Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/z_g_oyYscLU1IVMsubV8om2IHIM.roa
File: z_g_oyYscLU1IVMsubV8om2IHIM.roa (raw, json)
Hash identifier: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=
Subject key identifier: CF:F8:3F:A3:26:2C:70:B5:35:21:53:2C:B9:B5:7C:A2:6D:88:1C:83
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 01941F8C39F241587DC2C212B2EB2D54FB69
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/z_g_oyYscLU1IVMsubV8om2IHIM.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204945
IP address blocks: 185.210.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:39:f2:41:58:7d:c2:c2:12:b2:eb:2d:54:fb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cff83fa3262c70b53521532cb9b57ca26d881c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:9a:ec:4a:49:72:9d:dc:bd:4e:a7:c6:8d:
05:f7:19:d8:4d:c5:f7:7d:fd:8b:3c:d0:34:ae:ae:
cf:69:cc:a7:ac:39:79:a6:de:82:38:b0:73:ff:7a:
3b:a3:03:4f:fd:c5:33:99:de:e9:88:ae:6d:64:17:
84:a6:56:14:9a:63:de:ad:08:be:f1:f6:10:bc:58:
57:94:29:ea:6f:a9:c5:10:e6:95:01:23:75:74:e8:
96:2c:41:f9:d2:a1:f6:30:1c:27:11:0f:97:f9:af:
4a:e5:99:22:ba:4b:3a:4a:8c:f8:d6:ee:ac:b0:71:
07:d4:df:d4:c1:e6:ef:70:e0:5c:8a:92:2b:c8:aa:
62:c1:e2:60:cc:c9:72:59:78:91:0f:3f:4c:80:00:
f3:37:1e:82:e8:0e:0f:69:b7:e2:b3:ac:de:41:76:
83:ec:c7:cb:c2:f4:75:53:7b:c9:6f:e7:8e:d9:74:
3d:5c:b0:10:7d:3d:47:a3:65:8a:ae:cb:aa:72:3e:
7d:80:f4:d9:94:07:f0:38:3c:a2:5a:0a:fd:92:0c:
6a:61:74:6c:26:c5:8f:fc:7e:b9:2e:9d:00:ee:85:
dc:58:77:eb:48:43:b9:b6:af:28:b2:1a:18:d1:1e:
0b:84:78:27:c8:13:7e:0a:5a:bc:6b:d2:b1:b7:29:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F8:3F:A3:26:2C:70:B5:35:21:53:2C:B9:B5:7C:A2:6D:88:1C:83
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/z_g_oyYscLU1IVMsubV8om2IHIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.116.0/23
Signature Algorithm: sha256WithRSAEncryption
26:2e:ef:92:51:b0:c3:2e:e6:0e:7b:ae:4c:da:93:fd:cb:e0:
19:60:90:70:eb:7c:b6:e3:06:ed:2e:5e:52:9f:47:68:da:8c:
ba:6f:cd:37:23:a4:f1:e0:7c:76:07:43:a4:f9:e5:5c:67:ee:
16:ad:2e:27:0d:15:ed:dd:b2:cc:19:11:e3:29:38:18:52:4d:
37:03:44:72:b5:85:97:90:0d:96:27:e1:eb:b4:6f:42:fb:3e:
96:15:43:6a:78:8d:82:bb:f1:d1:3a:08:a2:7e:3d:98:11:f0:
4d:f5:c9:c6:34:f0:22:9e:fd:f2:40:be:eb:6a:33:bf:c0:27:
7e:c3:8a:56:e4:73:a3:19:31:77:b6:07:ea:98:62:da:27:2a:
41:34:0d:d8:51:97:3b:7c:f8:e0:73:43:d3:92:3a:3b:9a:e6:
62:3d:c3:23:d8:7a:79:7c:de:88:2e:4f:d0:fd:32:31:94:0f:
a8:6e:a3:ec:7c:ec:5b:b7:72:ce:89:08:0b:88:cd:cb:96:48:
a5:2f:d4:5b:46:e1:56:84:bd:b0:df:18:f2:55:7a:6f:62:3d:
60:9f:f0:59:6a:0f:e8:31:3a:09:97:61:f0:81:b9:d1:64:5c:
4b:ba:58:6a:84:a4:6b:de:66:33:8f:79:e9:e3:ca:50:b1:38:
22:2a:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net