Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/L_hJzZcxwJZunjzxLQL-YVG1jT0.roa
File: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (raw, json)
Hash identifier: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=
Subject key identifier: 2F:F8:49:CD:97:31:C0:96:6E:9E:3C:F1:2D:02:FE:61:51:B5:8D:3D
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01942143E6D52B3B1272B3F5657738BF3C51
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/L_hJzZcxwJZunjzxLQL-YVG1jT0.roa
Signing time: Wed 01 Jan 2025 09:48:05 +0000
ROA not before: Wed 01 Jan 2025 09:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210569
IP address blocks: 185.217.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e6:d5:2b:3b:12:72:b3:f5:65:77:38:bf:3c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff849cd9731c0966e9e3cf12d02fe6151b58d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:14:e3:b6:8d:21:46:65:bb:2b:50:87:56:
78:71:c2:d9:6f:24:49:ac:12:35:82:3f:32:d2:39:
12:ec:38:11:00:5e:43:d2:eb:8a:52:73:11:df:fe:
ab:bf:4a:82:a5:40:df:1f:44:a7:9e:c7:0c:04:83:
f8:75:d5:9f:c6:0a:75:78:14:19:bd:79:3c:05:ce:
fb:19:33:72:6a:fe:35:c9:20:ec:b2:cb:91:72:bc:
cc:05:11:37:ca:de:86:db:1e:73:e8:91:9f:34:47:
65:a0:b4:bb:67:c2:e9:04:ea:3c:9f:ba:41:f8:28:
b0:9f:4a:36:b7:de:c5:14:23:1f:ed:be:44:c5:91:
e6:39:59:a5:77:f4:c3:4e:43:cb:57:01:c2:8e:38:
d3:bf:62:1b:f9:fa:41:17:fb:70:f7:d2:d2:ce:0e:
dd:7c:1c:68:76:28:b1:c9:8c:26:e9:41:99:08:a9:
d8:88:cd:f8:1a:0f:2b:c6:eb:15:b1:3d:a9:8b:93:
6a:36:2c:fc:9b:9d:dd:09:fe:a1:55:f0:32:1b:00:
55:34:56:80:db:fe:be:86:f1:5a:6d:89:77:b8:25:
2e:96:15:b4:5c:f5:6a:e8:56:a0:04:13:60:b3:43:
58:b8:fa:e4:40:9b:26:22:eb:25:26:09:d6:fb:35:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:49:CD:97:31:C0:96:6E:9E:3C:F1:2D:02:FE:61:51:B5:8D:3D
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/L_hJzZcxwJZunjzxLQL-YVG1jT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:42:e7:02:66:51:c4:aa:df:e9:ee:b7:1c:39:27:bd:e2:4d:
da:49:f9:a5:ad:9a:2b:42:2e:89:d4:7f:bd:c4:3d:a7:93:45:
df:b9:29:0e:b5:68:d4:ce:c8:ca:82:2b:5b:01:db:0f:97:6c:
f0:bb:a7:3c:10:a4:1b:2d:74:d8:15:97:c0:6c:46:05:eb:92:
7c:06:53:54:31:0d:2c:60:2b:df:03:02:97:39:15:d0:8a:c4:
81:04:59:4d:84:9e:70:b9:22:54:10:08:7b:84:b2:6f:ff:96:
77:bf:70:cb:f7:51:c3:bd:36:f4:68:44:4a:4b:0f:71:9d:2d:
a9:88:98:52:fc:24:e6:6f:fb:72:bf:31:35:c8:d8:ca:a6:f1:
5a:69:d8:07:d7:33:55:88:35:bb:31:db:35:4d:63:d3:c0:93:
b4:60:45:fe:b0:e8:16:ff:89:3a:19:b9:37:cc:72:63:d9:f1:
46:62:a8:db:52:19:28:1f:08:f6:fa:08:e9:a2:60:64:40:5a:
fd:90:3e:87:d4:80:08:94:bb:68:8c:42:67:bb:99:03:4f:a9:
57:2f:35:58:bd:7c:9f:c7:0c:45:a5:cc:14:97:f2:89:76:8d:
db:45:89:9c:04:60:c4:47:ed:3b:11:87:ca:88:63:1b:2e:d3:
8d:97:27:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net