Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa
File: o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa (raw, json)
Hash identifier: B+fFcwV95+as9F86sHUOjXkwuPQBko5Sfhe+H4+0kBg=
Subject key identifier: A3:84:4B:BC:D9:71:71:38:D1:A0:C1:D0:1B:43:70:5B:19:14:61:BE
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 0195A27F59739C59C4DAD6FB4350F2076169
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa
Signing time: Mon 17 Mar 2025 05:06:49 +0000
ROA not before: Mon 17 Mar 2025 05:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43606
IP address blocks: 85.116.182.0/24 maxlen: 24
91.212.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:7f:59:73:9c:59:c4:da:d6:fb:43:50:f2:07:61:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Mar 17 05:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3844bbcd9717138d1a0c1d01b43705b191461be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:6a:e5:a9:af:ce:48:45:0f:5a:22:3a:2b:
8d:1b:9b:55:49:05:a8:f8:8b:95:0b:9c:50:7a:be:
47:23:b5:28:b5:2b:bc:c9:da:f6:19:f4:0b:8f:87:
fc:6f:09:39:07:d7:5e:4b:b6:e3:e8:df:91:8f:46:
77:38:10:52:be:90:ef:a8:ab:f7:8a:44:a1:1f:21:
f5:44:cf:3a:61:f1:8b:c4:90:e4:81:af:9e:c0:28:
53:d5:5f:df:0e:ce:79:84:eb:af:3f:ef:21:2e:47:
9d:82:ee:1b:98:88:49:d0:f9:e4:b2:25:61:62:1a:
7f:58:1c:83:21:68:bd:c1:82:f8:0a:3c:da:d3:f3:
3a:6b:9d:ce:3f:10:05:47:53:6a:d1:63:2f:21:27:
9b:e4:17:3a:21:21:a7:20:0c:f9:68:89:ca:2d:d8:
52:af:a3:74:c1:74:6f:2a:86:ec:31:3e:99:2c:97:
ac:7c:72:0b:f4:ee:a8:5f:c0:a0:06:fe:2a:1d:63:
bd:79:92:75:92:93:e6:08:38:2d:32:92:7e:46:60:
0f:0b:b1:2e:97:06:ce:42:f8:1c:1a:0b:a1:13:3a:
de:a5:43:56:80:a2:9c:11:73:f3:7f:39:8c:3f:5e:
40:c2:fd:de:c2:d5:27:22:0a:bd:76:f0:84:7b:c5:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:4B:BC:D9:71:71:38:D1:A0:C1:D0:1B:43:70:5B:19:14:61:BE
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.182.0/24
91.212.93.0/24
Signature Algorithm: sha256WithRSAEncryption
51:21:17:05:d8:eb:73:38:f1:55:ff:c0:20:71:24:a8:c6:8b:
61:e8:91:1e:d3:9c:09:36:96:c5:f6:3a:f1:ba:10:f3:52:dd:
26:45:b4:26:a1:bf:90:75:d4:ea:63:17:a3:08:a7:3a:c7:77:
80:3d:dd:2e:e5:ee:0e:6f:d5:b0:ab:70:89:3c:a8:6f:4b:55:
3f:05:26:05:5f:07:8a:23:7c:2d:3d:23:91:05:79:fb:23:dd:
9d:e0:4a:f6:e1:9a:92:58:9b:ab:94:ba:cc:c3:df:e8:43:30:
1f:e5:eb:3d:b3:d2:e7:2a:19:90:c9:d7:c4:49:d2:31:78:83:
5c:ee:a3:90:c9:53:bc:c4:f0:74:63:64:12:11:b2:be:21:6e:
48:1a:e7:8a:87:ad:b8:cc:59:1c:7f:4f:4d:81:63:a6:ca:b5:
da:cc:14:58:dc:24:e0:d6:25:59:98:a1:9f:68:50:a6:ca:9b:
bc:f7:18:77:70:af:6b:71:e0:e6:60:1c:b6:33:da:f5:fb:51:
c9:b3:10:0c:21:56:76:4d:a0:2d:b3:ca:47:37:78:70:65:26:
e8:e6:61:ac:03:5f:de:36:7a:c9:92:f0:6c:f6:89:23:ca:04:
28:16:0a:57:42:0a:53:e2:f1:fa:66:8c:a2:1f:61:71:ed:c8:
c8:e4:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net