Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/85I4pfyLQKX8k9V-tQtyQU5bDYo.roa
File: 85I4pfyLQKX8k9V-tQtyQU5bDYo.roa (raw, json)
Hash identifier: TN5K/hNnnHvE6u0/+9oRgawldt2710m801enGA9Infw=
Subject key identifier: F3:92:38:A5:FC:8B:40:A5:FC:93:D5:7E:B5:0B:72:41:4E:5B:0D:8A
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 0194221FBF8436F0139FA3D695A1ACD10171
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/85I4pfyLQKX8k9V-tQtyQU5bDYo.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206063
IP address blocks: 185.39.252.0/24 maxlen: 24
185.39.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bf:84:36:f0:13:9f:a3:d6:95:a1:ac:d1:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f39238a5fc8b40a5fc93d57eb50b72414e5b0d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:19:e3:5c:63:0a:05:ac:4c:22:95:cc:bf:
41:17:4f:6c:39:15:fb:78:75:97:6f:d5:f3:96:08:
81:bd:60:13:09:ea:d5:4c:cb:2d:ac:08:9a:d9:2c:
1b:a6:1f:46:47:28:63:67:59:2f:f1:a8:38:1c:95:
4b:b3:64:82:3d:37:9e:ef:77:39:a6:99:20:c6:24:
62:bf:c6:2e:e4:b4:c7:7b:5f:8a:bb:2f:8c:52:cb:
c9:15:76:58:58:c3:60:3f:3f:2d:90:9c:33:e6:ea:
16:f8:8b:9a:79:ca:91:98:7e:95:08:11:77:52:8d:
dc:da:d0:c2:67:ce:dc:9c:b7:79:82:18:f4:b2:7b:
45:ee:45:b5:9b:b0:fe:5d:b0:bd:de:e3:e7:70:0e:
4f:35:79:cd:d2:5e:a3:07:dc:5a:93:b9:ed:07:c3:
50:ee:03:c8:ac:5c:f0:ea:34:8d:88:aa:58:87:b6:
a0:78:28:29:d2:ba:85:83:82:62:ec:ac:ce:e9:7f:
1d:2e:30:ee:04:12:fe:b7:ec:0e:b4:fd:66:64:2c:
65:d2:cf:fa:ab:04:a4:d2:42:05:35:c1:d2:60:60:
7c:33:ca:d7:93:31:9e:16:75:d7:78:0d:57:33:28:
7a:d0:8d:b6:1a:a6:0d:11:44:25:49:3c:03:95:88:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:92:38:A5:FC:8B:40:A5:FC:93:D5:7E:B5:0B:72:41:4E:5B:0D:8A
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/85I4pfyLQKX8k9V-tQtyQU5bDYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.252.0/24
185.39.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:78:84:fa:46:69:8f:2e:9e:dd:f0:ec:18:92:1d:8b:7c:3e:
4f:a8:8d:55:d4:64:30:d2:ae:68:85:4d:bf:27:df:fd:4b:7e:
e1:fd:f1:ef:7b:d2:9c:84:cb:e3:ea:01:b7:ff:a0:e4:22:08:
ad:6e:84:7c:eb:e0:19:d5:fa:45:7d:ca:b6:7f:65:c8:a0:fe:
b2:08:87:57:71:d2:90:55:81:45:b3:45:b5:5b:17:00:91:bd:
6b:f3:60:a4:6e:4e:12:70:d9:3d:96:7c:70:aa:c5:84:43:98:
71:b3:9f:ec:04:dd:e4:4f:8a:0b:3d:b5:63:fb:d0:4f:51:4c:
25:4e:a4:65:3c:33:96:16:57:06:d0:c2:51:02:4f:ec:a1:5f:
c3:0d:64:6e:b4:43:4b:b8:d3:36:95:df:03:e6:f4:0f:2e:04:
28:41:3d:68:8b:c5:d0:cd:fc:dd:1f:2c:ef:34:02:74:77:88:
1a:ea:2f:f3:60:89:37:02:c0:93:f5:78:2a:e3:4e:ee:33:20:
65:ec:83:82:90:83:03:40:8e:f1:ce:86:5d:44:1a:62:f1:9c:
6e:f2:01:55:ee:27:8d:10:24:9b:7e:ee:fa:ed:fe:b6:ee:eb:
3d:56:e5:67:59:ad:80:b6:bb:bd:cd:8a:f7:f3:f6:7b:af:32:
5f:35:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net