Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/Sy3V_IgTk4ktGswgBw55mEgUx3E.roa
File: Sy3V_IgTk4ktGswgBw55mEgUx3E.roa (raw, json)
Hash identifier: b8dOVW1U1sP2mqNqvtuzgrz8hyIMvAWuWDCj7ROCZgc=
Subject key identifier: 4B:2D:D5:FC:88:13:93:89:2D:1A:CC:20:07:0E:79:98:48:14:C7:71
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 019426D9AC6AB700D0960BD561C201BAE3E9
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/Sy3V_IgTk4ktGswgBw55mEgUx3E.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35661
IP address blocks: 185.234.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ac:6a:b7:00:d0:96:0b:d5:61:c2:01:ba:e3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b2dd5fc881393892d1acc20070e79984814c771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:eb:56:4c:1a:6a:e9:01:9d:c5:c0:4c:e0:
14:cb:85:bc:43:18:4a:20:59:3c:d3:c8:28:06:55:
cf:a4:6d:f5:ee:71:66:52:58:a3:57:09:84:78:46:
27:64:20:f4:a1:74:3b:02:c4:6c:9c:76:47:0d:c9:
b1:85:40:1c:f5:0f:93:cf:29:cf:35:2d:5e:9d:83:
6a:dc:cd:bb:19:d2:7a:fb:8e:de:cd:82:b3:f6:04:
03:8c:df:9d:22:4c:67:98:1f:9d:9b:64:9b:31:49:
8d:a9:8b:c8:e2:68:9b:fe:59:ef:6f:51:9b:38:4b:
cb:fd:fc:f4:d1:68:d2:05:b4:20:4e:a5:c0:31:cc:
d0:c6:e8:63:85:4a:ef:10:89:f2:c8:d1:e2:03:bc:
45:01:c8:2b:b5:76:95:ab:15:ce:ea:24:6b:98:74:
2e:31:57:a0:32:39:32:e3:44:91:f8:0d:b5:25:71:
54:01:fa:df:96:aa:27:64:e0:d7:e5:a8:ad:19:9f:
aa:1c:4a:79:d3:63:15:9d:af:3e:06:e4:08:f4:93:
11:c1:32:d6:4d:98:9d:22:c0:47:83:86:29:c9:ae:
77:81:1a:dc:dc:f8:75:ee:10:57:65:ca:9a:dc:62:
e6:af:18:7f:51:eb:ff:19:2b:fb:d8:ce:9f:de:a4:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:D5:FC:88:13:93:89:2D:1A:CC:20:07:0E:79:98:48:14:C7:71
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/Sy3V_IgTk4ktGswgBw55mEgUx3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.100.0/24
Signature Algorithm: sha256WithRSAEncryption
72:62:00:90:ba:67:08:71:1e:92:e8:ff:5f:c6:21:79:80:f3:
97:10:ff:e0:aa:d1:86:54:4b:d6:cf:7a:eb:6b:2e:3b:1d:25:
27:88:9c:14:56:7d:0a:d3:41:7c:a3:66:99:c6:c7:34:61:51:
3c:43:3d:25:a0:c8:0f:c0:1a:75:66:15:20:ff:e3:fa:74:7c:
41:dd:74:75:e4:fe:93:91:bd:39:fa:62:e5:72:12:b8:64:cc:
35:31:ff:2c:14:23:95:bc:64:b9:d2:19:2e:02:55:86:3e:cd:
e4:0e:7f:cd:74:cc:94:0e:ae:b8:6a:d9:ea:07:27:ee:82:95:
e0:57:2c:1f:15:ed:1c:b4:5d:3b:a7:2c:69:25:62:d0:20:b9:
d8:a9:0c:26:e9:7e:6c:b9:3f:fb:7b:ac:b8:18:0a:76:66:77:
29:25:8d:0c:47:2c:bb:f6:b0:2a:34:2e:0a:aa:ff:3d:91:d6:
29:66:72:b6:10:24:f0:a5:f1:a7:9f:f6:8a:7c:2e:4d:21:c9:
af:a8:54:81:d6:17:c5:b5:dd:6e:92:82:85:8d:f5:fb:75:26:
bb:f6:58:47:28:2a:e9:a4:3e:ea:88:52:bb:e8:dc:ec:68:a2:
90:93:8e:28:b7:21:f6:52:f4:e8:8e:ac:d6:b5:cc:49:46:41:
1e:34:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net