Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa
File: RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa (raw, json)
Hash identifier: CWqw/aMDA6ZuqW+g16a2LFyjcXoDj/1ZGqdzZueDSNs=
Subject key identifier: 47:02:96:0E:1F:48:FD:58:53:DB:C8:04:17:79:3D:B4:9F:61:75:29
Certificate issuer: /CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Certificate serial: 01942747E5DA5065D62B32130BCEBCB9E3EF
Authority key identifier: 62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa
Signing time: Thu 02 Jan 2025 13:50:10 +0000
ROA not before: Thu 02 Jan 2025 13:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39568
IP address blocks: 185.157.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e5:da:50:65:d6:2b:32:13:0b:ce:bc:b9:e3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4702960e1f48fd5853dbc80417793db49f617529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:69:73:ef:f6:89:ff:c4:3c:d2:fc:45:85:
8a:13:bf:fe:4f:d8:7a:08:ce:e8:e6:37:26:22:6a:
ad:40:5c:8a:97:62:da:83:d8:8c:b4:70:67:b2:69:
e1:88:3d:ba:3e:e7:68:48:32:92:2d:3a:fd:d6:88:
53:1a:42:c9:7e:20:6f:fc:2e:bc:5a:54:14:12:64:
38:36:dd:69:39:dc:65:70:02:54:b5:18:77:c6:77:
93:4a:ad:a9:a5:9b:81:40:12:55:46:be:ef:19:a2:
82:ce:fa:01:cc:61:41:0a:d2:16:ed:10:dc:52:e3:
27:33:c7:0e:f0:56:2f:66:49:d8:6a:d6:b1:cb:49:
42:a1:67:8e:21:db:32:b6:71:ef:ac:42:81:58:2b:
20:58:0d:2f:67:3c:17:e1:0c:e9:67:27:14:43:74:
95:c8:62:e9:8e:d3:98:c9:41:00:d5:f4:07:28:36:
2e:bb:d7:58:9a:b9:45:2b:3d:35:ee:ca:09:f5:a6:
5f:60:e6:d8:f1:83:d8:34:fd:8c:d0:1b:9a:2e:87:
b5:a0:40:83:cb:3c:49:72:de:8e:90:c0:10:0f:d8:
1e:ef:b2:dd:21:4a:8b:5b:88:b2:c0:ed:7e:64:73:
a5:4b:b7:68:d8:a3:e7:6d:77:41:cb:a8:8d:19:56:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:96:0E:1F:48:FD:58:53:DB:C8:04:17:79:3D:B4:9F:61:75:29
X509v3 Authority Key Identifier:
keyid:62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.139.0/24
Signature Algorithm: sha256WithRSAEncryption
63:05:07:26:62:2c:42:6a:97:4e:15:88:0a:93:8e:5a:60:8d:
3e:c9:43:95:a6:f2:85:a0:d2:75:76:52:16:b7:66:09:65:1a:
e7:b9:73:36:77:98:cf:ba:2c:c3:70:fb:ae:52:71:1e:ae:fa:
29:67:23:21:55:df:5e:ad:65:c1:25:09:95:f3:d5:9f:1c:52:
4c:16:c0:27:5b:01:d3:66:18:b2:c2:42:83:78:9f:fc:dd:c2:
bc:8c:e8:ac:ef:1f:5a:3f:f6:e3:8c:aa:67:b7:f8:86:0f:3f:
13:32:98:d6:be:93:38:82:99:10:79:eb:01:9b:03:28:e0:e6:
88:c5:ea:66:4d:1e:b1:9c:f8:bb:40:c5:6d:61:e1:5c:5e:14:
86:b5:49:de:4a:b6:93:c6:aa:b8:92:c3:c5:be:15:c5:63:dd:
0e:e6:30:56:dc:2b:bf:6f:86:56:56:e8:12:4c:ac:74:24:af:
d5:ee:6b:9a:e9:a5:32:fe:12:ef:61:9a:e6:db:5f:c6:c1:27:
75:80:9a:1f:28:27:95:c0:62:e4:06:fa:ed:cc:a7:63:a4:af:
a5:55:ff:02:77:8c:6c:ac:8f:99:51:b4:18:42:9b:34:31:7a:
db:6c:11:26:70:76:df:17:61:f5:1f:9b:c1:c6:7c:f6:c2:17:
f0:6a:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net