Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/UUanwV5xGuK3SINsq8WiMNy7Rsw.roa
File: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (raw, json)
Hash identifier: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=
Subject key identifier: 51:46:A7:C1:5E:71:1A:E2:B7:48:83:6C:AB:C5:A2:30:DC:BB:46:CC
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 019422FC060712B500B2CE6AA11AE000AB79
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/UUanwV5xGuK3SINsq8WiMNy7Rsw.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208034
IP address blocks: 185.194.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:06:07:12:b5:00:b2:ce:6a:a1:1a:e0:00:ab:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5146a7c15e711ae2b748836cabc5a230dcbb46cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:e9:c7:e0:a1:6e:6f:83:34:d6:0b:25:18:
a2:39:be:a8:86:1c:20:36:85:7b:67:b1:7f:5a:f4:
b3:44:7b:ee:44:fc:4a:23:86:1f:ac:39:ff:2c:7a:
d6:a9:34:57:14:6f:1a:9b:f0:de:32:49:b8:63:86:
2a:b3:13:0a:4d:49:83:a7:83:c5:e9:a2:d3:2e:de:
18:94:99:35:a6:de:ce:b7:7b:f7:bb:c1:11:91:2f:
14:dd:db:b0:4a:f1:79:2e:fc:7d:dd:f0:00:f8:48:
38:5e:46:99:c0:a4:11:d3:bf:1f:bc:85:9d:cb:d4:
f1:1c:bc:d0:09:de:19:33:41:9b:a4:c3:b3:5d:32:
a8:04:e2:f6:5f:f4:33:75:f5:bb:47:b8:9b:1a:d8:
06:23:82:fa:69:56:32:df:9f:0d:d4:f7:02:6e:53:
a2:f1:96:fe:e0:db:a8:c9:7e:62:ba:77:7a:12:0f:
b9:28:c5:09:24:0d:3c:26:6b:47:9f:b0:7e:12:0f:
3b:9f:50:fa:0c:ae:9d:c0:f4:8a:1c:7b:16:02:d4:
33:a7:31:0f:65:5a:d8:85:e5:9f:9b:f4:24:85:77:
35:13:93:5e:f0:b2:9c:ed:43:90:7c:b9:a6:94:7d:
23:0c:a7:2e:19:10:92:83:a0:83:05:9c:e3:c4:a9:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:46:A7:C1:5E:71:1A:E2:B7:48:83:6C:AB:C5:A2:30:DC:BB:46:CC
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/UUanwV5xGuK3SINsq8WiMNy7Rsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.249.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a3:6a:a3:50:50:4a:c7:52:46:84:c2:c0:d2:cc:f8:95:d2:
55:b6:50:c8:b6:29:a2:ed:18:06:f6:21:72:47:88:c9:53:03:
a0:32:a5:7c:ce:7b:a7:75:fa:d8:1b:33:43:59:84:9c:84:50:
18:70:c0:33:1d:73:66:cb:4f:a5:c3:38:d9:e9:c7:a4:ea:a4:
bb:1c:4a:06:9c:9e:eb:11:ce:f2:50:33:9a:16:4a:41:97:20:
5f:a5:20:2f:30:18:9b:b8:10:8f:9b:20:c7:df:c9:8c:2d:85:
c1:fc:61:cf:30:b2:26:4f:54:1d:93:ff:c6:b7:51:6c:fa:fa:
60:45:fe:b7:02:85:30:a9:3a:5c:f5:f5:10:38:d3:6f:c0:2c:
3b:34:06:cc:f9:c6:c0:92:58:a7:c5:55:86:ad:b9:24:99:b9:
78:f0:83:ee:6d:f6:f4:c6:2a:89:a8:a6:ed:c3:41:f8:45:88:
e9:34:fb:30:cc:42:cc:a3:d5:5d:7c:1d:95:d7:30:19:a9:44:
38:99:51:90:6a:02:b4:53:7d:7d:7e:a5:d8:e3:7c:ca:d5:b8:
d9:11:1a:cc:a5:bf:51:4d:1c:75:89:0f:7a:c2:0b:e2:08:d5:
0e:ef:a1:86:5f:a8:58:56:28:87:dc:da:f9:90:d2:d8:3a:c0:
3b:ec:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net