Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/s199ikwEffBbz4N51o9Z93m71rk.roa
File: s199ikwEffBbz4N51o9Z93m71rk.roa (raw, json)
Hash identifier: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=
Subject key identifier: B3:5F:7D:8A:4C:04:7D:F0:5B:CF:83:79:D6:8F:59:F7:79:BB:D6:B9
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 01941FFA10857817DC03AAE3897F4501611C
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/s199ikwEffBbz4N51o9Z93m71rk.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204429
IP address blocks: 185.217.84.0/24 maxlen: 24
185.217.85.0/24 maxlen: 24
185.217.86.0/24 maxlen: 24
185.217.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:10:85:78:17:dc:03:aa:e3:89:7f:45:01:61:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b35f7d8a4c047df05bcf8379d68f59f779bbd6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:a1:b2:27:d5:1a:11:69:17:59:57:4e:ec:
af:7f:07:c2:37:97:91:81:28:5f:aa:9c:c8:d5:2c:
62:52:86:f6:fb:e3:1a:05:f9:50:09:7f:0d:a4:ac:
2a:9e:64:90:7e:be:05:ad:ce:9f:7a:c4:cc:2e:21:
84:d7:60:22:91:4b:6e:6b:ab:4a:1d:57:ad:8e:8f:
e5:43:87:07:7d:67:55:fc:d5:35:cb:6e:35:e8:14:
2a:4d:c9:ed:df:d0:40:e0:a2:f4:d8:bf:d2:e5:d7:
7c:fc:81:90:8c:f5:95:5b:e4:81:0e:fb:c4:c1:ce:
2d:a6:4e:6c:8b:42:89:4e:6c:6f:5f:3a:91:e7:87:
43:38:d7:e2:fe:1c:79:8c:36:c1:bd:7b:ad:08:49:
e2:24:99:36:05:87:ce:b4:24:e3:64:a9:84:73:a3:
5c:60:79:15:44:d9:33:6f:b6:6c:1a:2d:c9:33:58:
d9:d7:15:0a:1e:5f:c1:fa:be:96:fd:14:9a:ea:66:
c9:b2:25:43:83:d1:fe:63:6c:35:45:c9:41:0b:81:
94:20:a7:a4:a0:71:7a:11:37:54:d4:04:4f:6c:cb:
47:ba:be:df:ac:57:f8:80:c9:08:07:75:39:61:2b:
ff:92:08:a1:67:3b:11:48:9b:e7:0f:b5:9c:76:4b:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:7D:8A:4C:04:7D:F0:5B:CF:83:79:D6:8F:59:F7:79:BB:D6:B9
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/s199ikwEffBbz4N51o9Z93m71rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:f1:d8:9b:05:ff:fd:e1:c2:b8:91:b0:79:71:62:c3:45:89:
3f:cc:8b:57:5d:04:21:69:ef:0f:90:ba:68:68:d8:65:d2:bc:
06:ad:a7:13:e7:b5:ab:38:77:5c:d3:7c:72:84:51:55:b5:fe:
03:d2:e3:d1:b2:2f:37:c7:ed:17:02:3d:9f:be:83:f5:6a:09:
c4:b2:83:ae:b4:e8:ba:5d:b4:6d:72:43:35:f4:6c:ce:20:d7:
8f:09:96:64:8f:0d:8b:ea:01:a1:eb:c8:ad:43:78:63:0c:84:
5c:18:cd:3e:61:11:e0:c8:5e:f4:2a:db:ae:6d:33:7f:5a:3e:
b1:87:6c:85:e1:50:6f:69:9c:4a:4c:be:de:f5:ea:c3:5e:50:
45:45:aa:65:2a:93:5c:c6:bf:09:0b:fd:f8:3a:f0:65:64:83:
8a:c6:1f:4d:10:8b:bc:85:dc:4b:f6:d7:0d:cc:f6:99:ff:54:
16:b6:df:d7:3c:76:7c:9a:69:e7:fa:28:c6:70:92:71:0c:08:
66:44:79:b9:d7:84:22:4b:33:cb:7e:4a:6b:16:c4:3f:71:6e:
fc:7e:84:44:0d:a8:9e:a7:29:67:53:4a:8c:8f:78:6b:8a:55:
f5:ab:2e:8b:30:21:2c:80:b8:58:a8:e9:7c:a9:00:c1:0d:99:
a6:41:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net