Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/1ayWqykxA3-0oHXdVMDTjw-enG8.roa
File: 1ayWqykxA3-0oHXdVMDTjw-enG8.roa (raw, json)
Hash identifier: 80z6vUfHJXcetEFvuCm8sGrawk5cVXzDkmIiJ5nDjeQ=
Subject key identifier: D5:AC:96:AB:29:31:03:7F:B4:A0:75:DD:54:C0:D3:8F:0F:9E:9C:6F
Certificate issuer: /CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Certificate serial: 019427481456D75ABBA2E4CF6B05B07A69F1
Authority key identifier: D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/1ayWqykxA3-0oHXdVMDTjw-enG8.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210162
IP address blocks: 185.228.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:56:d7:5a:bb:a2:e4:cf:6b:05:b0:7a:69:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9c9baf46d6c94d27ce128da3b65b5a3b06db38b
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5ac96ab2931037fb4a075dd54c0d38f0f9e9c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:93:36:67:e0:ce:aa:05:30:5f:98:3d:e9:
b9:df:3f:bb:b9:71:fd:e7:2e:45:5d:b0:15:bc:59:
0a:6c:2d:52:f0:c0:66:40:14:e8:5a:75:bd:c0:e5:
e3:04:0d:3c:d8:8a:3d:a6:3c:be:00:a9:5d:cd:d3:
d9:52:3b:83:dc:36:10:4e:cb:96:06:8d:f5:dc:45:
6e:0b:99:b1:c1:f7:99:4c:df:8a:90:5a:24:0b:dc:
a1:e0:a9:e2:4e:36:5a:de:b9:5a:1d:cb:70:0c:5c:
74:d9:18:c1:40:4d:7f:f5:87:13:1c:14:23:84:18:
77:c1:9e:2e:88:9f:8e:69:3f:1f:f0:c3:98:74:a1:
ab:95:b7:0a:92:ad:46:20:14:3d:c2:3b:f4:f3:ea:
18:25:bd:c3:07:9e:f1:06:2c:0b:f5:a6:37:88:72:
89:9a:8d:18:de:55:19:a5:5a:06:59:7c:fe:27:12:
a2:da:02:ff:9c:c7:c6:c0:07:f8:2e:1f:5b:de:46:
78:de:7f:f3:59:c8:ac:e0:ee:61:b4:81:04:36:93:
14:1c:1d:55:6a:d0:21:e0:9a:84:10:ac:e1:77:0c:
e1:32:ac:52:20:ba:ba:d0:44:ba:97:d4:50:22:4a:
6e:78:6f:73:2a:39:a9:3c:9d:6c:e0:6d:72:01:67:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:96:AB:29:31:03:7F:B4:A0:75:DD:54:C0:D3:8F:0F:9E:9C:6F
X509v3 Authority Key Identifier:
keyid:D9:C9:BA:F4:6D:6C:94:D2:7C:E1:28:DA:3B:65:B5:A3:B0:6D:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cm69G1slNJ84SjaO2W1o7Bts4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/1ayWqykxA3-0oHXdVMDTjw-enG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/94f98c-c1d1-4fe2-9adc-a010d8e4faf0/1/2cm69G1slNJ84SjaO2W1o7Bts4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.249.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b6:f1:e0:27:00:f4:25:d6:03:c2:b5:a3:46:52:cb:6d:58:
bb:6a:67:ab:0c:d4:cf:35:d3:b4:70:86:6f:28:f1:0b:f1:fc:
be:80:57:b0:0c:6f:a8:18:2c:4c:6e:8f:d3:1e:27:ea:a6:bf:
92:45:79:a7:4f:95:06:60:82:7f:63:f0:67:4f:f4:1f:98:5d:
dd:2d:bc:22:94:3a:07:70:a2:b8:13:38:41:33:fe:c2:30:e0:
38:3d:12:12:d2:ff:3f:c4:2c:25:96:aa:30:28:94:75:19:f1:
bf:70:f9:86:0d:39:92:92:3b:76:51:de:02:4a:30:3c:91:cc:
b2:ee:b9:f9:1f:23:d2:9c:db:37:6c:cf:e8:a8:95:30:d3:63:
6b:04:c8:76:9d:1d:ae:c3:8f:16:0d:f5:c4:d5:0d:e5:df:09:
89:90:11:16:31:a8:f0:83:16:67:56:fb:7f:a2:9c:1f:57:2c:
a2:1c:f7:41:2e:d2:81:d1:53:04:c4:71:1d:e7:9d:27:d1:bc:
85:ef:35:5d:57:d8:86:ed:e7:fc:cc:b5:1b:d4:87:85:65:b6:
1e:3b:78:7f:c7:ee:44:a9:06:f7:f4:db:27:cc:a8:3a:d2:e2:
e3:8c:79:37:74:6c:16:1f:39:e9:21:fc:8f:eb:df:5b:d2:55:
86:c8:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:12 2025 by rpki-client on console.sobornost.net