Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/4HFAWmQXrJvJPwvQ-nacdREAjwA.roa
File: 4HFAWmQXrJvJPwvQ-nacdREAjwA.roa (raw, json)
Hash identifier: smesMzM3abS3/IiONa1NHYIBIDWL+noqBcVPlJGz8P8=
Subject key identifier: E0:71:40:5A:64:17:AC:9B:C9:3F:0B:D0:FA:76:9C:75:11:00:8F:00
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 0194266B7DFE6401F11892E4CF47A6167F8D
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/4HFAWmQXrJvJPwvQ-nacdREAjwA.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51048
IP address blocks: 185.83.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7d:fe:64:01:f1:18:92:e4:cf:47:a6:16:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e071405a6417ac9bc93f0bd0fa769c7511008f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:f5:63:c0:84:8a:41:26:41:48:40:64:ab:
3b:b0:2c:a1:03:6e:19:a5:22:1b:26:82:9c:98:42:
a3:18:2c:6e:5b:c4:5f:a5:63:af:48:74:2c:4b:06:
55:42:cf:c6:ae:15:61:44:fc:f6:a4:9d:f4:14:98:
2d:39:ea:92:37:2d:d7:a2:e0:63:41:0a:ef:c7:25:
92:9d:64:9a:d9:b4:92:be:24:2a:1b:b5:dd:12:90:
d1:88:ab:31:c4:76:96:9e:f3:29:45:c1:d0:67:47:
8b:49:b8:44:26:11:86:3c:79:f1:d0:86:f3:14:8f:
fa:ba:ae:93:9e:63:a5:fa:5c:c6:75:aa:3a:72:fe:
26:29:a2:59:c1:d5:a5:01:2b:bf:bf:4e:8a:5b:fa:
58:19:9e:b7:68:fd:50:d9:ea:f3:0f:32:02:60:c0:
fd:e6:8c:5f:12:ac:ea:08:7e:11:80:8b:39:ad:d2:
38:61:33:a2:b1:83:86:53:ea:b1:9e:75:72:b5:55:
92:b9:08:a7:6b:92:86:60:0f:3f:37:37:53:49:43:
7f:93:d5:a0:3c:6c:d8:5a:7a:48:8f:52:3a:dc:20:
85:f9:dd:45:e9:b8:b6:a6:b7:d8:52:b1:89:2e:72:
23:1e:44:45:a8:c5:40:b9:e2:c0:9f:87:8f:80:99:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:40:5A:64:17:AC:9B:C9:3F:0B:D0:FA:76:9C:75:11:00:8F:00
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/4HFAWmQXrJvJPwvQ-nacdREAjwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:cb:e9:a2:0e:bd:b7:6a:be:aa:f4:4a:81:50:ab:96:12:8e:
32:e6:1b:40:37:66:79:23:09:e4:31:4b:d6:2c:59:b4:e5:9c:
dc:62:96:50:39:db:45:7b:b5:c3:d2:74:09:50:9e:93:73:69:
eb:c9:8d:45:92:e0:61:f1:98:7d:bc:67:8a:b2:d1:ff:f8:14:
cb:01:11:d3:45:59:25:13:d5:84:7d:1f:b8:77:19:1d:8b:f0:
d4:2e:a6:50:6c:5f:e8:08:b9:ae:4e:e6:f0:b7:b4:7b:cd:50:
ee:35:0f:74:89:dc:8a:90:81:cf:4b:ff:91:38:fe:b1:39:2e:
51:16:3a:35:a2:d1:9d:a5:59:ef:55:b6:d0:c7:ac:41:66:ff:
b7:2d:30:ad:8f:b5:4d:a9:11:9b:ed:7f:3b:77:31:a5:7c:fe:
2e:50:6c:f1:b4:28:b5:9f:f8:16:aa:d5:43:3b:ab:6a:af:62:
f9:fd:72:2f:69:14:4b:72:80:ca:40:91:bc:14:fe:87:d5:b4:
13:37:35:c2:17:6e:c1:31:0d:4c:a0:a4:bc:40:93:ba:a7:2f:
65:db:cf:c9:58:43:ae:1e:30:c9:b6:5f:d3:96:79:b7:ce:11:
b7:1f:db:d9:3f:ba:34:c2:8b:12:78:40:0c:6c:2f:3d:9c:51:
0c:d8:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net