Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/olPREzsuGli6Auz68aDbQFmSzYA.roa
File: olPREzsuGli6Auz68aDbQFmSzYA.roa (raw, json)
Hash identifier: GNrx+jaG+QAUC6i70PpSY5MLDWi/5wUMMK+f59Mq5G8=
Subject key identifier: A2:53:D1:13:3B:2E:1A:58:BA:02:EC:FA:F1:A0:DB:40:59:92:CD:80
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 01947B4F1124E8E56F947513210CDCC8DC7C
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/olPREzsuGli6Auz68aDbQFmSzYA.roa
Signing time: Sat 18 Jan 2025 21:26:06 +0000
ROA not before: Sat 18 Jan 2025 21:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 185.84.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7b:4f:11:24:e8:e5:6f:94:75:13:21:0c:dc:c8:dc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Jan 18 21:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a253d1133b2e1a58ba02ecfaf1a0db405992cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:d4:2f:c7:19:76:de:87:19:00:e9:34:9c:
cd:18:60:13:86:e9:80:0b:41:0d:8b:f1:f6:a5:e8:
62:f6:c9:24:4f:6d:82:af:59:9a:f8:93:80:e0:b4:
77:3a:f0:a3:f9:4d:96:31:7a:40:3e:33:e2:7d:b1:
dc:50:7e:ff:05:37:3c:33:b5:87:56:85:62:a4:a3:
22:a1:16:c5:08:12:ef:a3:49:be:af:ad:6f:b1:17:
cd:8e:69:69:c1:d5:f1:aa:09:c6:24:4c:f7:c1:9c:
47:b7:31:7f:22:5e:6c:26:80:08:64:2f:23:7f:52:
30:ae:94:30:7b:90:67:c4:5e:9c:47:f2:9e:5d:a9:
b8:5a:1d:a0:88:9d:c1:39:25:cf:5b:60:36:a1:85:
6c:52:3c:19:90:7a:36:e4:95:31:62:14:c9:c4:4f:
61:37:e8:7e:ba:c9:4c:49:00:b4:96:1e:44:bf:19:
02:f3:e8:bd:90:34:dd:0e:1a:43:c0:66:db:44:88:
fb:68:0f:ed:21:3b:2b:7c:f8:a1:72:8f:0d:a8:dd:
36:50:36:be:66:4d:65:3c:f7:2f:e0:ff:60:6c:48:
93:51:d5:68:7e:ed:16:7e:b7:bc:cd:14:1d:25:e6:
20:b5:ac:80:91:3a:77:22:69:76:72:a8:56:d4:43:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:53:D1:13:3B:2E:1A:58:BA:02:EC:FA:F1:A0:DB:40:59:92:CD:80
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/olPREzsuGli6Auz68aDbQFmSzYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d4:84:dd:c7:18:98:87:4f:60:b2:9f:35:af:4c:82:3f:9a:
74:c7:bc:11:29:a7:f2:72:2f:55:9c:2d:60:f3:04:13:dd:f3:
e1:7a:c8:fa:41:cc:e1:9b:d3:eb:76:59:40:cc:bc:67:18:66:
2e:29:16:f5:65:5b:01:42:73:4a:00:f2:c9:a0:54:d8:85:1f:
28:1c:b7:73:43:80:f5:36:3f:f7:91:f4:7d:24:86:d3:91:8f:
d4:23:cc:57:4f:b7:a3:14:6f:56:91:cb:74:13:ec:b2:61:84:
6a:34:8a:d9:0d:94:00:13:16:37:22:6f:b3:5f:f4:d9:44:71:
c9:a2:03:7d:41:65:20:81:98:47:72:e3:2a:29:24:83:2a:20:
85:e9:7c:71:f1:19:c3:81:fa:e4:27:15:1f:5b:58:3b:8f:ae:
50:01:44:45:2b:4c:fa:31:c7:c4:c6:c3:23:95:6a:1d:a5:c1:
89:cf:73:a2:3a:b6:46:3e:33:bf:0e:23:19:ab:64:33:80:10:
80:02:00:2d:42:fe:b2:46:00:81:52:ad:fd:39:db:b2:44:d0:
20:c3:6f:51:fd:18:d9:f1:8c:50:4e:1d:d0:fb:84:db:09:7a:
ce:b0:85:00:e0:37:05:fa:c4:a5:be:4b:ef:68:7e:c7:b0:f9:
cc:fa:7f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:14:11 2025 by rpki-client on console.sobornost.net