Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/c_VdOA86HAho8DyTOmnwSwlTlAk.roa
File: c_VdOA86HAho8DyTOmnwSwlTlAk.roa (raw, json)
Hash identifier: 850TFYirePJY29VuqkCG/JWWe8g21qbj4etquhKOEz8=
Subject key identifier: 73:F5:5D:38:0F:3A:1C:08:68:F0:3C:93:3A:69:F0:4B:09:53:94:09
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 01941FFAADE67A2583063E2753633CDC1676
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/c_VdOA86HAho8DyTOmnwSwlTlAk.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214401
IP address blocks: 185.160.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ad:e6:7a:25:83:06:3e:27:53:63:3c:dc:16:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f55d380f3a1c0868f03c933a69f04b09539409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:1d:f1:cf:61:ec:05:91:6d:3e:ff:38:8d:
7a:b6:69:14:c1:3c:24:3e:24:17:2d:96:ff:ad:af:
72:77:5c:39:bb:88:ee:fe:b3:c4:77:75:9d:20:b2:
12:0c:36:5a:36:83:01:00:09:89:72:88:07:67:d5:
77:08:85:81:6a:55:be:e6:fd:a0:c8:37:40:8a:81:
5a:48:ef:33:1e:2c:a3:63:c0:8e:7b:df:44:82:0f:
da:5f:27:8f:f3:d4:ed:d1:0e:d3:de:a8:68:cb:ed:
5d:82:17:53:7b:65:c9:1e:4a:ff:d1:87:25:ca:59:
73:b3:c4:12:be:51:06:8d:98:b1:3f:63:a9:ba:1c:
ff:55:99:db:f1:c3:4d:ca:d9:3b:3b:55:f5:d6:84:
87:17:1b:ce:e9:69:59:0a:96:e0:5d:58:00:77:dd:
5d:f5:0f:a7:87:e8:ce:47:45:98:f9:47:9d:d4:f0:
d6:02:16:bc:a4:ae:f5:fa:ae:d6:7a:35:b3:9b:2f:
0d:fd:b8:7d:82:2f:0c:dc:f1:29:9f:4e:a6:15:5c:
3f:f4:d5:09:b6:63:2f:12:2c:8c:f6:31:8c:92:0c:
65:14:45:02:7b:52:c7:f4:33:69:df:89:58:9a:ed:
a4:26:0f:7a:99:85:8f:5e:71:30:bf:3c:4f:38:21:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:5D:38:0F:3A:1C:08:68:F0:3C:93:3A:69:F0:4B:09:53:94:09
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/c_VdOA86HAho8DyTOmnwSwlTlAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6b:dd:07:46:86:ed:a6:b2:fa:f0:86:28:70:87:03:c6:c8:
50:83:49:e3:ca:f6:83:75:df:f2:83:a4:f7:57:18:af:6f:09:
53:2d:f9:a4:d0:8b:61:5d:60:bb:89:25:a6:94:df:de:98:22:
38:d8:fc:c8:29:62:99:c6:48:8b:0a:a1:ed:45:42:70:6e:be:
93:21:ee:8d:02:bb:d8:50:4c:2a:04:a5:5b:0d:eb:ab:48:ab:
f9:ff:6a:10:78:7e:f5:c4:cb:ab:51:81:97:76:d0:16:c0:a6:
58:bb:42:bc:b5:a3:17:d7:2a:34:39:33:63:40:28:69:f8:84:
1f:3f:71:b2:a5:96:97:91:bd:e9:b3:4b:e4:88:f7:b0:a5:5e:
64:0e:20:46:c4:70:9d:ee:21:36:87:ac:b0:19:04:a9:2c:19:
47:fd:20:9a:dc:93:d9:17:ed:c4:7f:4b:cf:6a:cc:7c:e6:d2:
0e:ab:8e:4a:7f:11:70:32:89:f0:2e:f9:88:d1:f7:6c:8a:b1:
fc:0b:20:38:28:b4:52:a6:72:02:a3:3b:ce:0b:a1:65:dc:a4:
dc:7f:8b:ca:08:e9:38:5e:3f:bc:a0:a4:55:5d:6d:77:12:87:
00:1e:f1:54:0d:cc:6c:d4:a7:43:f4:26:fb:d4:20:be:b4:90:
dc:fe:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:32 2025 by rpki-client on console.sobornost.net