Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/KSFH2iX9DZf8Q-50ramqag80LYo.roa
File: KSFH2iX9DZf8Q-50ramqag80LYo.roa (raw, json)
Hash identifier: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=
Subject key identifier: 29:21:47:DA:25:FD:0D:97:FC:43:EE:74:AD:A9:AA:6A:0F:34:2D:8A
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 019421441F438C3686856328B1E1ED8AAEDE
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/KSFH2iX9DZf8Q-50ramqag80LYo.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25491
IP address blocks: 185.104.244.0/24 maxlen: 24
185.104.245.0/24 maxlen: 24
185.104.246.0/24 maxlen: 24
185.104.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1f:43:8c:36:86:85:63:28:b1:e1:ed:8a:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=292147da25fd0d97fc43ee74ada9aa6a0f342d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:32:0c:8a:bb:3f:cc:b8:27:d8:f2:19:5a:
22:48:18:1a:d8:14:a5:0a:85:ba:08:7a:af:35:12:
d8:34:90:44:12:4b:db:9a:a8:f0:c7:80:a4:56:26:
36:35:a3:16:33:54:fb:98:43:f5:6b:4a:81:04:d8:
91:de:9b:5a:59:06:5c:89:dd:4e:20:9a:bf:fb:c9:
20:eb:e5:ae:c6:c5:c7:be:33:0e:10:e4:c2:97:83:
48:b2:d4:7d:bb:fc:84:59:1d:4e:4b:cc:5a:32:dc:
d9:93:d6:d5:5b:79:7c:26:21:7b:23:5f:34:3b:f9:
83:24:52:68:e5:75:e5:65:a3:36:c4:70:d5:c0:e9:
bf:92:63:e3:7b:be:a4:24:ec:4c:fe:bc:f7:39:15:
2c:6c:3e:0a:08:cb:83:f0:87:d7:17:00:01:d3:cb:
2e:71:c5:cc:1f:db:1d:4a:33:d5:cf:14:68:31:86:
06:ca:93:92:ee:fb:a7:46:ee:cd:2b:6b:14:de:df:
2e:2f:28:3d:c9:7b:de:8f:96:6d:c6:7e:ab:87:7a:
4c:a9:ff:28:84:24:31:b5:7b:cc:d3:7d:3e:fb:ef:
32:6a:fc:64:60:73:0a:3c:14:6c:b9:1f:21:7d:62:
ca:e8:e3:62:4c:f7:ac:38:26:de:f5:bb:8c:b9:44:
a6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:47:DA:25:FD:0D:97:FC:43:EE:74:AD:A9:AA:6A:0F:34:2D:8A
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/KSFH2iX9DZf8Q-50ramqag80LYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.244.0/22
Signature Algorithm: sha256WithRSAEncryption
78:69:83:e2:d7:f7:f8:a2:2b:bd:cb:06:76:5f:e1:84:59:61:
9f:f3:93:33:61:ce:ca:71:f3:f4:09:9a:85:78:e6:d9:5a:62:
db:91:e2:93:65:cb:43:3a:bb:4b:3b:86:ee:49:8c:2e:71:93:
92:9c:e5:5a:ee:d5:f5:dc:66:23:fb:60:32:c1:03:89:4d:73:
10:4b:21:60:b3:e6:dc:39:3e:2b:84:2d:bd:b3:12:4c:2e:b2:
87:0f:ec:6f:30:bf:85:43:32:6e:ee:b1:0b:d2:e8:f3:e7:cb:
b3:5d:08:78:5c:f9:9e:8b:78:ed:5f:ec:26:71:ef:0f:34:57:
41:b5:a4:6e:37:89:41:d4:e1:96:16:2b:b2:1c:20:1f:f5:c5:
0d:9c:c2:a8:6c:7a:b7:f6:96:89:7b:b8:a2:d8:5c:59:f8:6e:
38:20:ea:86:ba:46:60:35:33:a2:8e:c0:27:f6:d9:14:d9:7d:
24:8e:80:3e:71:d0:97:b2:3b:bd:8b:c3:c8:be:42:2e:81:4d:
40:80:a1:e6:a8:0f:eb:dc:f2:c5:3e:e8:ca:78:d1:6c:8f:67:
5c:7e:45:c2:4e:1c:de:c1:c5:19:2d:86:57:59:d1:d0:f9:a1:
d1:15:0e:1b:89:92:71:b5:f1:a0:32:59:9c:ca:14:b3:4d:ae:
4c:76:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net