Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ix1qxgL2TzzMLmdaUd3VQtSj-II.roa
File: ix1qxgL2TzzMLmdaUd3VQtSj-II.roa (raw, json)
Hash identifier: 4xQMMqWbgUGGtddTWP7CtZIT8IknDRDr3HPboptp2+U=
Subject key identifier: 8B:1D:6A:C6:02:F6:4F:3C:CC:2E:67:5A:51:DD:D5:42:D4:A3:F8:82
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 019425FC0A2E538AC3922BEAF4866059796C
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ix1qxgL2TzzMLmdaUd3VQtSj-II.roa
Signing time: Thu 02 Jan 2025 07:47:42 +0000
ROA not before: Thu 02 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198826
IP address blocks: 185.253.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0a:2e:53:8a:c3:92:2b:ea:f4:86:60:59:79:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 2 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1d6ac602f64f3ccc2e675a51ddd542d4a3f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:41:3b:b6:85:e5:45:60:e1:dc:8e:01:09:
4f:81:4c:49:37:38:90:d0:e2:44:43:94:c6:3c:5c:
cf:51:7c:9c:1c:75:ee:a9:c5:58:a4:9d:73:8a:df:
c0:81:71:2e:c1:d8:e4:cd:50:a0:a4:5e:92:e5:ae:
48:51:00:ad:aa:ef:5e:ac:7d:a3:21:2a:29:d6:d0:
07:26:f2:ad:2f:62:18:78:1f:3d:40:c3:96:a7:30:
2c:fb:16:1d:39:33:ba:4b:11:f0:2a:e4:a6:a6:ea:
b0:eb:c1:62:ec:ff:65:65:d4:77:c2:c0:96:41:4d:
45:43:66:35:39:94:45:c4:df:ca:e3:5a:a7:36:bd:
db:0b:50:18:53:80:cd:b9:dd:a4:12:b2:21:f5:c7:
0d:2f:75:e2:19:ee:fd:35:ad:99:9a:f1:80:b1:83:
9a:fd:a3:ee:64:85:66:c7:4a:d1:66:0c:b8:96:17:
14:a9:48:6f:f9:8e:45:9b:43:b7:6c:6f:eb:bd:47:
3c:12:1d:f0:3d:13:5d:d8:b3:da:3c:b7:ad:2e:90:
b2:ee:79:8a:70:4c:33:30:8b:df:59:d1:99:bb:9f:
05:a7:1f:87:bc:8d:8f:c9:51:98:ac:48:0f:9e:3c:
fb:a2:45:9f:2b:86:ed:e7:43:c7:e1:ff:10:46:28:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1D:6A:C6:02:F6:4F:3C:CC:2E:67:5A:51:DD:D5:42:D4:A3:F8:82
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/ix1qxgL2TzzMLmdaUd3VQtSj-II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.138.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dc:dd:c5:96:45:05:5e:1a:cc:91:6b:d5:21:ad:a0:b3:0f:
9f:ac:c1:8c:07:01:8e:cc:67:91:85:26:c1:65:76:13:76:e7:
2d:d7:de:b9:f9:40:a0:da:5e:2a:23:d5:40:a3:4d:30:69:dc:
54:35:e0:38:d3:9c:c3:eb:5e:b1:3c:3a:db:8c:e1:86:6e:b1:
2f:2a:f1:34:a3:cb:06:41:94:f1:5b:2e:8a:46:14:b5:21:17:
62:91:c4:fe:f0:64:1c:d0:88:b0:f8:c9:10:86:ae:5d:2b:ba:
9e:82:5f:02:58:19:4e:ee:9f:65:3e:4f:8f:ba:b5:31:a6:6a:
9c:79:7d:e6:06:54:7d:af:e5:2a:70:f3:b3:6e:a4:c6:7b:85:
14:06:b0:ef:92:84:18:29:06:f7:e7:4e:22:56:0e:7c:47:0f:
d3:64:31:e2:c8:ab:82:c6:bd:4d:20:c3:c4:4d:ff:0a:29:24:
a5:5f:fe:48:e6:dc:c4:e7:78:d5:13:b0:b9:f0:b5:db:a0:8f:
45:59:60:23:66:a9:f3:61:cd:ec:c3:b0:6b:1f:96:fc:08:1a:
ae:62:4b:19:89:df:f7:d8:7b:0b:04:6f:b5:34:53:e3:77:cd:
90:13:81:be:d4:37:85:3f:68:11:20:36:ca:c6:47:9d:a0:2d:
57:65:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net