Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/NEtfj8eymwkFpDG7BP2gOv3cbAs.roa
File: NEtfj8eymwkFpDG7BP2gOv3cbAs.roa (raw, json)
Hash identifier: J8/tby/ZFT8OsdOz/hNiW3bEdXZu2ngXmdS3bjVWlAA=
Subject key identifier: 34:4B:5F:8F:C7:B2:9B:09:05:A4:31:BB:04:FD:A0:3A:FD:DC:6C:0B
Certificate issuer: /CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Certificate serial: 019426D996BE31257B08ADBD91AF566320FA
Authority key identifier: 83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/NEtfj8eymwkFpDG7BP2gOv3cbAs.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209567
IP address blocks: 185.69.3.0/24 maxlen: 24
194.2.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:96:be:31:25:7b:08:ad:bd:91:af:56:63:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8329c9138758dfe8ba1235ee0ec7d9b6589f4b27
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=344b5f8fc7b29b0905a431bb04fda03afddc6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:fa:e8:4c:c2:b3:5c:09:15:b3:47:55:8c:
30:8e:12:bd:b9:78:36:31:63:27:a2:76:47:13:ee:
5d:50:64:fd:31:d3:81:f1:8e:f9:b9:3c:b7:1f:2e:
01:3d:12:a5:6b:f1:6d:f2:c9:ab:b7:96:b7:1c:25:
16:e9:6b:3c:aa:4a:bf:ad:4c:78:80:34:68:a2:ed:
e2:10:a4:81:e3:0e:a7:b6:8e:7a:1e:12:16:cb:d1:
f1:44:ba:ca:c8:58:35:50:d7:6f:8d:35:3b:ee:4b:
95:ff:e7:c4:bf:57:c3:df:4a:3b:f2:78:a6:2c:8a:
80:4b:51:3f:e1:b3:8c:51:3c:a9:5b:5e:71:e0:70:
6d:4b:08:69:7f:b3:83:6c:c4:50:55:95:2c:05:cc:
19:d9:85:0d:39:54:11:be:a5:c4:9b:2d:9d:72:75:
81:4a:32:8f:ce:c4:8e:c9:40:80:fb:20:04:24:b1:
c6:66:06:78:fa:17:7e:8c:5d:6d:d4:90:a3:d6:69:
61:52:b8:72:b0:c6:61:9b:b9:45:cb:f4:d6:ee:75:
35:39:aa:16:cc:0e:23:0f:6b:20:2a:d7:f7:a1:8b:
5f:15:ce:34:bd:89:89:02:cf:40:8b:5d:25:80:8c:
05:cb:58:cc:8b:46:ab:d4:e9:3a:58:f2:bc:75:30:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4B:5F:8F:C7:B2:9B:09:05:A4:31:BB:04:FD:A0:3A:FD:DC:6C:0B
X509v3 Authority Key Identifier:
keyid:83:29:C9:13:87:58:DF:E8:BA:12:35:EE:0E:C7:D9:B6:58:9F:4B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gynJE4dY3-i6EjXuDsfZtlifSyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/NEtfj8eymwkFpDG7BP2gOv3cbAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/78f82d-0bb9-43de-9810-1ca7a0b6ac9a/1/gynJE4dY3-i6EjXuDsfZtlifSyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.3.0/24
194.2.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d8:0b:3f:0f:3c:98:6f:a6:c0:50:e5:a9:7e:f1:63:75:cc:
84:7e:39:56:cf:e3:30:3d:08:60:ac:6e:ba:37:29:4d:1a:f1:
2d:f6:c9:af:93:7d:3f:e2:88:96:02:9a:83:64:97:1b:72:34:
1d:24:a4:fe:2b:4b:8b:ec:58:47:06:16:2b:05:d1:48:e7:44:
dd:27:74:66:6f:93:00:6b:8b:aa:92:b2:1b:7f:54:14:b3:6a:
3f:e4:43:9f:47:e3:19:15:f4:9b:a4:12:a2:31:24:71:1c:d8:
bd:a1:00:bd:d3:2a:3a:19:e0:6b:53:25:ec:ab:0a:59:18:4d:
91:41:8b:a6:61:de:bc:91:c5:db:30:c2:78:15:9c:d1:ba:83:
b2:25:0b:e7:08:55:42:48:f9:91:aa:e6:5e:58:36:34:92:3a:
6c:74:fa:6c:f6:6b:a9:77:82:9e:64:5f:07:08:3d:f1:5e:89:
28:0c:23:8c:1c:70:e9:1d:2d:cc:65:a8:cc:5d:50:d0:81:52:
12:11:cf:76:50:23:d2:4a:b8:d9:09:9b:98:23:73:85:e2:cc:
90:ad:de:21:a4:6f:38:de:54:0c:f4:ee:90:8a:61:ff:fe:40:
d0:95:aa:ca:a8:c5:ea:01:96:55:07:f2:af:ee:5d:9c:af:92:
a3:30:83:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net