e7:4e:25:a8:ea:1e:95:b3:a1:8e:2d:0e:e3:ae:
71:1f:a2:0d:26:f5:4a:1a:59:b2:ab:18:af:ad:fb:
19:c9:c6:7a:0f:11:0f:51:2b:59:7b:ba:c9:53:d6:
fe:47:61:b2:2c:fe:e0:93:1a:ae:04:a2:ba:5a:cb:
e2:4f:25:1f:95:a6:41:7a:aa:34:e3:18:33:a2:bf:
c9:ca:cb:44:cc:00:26:30:7c:c8:31:b2:99:ab:57:
7a:b9:84:cb:5d:69:43:cb:77:1b:9b:e5:b2:d1:1a:
ea:28:af:38:09:bf:38:27:cf:f9:ff:01:68:f8:15:
dd:40:60:ba:44:57:35:54:39:a3:ef:44:87:88:0c:
6d:e3:16:4d:a4:42:f8:46:0d:f4:28:61:1d:b5:e3:
27:22:1a:39:52:7d:b0:a3:88:fe:c8:05:49:2e:c5:
01:cf:48:3d:3a:2b:22:c2:70:60:f4:17:42:8a:0b:
50:b6:c8:04:22:97:7b:68:92:d7:0f:cd:15:2c:44:
df:df:a9:49:c5:a3:36:20:92:2c:eb:41:82:26:7b:
e3:68:f2:c6:59:10:68:1b:06:72:18:13:83:68:52:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:EC:AD:37:D0:EF:5B:B4:52:BC:C4:43:A4:8D:52:6F:F7:1B:65
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f4:c9:a5:1e:ab:9b:c8:30:9a:e3:0d:f1:74:32:63:06:67:
07:3b:2a:73:2b:67:3c:ad:79:9d:d5:6a:11:67:25:47:1b:83:
d5:e3:99:49:e9:1f:1d:bd:f3:69:b3:e1:4e:cc:1d:6b:f0:b8:
79:a3:6d:79:77:37:1d:1d:75:aa:c1:e5:ca:fa:b6:6e:55:05:
77:78:23:4d:68:c8:2b:f2:0f:1e:42:c5:c8:8b:08:24:56:c1:
c8:8a:6f:e1:90:4e:26:de:7c:77:7e:fa:a5:df:21:30:71:2d:
65:1c:bf:69:73:24:98:2d:85:c8:4d:b4:3b:7a:71:2f:05:f7:
37:2a:8e:27:1e:85:22:b9:46:12:aa:98:84:74:2e:66:62:7f:
ca:dd:f7:5b:8f:df:14:20:83:35:54:a5:9a:76:a7:b2:9a:2b:
0c:75:71:36:b3:64:f2:64:93:d0:c8:08:ad:6d:fd:e8:f7:08:
f7:69:14:66:9a:04:bf:0b:a1:99:e8:c2:48:51:02:28:22:7d:
53:39:69:2e:fe:4a:d1:e7:4c:9b:43:f5:5a:c9:f7:cf:f7:d0:
06:22:65:52:e8:24:1b:a7:e9:7c:3d:69:de:06:0f:e2:65:44:
a6:bd:94:84:a2:09:a0:85:a5:59:9e:02:3f:05:6f:2f:48:b6:
f2:44:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net