Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/SlznhF9EiZYGKKClhlcBqpQpcMg.roa
File: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (raw, json)
Hash identifier: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=
Subject key identifier: 4A:5C:E7:84:5F:44:89:96:06:28:A0:A5:86:57:01:AA:94:29:70:C8
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 0194228D80E0E1B63B99950701ECBBAA60A2
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/SlznhF9EiZYGKKClhlcBqpQpcMg.roa
Signing time: Wed 01 Jan 2025 15:48:06 +0000
ROA not before: Wed 01 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 185.3.168.0/24 maxlen: 24
185.3.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:80:e0:e1:b6:3b:99:95:07:01:ec:bb:aa:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5ce7845f4489960628a0a5865701aa942970c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:db:58:af:80:9d:3c:4a:ab:94:39:93:8f:
42:f8:34:f1:e1:c6:ac:67:80:68:a1:33:e1:7f:3f:
66:dd:c2:67:b1:8c:c9:58:47:17:0c:21:c2:b7:6b:
db:89:91:0c:ef:6d:a1:5e:13:a3:be:84:85:c2:c4:
aa:13:5b:32:61:b4:02:9d:14:b0:5d:c9:aa:0d:84:
66:1d:2e:ac:85:83:94:54:c6:bc:b7:df:82:e5:ca:
d9:5e:f3:c2:f6:99:bc:24:84:2a:b9:04:2b:6c:bb:
20:c5:58:d0:a7:0e:aa:54:3c:29:d0:5b:3c:bd:07:
9e:e2:16:c0:79:49:38:ae:89:57:aa:a8:e9:f3:4f:
59:a6:b8:e8:5f:75:ff:43:fc:41:65:a2:c2:80:b7:
c1:4a:72:14:db:10:6e:be:f5:92:b5:4b:d0:76:f8:
56:85:ce:ea:7a:5b:29:2b:cd:cc:cf:0c:79:0a:61:
95:47:33:90:46:41:98:2a:77:7e:7b:6a:a2:73:e7:
5e:e9:f5:36:63:df:3d:4f:78:38:c3:28:fb:55:7f:
5c:63:e9:dc:e1:d7:de:6b:33:d4:ef:54:18:ea:ad:
29:61:55:2a:ab:9c:7e:40:9b:7a:84:18:3e:83:ac:
09:16:8a:df:4f:7e:c6:d1:cf:54:c6:10:03:cb:0b:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:E7:84:5F:44:89:96:06:28:A0:A5:86:57:01:AA:94:29:70:C8
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/SlznhF9EiZYGKKClhlcBqpQpcMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.168.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:f3:63:aa:e8:d2:35:3d:bb:e7:89:ff:67:38:3d:9f:d8:3c:
58:eb:d7:10:ff:c7:d3:b6:1d:12:41:76:4e:b1:40:fa:1d:16:
4f:89:10:1e:0c:7c:8b:20:de:ed:71:f4:fa:b9:5d:ab:88:cf:
8b:11:40:d6:f9:b8:22:32:93:2e:ea:96:c8:a6:f9:80:64:2d:
47:a5:77:16:9c:31:d0:79:ea:7c:4c:1b:16:03:5b:c9:5a:d5:
36:0f:43:5a:1f:32:ad:8c:46:2b:e3:1f:6b:8a:d4:a6:76:0d:
20:f8:4e:7e:af:42:6f:6a:d5:b3:c4:87:87:a1:7e:4d:cc:01:
7c:32:ab:a6:dc:4e:cd:47:4b:16:5a:32:dd:5c:cf:e4:22:d2:
96:07:fe:0c:ec:9a:4f:9a:1c:ae:59:aa:19:c0:7a:01:5e:cb:
b1:bb:6b:e9:11:de:d9:7f:16:c6:64:d3:d4:dd:c8:02:1f:d9:
cc:a8:2f:f5:22:4f:fd:13:65:8b:66:69:6f:51:5c:30:e8:1e:
aa:64:bb:0f:0b:6e:89:26:6c:74:3c:d2:5e:77:46:b8:a9:40:
8b:79:4e:e1:42:cd:33:73:26:b3:97:51:3b:47:4f:ec:41:2b:
08:33:63:ca:73:37:a6:0c:c2:29:dc:83:e6:fc:09:ab:57:17:
0d:3b:bf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net