Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/lfnWEOvFiyPQ4V6fSENJIUzxTlo.roa
File: lfnWEOvFiyPQ4V6fSENJIUzxTlo.roa (raw, json)
Hash identifier: haGiRVIYQql14DyAfU+5XwsD5ECg69Kir2HoWSWwiFo=
Subject key identifier: 95:F9:D6:10:EB:C5:8B:23:D0:E1:5E:9F:48:43:49:21:4C:F1:4E:5A
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 019427B5623E7385DA4D5D2D67C94ED9EBC0
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/lfnWEOvFiyPQ4V6fSENJIUzxTlo.roa
Signing time: Thu 02 Jan 2025 15:49:46 +0000
ROA not before: Thu 02 Jan 2025 15:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395363
IP address blocks: 185.173.184.0/24 maxlen: 24
185.173.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:62:3e:73:85:da:4d:5d:2d:67:c9:4e:d9:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Jan 2 15:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95f9d610ebc58b23d0e15e9f484349214cf14e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:4e:40:f0:1a:ad:42:11:8e:d5:e4:dc:54:
25:f8:88:47:a0:fe:56:8d:a7:78:15:92:17:a0:d9:
31:57:6b:f4:10:e7:d5:da:c7:8d:d9:a7:55:97:ea:
46:71:46:aa:fb:ce:13:b8:70:a6:70:b8:d8:2b:ce:
06:41:23:15:b5:18:c6:dd:a2:1d:cb:85:81:f8:b6:
08:27:0a:b2:25:84:88:07:14:b7:df:0c:1d:07:7f:
25:ad:c7:74:ec:3d:ff:49:40:64:d1:81:be:78:dd:
80:0c:69:a0:c2:28:18:a2:8b:75:78:69:d5:cb:9e:
d1:ea:62:7e:27:b8:d6:5e:e7:da:90:3f:51:2c:9d:
53:fa:29:49:e5:6a:d0:97:36:4b:22:36:93:22:22:
3b:a0:92:54:72:6c:29:23:90:52:54:b5:1c:a5:ae:
4b:f0:73:d5:ab:a9:22:0c:ec:9c:b7:d7:f5:29:3e:
35:68:5d:60:d8:5c:c7:5d:a2:3e:b5:de:15:75:05:
eb:93:18:b0:32:05:fe:9b:c7:4f:5f:e8:85:2e:87:
9f:cf:7f:de:d9:56:62:0b:b1:47:fb:7b:bc:45:b3:
19:de:ad:86:fa:71:d2:dc:b0:2b:6a:22:fc:cc:28:
3a:26:a7:18:b7:d5:d1:48:58:15:92:e1:46:0a:3e:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:D6:10:EB:C5:8B:23:D0:E1:5E:9F:48:43:49:21:4C:F1:4E:5A
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/lfnWEOvFiyPQ4V6fSENJIUzxTlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.184.0/23
Signature Algorithm: sha256WithRSAEncryption
71:88:af:d1:91:4f:b8:f3:65:da:cc:36:ab:14:61:17:53:22:
d4:e9:d5:6b:08:9e:38:f0:cd:05:8a:a9:e1:7c:69:cc:63:83:
2f:a0:99:dc:0d:ae:33:fb:79:f6:cd:e2:58:02:d6:f2:35:54:
63:75:86:20:4c:6f:d1:84:06:43:51:a8:66:b0:f4:1c:d1:10:
d9:8f:81:36:c9:65:20:89:63:f7:c7:6e:75:b1:eb:d2:76:39:
3f:53:04:5b:f3:c9:8a:d6:21:01:b4:9a:8b:05:79:32:45:e6:
27:d5:58:78:c5:10:d6:d4:7d:9b:22:3f:20:73:0d:31:0d:f4:
e0:45:ed:a1:83:c8:e7:83:37:5b:bc:e8:5c:b4:55:87:41:77:
de:c9:02:7e:3a:44:70:ff:06:7e:97:10:99:61:53:dc:e6:de:
9d:e8:31:b3:08:ca:f9:55:48:d0:79:28:8e:48:37:32:9a:5e:
14:85:2e:7d:5a:a3:40:fb:bc:ac:dc:b2:44:0c:d7:c8:fc:a2:
cf:0f:12:f8:bc:4b:94:ad:0f:eb:40:47:6d:3f:06:93:f0:d7:
8b:dd:e3:0d:a9:11:8b:a9:9f:6e:bd:81:e9:c8:98:1e:93:c4:
51:16:be:31:10:eb:ff:92:59:69:d4:d3:c0:87:08:a4:d7:66:
10:54:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net