Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/ZTIBKgjTaXW_ZnWc7123527kr5M.roa
File: ZTIBKgjTaXW_ZnWc7123527kr5M.roa (raw, json)
Hash identifier: nKgH3xdgZjr7Kq7o7yKNcoST/uR2S0ghz6FcpqSglbk=
Subject key identifier: 65:32:01:2A:08:D3:69:75:BF:66:75:9C:EF:5D:B7:E7:6E:E4:AF:93
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 019424B39E5C9140D9CDEDA9567614910E14
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/ZTIBKgjTaXW_ZnWc7123527kr5M.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51169
IP address blocks: 185.249.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9e:5c:91:40:d9:cd:ed:a9:56:76:14:91:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6532012a08d36975bf66759cef5db7e76ee4af93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:f5:f2:93:9b:18:3c:ec:de:cd:cd:a1:4f:
c4:c7:4a:7f:27:e3:fc:2e:ba:65:65:82:1a:44:a3:
7f:5e:90:ab:e9:29:f5:59:b6:fd:92:e8:f4:04:85:
20:08:de:5b:bb:c6:b3:6e:6e:b4:f7:5c:17:af:02:
f1:60:46:29:22:f5:d2:26:48:88:d0:a5:8a:9b:a9:
d7:66:ce:e0:73:23:36:57:8e:a3:25:cf:c4:39:b4:
2d:51:9e:42:6c:6f:bf:92:cb:cb:d7:7c:d9:dd:6f:
18:3b:13:08:8c:2a:f7:7f:ce:85:c9:7f:f4:14:07:
86:c5:c2:8e:b8:db:6e:ae:4f:b9:b7:54:02:9e:f1:
72:b7:db:8d:45:eb:da:5d:cc:39:f6:48:45:e8:af:
72:1b:22:46:a8:e0:e5:15:b3:7a:80:1f:8d:d4:4d:
1c:82:cf:34:bb:70:34:e8:24:eb:37:b2:57:c5:4a:
3d:3d:7a:92:00:88:41:94:43:42:b2:8d:29:2f:47:
27:a4:16:f5:a0:9e:23:ab:48:be:26:35:61:c1:1d:
35:d3:18:cf:cb:d9:70:4a:fc:d3:b5:1f:b8:e8:7f:
9e:7a:6d:8b:b6:79:d9:05:e0:af:15:dc:dc:d2:db:
05:db:a0:5e:8d:ef:9e:b3:2c:f0:c8:0d:c3:9b:db:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:01:2A:08:D3:69:75:BF:66:75:9C:EF:5D:B7:E7:6E:E4:AF:93
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/ZTIBKgjTaXW_ZnWc7123527kr5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
11:64:7b:b3:43:5e:1b:09:cc:09:7c:1d:7e:aa:df:4d:60:6b:
6b:dc:78:9e:a9:02:e0:90:b0:a3:77:0f:8b:1a:fa:30:f7:3b:
6f:dd:8f:fe:86:12:09:31:c5:b8:dc:d7:7e:14:11:4f:57:63:
bc:43:76:28:f9:db:c3:9d:a6:1a:dc:04:0f:cc:18:d9:90:19:
39:50:31:f9:fa:a2:e3:fa:29:67:9e:55:9e:c4:e8:1a:d0:5e:
01:80:e0:1b:47:13:c3:b3:1b:1c:00:43:e1:5c:01:9e:e7:c1:
7a:73:79:bd:09:97:95:ff:93:5a:cb:39:62:d7:d7:76:63:65:
69:63:ec:68:b6:ad:3c:55:b5:71:35:33:8e:10:d4:07:60:12:
83:1e:14:3a:9c:37:7b:56:60:09:e1:a6:c7:f7:a2:a2:4b:8d:
e3:c9:24:d1:68:21:e4:b6:fe:08:ec:60:18:f1:21:56:f5:b4:
ce:0c:51:90:07:84:2e:1d:8e:b4:a5:fd:e5:f2:39:4a:ba:04:
fe:f0:e6:79:33:ac:9d:11:09:2b:dc:5c:55:4e:53:c9:92:a5:
95:c0:5e:31:0b:2d:ea:5f:0c:06:04:25:98:07:29:b3:99:1c:
ec:89:d3:d7:99:d9:d7:0a:a5:2e:d3:a6:2f:e6:76:39:8f:88:
a6:a9:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net