Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/9tSoewyxusy3XiU4MPlfgCKviQM.roa
File: 9tSoewyxusy3XiU4MPlfgCKviQM.roa (raw, json)
Hash identifier: 4mAbpqKotMEUi55o3nvNZU9MOu3aXF7KZ9T6UnO+Ftc=
Subject key identifier: F6:D4:A8:7B:0C:B1:BA:CC:B7:5E:25:38:30:F9:5F:80:22:AF:89:03
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 01942067D94007744B98864470B0B87E5272
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/9tSoewyxusy3XiU4MPlfgCKviQM.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42836
IP address blocks: 185.223.86.0/23 maxlen: 24
195.66.90.0/24 maxlen: 24
2001:67c:20c8::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:40:07:74:4b:98:86:44:70:b0:b8:7e:52:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d4a87b0cb1baccb75e253830f95f8022af8903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:2e:df:28:02:5a:11:87:76:65:42:2c:b6:
56:bd:00:09:da:5a:f5:33:71:d3:16:1f:34:93:d2:
4c:6c:74:43:42:4b:2f:d9:3e:4e:93:b6:7a:95:c1:
81:a7:dd:a6:b7:13:37:a4:1d:64:20:58:8c:cb:54:
68:3f:c7:84:40:61:60:6a:f1:cf:4c:18:9f:11:3f:
42:a5:96:55:5d:fa:8c:35:49:02:99:25:d0:d7:8e:
1c:1f:cb:fc:91:d5:32:81:10:7d:f1:fc:37:c4:9d:
9f:b1:20:96:68:a3:9e:64:32:52:8c:d6:92:ad:f7:
53:40:3a:e5:92:65:0c:40:ae:f8:9f:d0:ef:d5:3e:
db:75:b0:95:ab:5c:0d:32:04:a0:40:a6:93:ef:e4:
f1:b0:a0:ad:b8:19:be:a0:aa:34:4d:0c:94:36:ee:
34:df:56:64:c5:b2:bd:e1:fa:3f:d4:42:49:4d:2f:
07:34:53:f7:74:32:f6:c4:e9:d7:ff:70:f5:74:08:
88:02:31:59:20:f6:88:dc:62:95:f3:f3:72:dd:09:
df:49:fc:d3:df:76:02:69:3d:24:04:14:61:45:ef:
a3:10:23:7c:db:3a:38:b4:22:e8:43:f2:51:e3:eb:
a2:8b:f5:6a:56:7f:99:2d:3e:cf:02:fe:c3:5f:5e:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D4:A8:7B:0C:B1:BA:CC:B7:5E:25:38:30:F9:5F:80:22:AF:89:03
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/9tSoewyxusy3XiU4MPlfgCKviQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.86.0/23
195.66.90.0/24
IPv6:
2001:67c:20c8::/48
Signature Algorithm: sha256WithRSAEncryption
83:bf:bc:a7:77:8c:b5:52:66:1f:c6:18:0e:98:e8:a8:cb:fe:
f4:c5:e6:63:7f:4c:62:49:0b:bf:bb:a2:a9:4f:13:8d:78:26:
6e:7e:14:1d:a7:8a:50:f4:9b:d3:26:d6:72:0c:f9:81:f5:31:
9a:07:db:2b:ef:3c:0e:0a:32:8d:2e:a2:3a:ea:40:11:6c:ff:
88:19:4c:08:a6:d2:00:48:c7:c9:33:48:2e:8f:37:5a:71:f3:
fc:5a:63:09:1a:a4:d8:16:7e:12:6f:74:a1:0b:c9:7f:19:0e:
ad:f5:31:c0:8d:4d:e2:c1:9b:aa:2c:3c:7e:94:e8:5b:9e:39:
33:bd:4a:dc:91:d8:10:b0:1f:f3:64:76:10:cf:ed:8e:f8:15:
00:63:83:2f:98:40:52:4f:4b:e1:21:b9:13:64:30:8f:cc:e7:
94:2e:ea:e8:6e:06:d5:1a:ae:8b:ab:2b:71:4c:2b:e2:8f:6a:
d9:01:bf:d4:df:45:a2:75:8e:e2:b5:ef:42:20:e1:40:c0:ce:
28:34:40:19:dc:67:ad:eb:34:8f:f0:c0:c4:7d:dc:89:03:de:
91:0a:a5:68:dc:07:11:63:b4:80:10:1e:9f:f6:b9:4e:a0:f1:
6a:02:5c:11:9c:8e:b8:ad:a0:cd:0b:f6:0f:8a:bd:7c:ff:9d:
96:ac:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net