Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/ekd0T-pWjR2fdJhmt79rFrJVVFk.roa
File: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (raw, json)
Hash identifier: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=
Subject key identifier: 7A:47:74:4F:EA:56:8D:1D:9F:74:98:66:B7:BF:6B:16:B2:55:54:59
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 0194258F374656EFDF4FBDA280EE48979E1C
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/ekd0T-pWjR2fdJhmt79rFrJVVFk.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203897
IP address blocks: 185.34.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:37:46:56:ef:df:4f:bd:a2:80:ee:48:97:9e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a47744fea568d1d9f749866b7bf6b16b2555459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:b0:02:99:2b:35:ec:4d:17:b2:f9:b3:83:
48:d2:9c:5e:95:d0:36:9b:43:d0:e6:9c:45:29:59:
64:fe:1e:ca:fe:75:02:20:ec:0d:50:b1:21:6a:82:
f6:5f:a7:29:1e:5b:64:15:b9:0d:bb:ed:e5:4b:5d:
63:51:32:e7:50:12:e1:0f:20:c6:c6:53:cd:22:a8:
1f:78:31:c0:ac:b1:64:25:b8:20:c3:25:36:7b:c7:
dc:b3:b8:9c:7f:33:41:4c:68:32:57:54:b6:e3:3d:
1f:24:45:0b:b8:ef:b5:9f:1a:b3:bd:6f:cf:8d:b6:
bb:59:da:1c:16:7a:3e:36:7c:c4:45:ba:db:9b:3e:
82:b9:a0:51:97:24:d6:d9:02:62:7d:86:f9:14:63:
d8:57:dd:44:5d:6c:7e:28:3c:64:83:37:69:ff:01:
a2:e4:38:6a:e7:d4:5f:96:ce:bf:cd:f4:12:82:ea:
b1:75:0b:c5:9d:a6:38:23:20:d7:2a:06:89:7d:2f:
2f:4b:17:36:ed:f6:4f:7f:d7:4a:3f:8a:12:86:52:
0b:0b:a1:de:21:fc:2d:77:4e:b0:ec:e9:7f:1b:54:
91:1a:a6:ad:d0:6f:48:bc:51:93:08:7e:73:85:16:
d3:30:10:2f:0f:51:f8:68:84:2e:0b:a1:76:d3:95:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:74:4F:EA:56:8D:1D:9F:74:98:66:B7:BF:6B:16:B2:55:54:59
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/ekd0T-pWjR2fdJhmt79rFrJVVFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.126.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ee:9d:b3:43:7f:b9:6a:78:34:15:a1:06:0e:5c:d2:9b:36:
df:52:db:a7:dc:75:29:1a:4a:9b:df:1c:d9:bf:47:5d:1c:a8:
32:c3:8d:56:ce:64:46:5f:2e:85:5d:b4:70:11:20:00:93:0a:
ef:79:25:f9:3b:ad:b9:58:55:2b:88:5f:96:70:14:7c:8a:6d:
84:5d:0b:e4:31:d3:79:64:52:e2:d8:a5:ea:46:87:9b:03:87:
fc:73:d7:aa:74:25:70:00:90:6a:bf:db:b3:43:b8:29:67:48:
87:b3:cd:62:93:e8:94:a2:16:b8:43:8b:70:f4:87:09:66:23:
ed:25:1f:52:5a:50:fb:41:dd:2a:5b:39:3c:d3:f7:ce:78:92:
60:56:1e:79:14:71:73:57:37:57:70:42:d4:74:4d:ea:e0:5c:
b5:a7:30:59:7e:d4:c4:4b:69:7c:e4:c6:49:22:37:e7:a1:f7:
a4:b7:a9:41:a8:14:be:a6:2e:03:d3:3d:44:1b:97:b6:9e:c1:
d4:76:63:cd:22:c3:5b:54:a1:2a:dc:5a:73:07:d3:10:68:7b:
bd:d3:06:0b:25:35:b7:10:15:cf:8e:c6:0c:ea:f0:46:7a:6e:
d8:93:75:4a:86:d9:36:83:34:ec:31:29:86:70:65:7b:6d:9e:
79:e5:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net