Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/oPeQLPX6uGsTa0wO6DH1EULp4f4.roa
File: oPeQLPX6uGsTa0wO6DH1EULp4f4.roa (raw, json)
Hash identifier: KrmKJHT/mJohWjDeVABcWMG4FCh9RJOamHor38/dr+U=
Subject key identifier: A0:F7:90:2C:F5:FA:B8:6B:13:6B:4C:0E:E8:31:F5:11:42:E9:E1:FE
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 01941FFA987D3EB3DE1CD6126771635155CA
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/oPeQLPX6uGsTa0wO6DH1EULp4f4.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205226
IP address blocks: 185.108.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:98:7d:3e:b3:de:1c:d6:12:67:71:63:51:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0f7902cf5fab86b136b4c0ee831f51142e9e1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:80:37:4c:09:49:d4:f1:27:07:16:f6:9e:
53:b2:ff:8f:2f:b3:5d:ac:00:75:b1:65:f8:c5:f8:
eb:f2:06:ea:71:95:0a:a9:f0:c6:02:f7:16:ff:89:
17:83:93:0a:9d:2d:83:d7:8e:18:0a:f7:a4:10:26:
3a:4c:e5:7a:20:a8:24:9a:06:5a:ab:2e:82:8d:be:
dc:f1:89:9d:dd:09:ef:f7:90:ff:99:70:80:0e:62:
55:03:d7:ad:df:05:91:99:df:46:36:64:c7:87:db:
25:a3:4a:3e:b5:62:17:52:8b:03:82:72:5c:39:a0:
94:c5:68:15:95:01:8a:7c:a1:ca:c2:39:9c:12:69:
e8:b7:62:ab:5f:d5:dd:5c:0a:93:01:8c:c5:d3:ab:
04:24:04:df:0f:be:27:06:1f:22:55:5d:39:0d:86:
c5:ac:c4:04:9b:24:d2:cf:6c:f1:d5:4a:fa:d4:4a:
57:35:54:00:c4:48:00:f1:74:6b:bf:ab:81:c4:16:
4f:75:68:2d:b3:ee:88:f7:91:b2:4c:0c:57:9a:42:
4f:c2:7d:80:1e:44:17:14:eb:ac:bd:27:1d:bf:df:
ca:9e:bd:5e:b4:04:56:d7:65:14:85:64:df:0d:d4:
e6:e8:ec:33:97:b3:a5:63:b9:2c:dc:f3:af:0c:44:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:90:2C:F5:FA:B8:6B:13:6B:4C:0E:E8:31:F5:11:42:E9:E1:FE
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/oPeQLPX6uGsTa0wO6DH1EULp4f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e1:23:44:3f:4a:29:95:66:78:ad:26:ff:07:0c:4e:c6:67:
3d:63:ef:90:b2:59:ca:b5:f8:21:ea:8a:2b:a9:b7:5e:63:06:
10:43:82:76:1c:bd:70:e8:38:18:59:9c:7b:0e:c7:e5:5b:7c:
83:f1:17:30:f7:45:f7:ae:52:30:5e:b9:f2:9b:4d:36:0a:1d:
9f:28:50:5e:e3:04:fc:c7:28:b3:b6:46:b7:6a:f2:75:db:ef:
04:65:02:0e:99:52:6a:87:a4:05:8a:6c:b0:2f:bd:d3:5d:6e:
9d:8f:ee:c7:83:fb:6a:e4:49:81:25:52:5a:74:4e:0a:09:d3:
ad:59:4e:98:4b:a7:a3:57:f9:1e:23:5b:6c:e8:58:2c:bd:f7:
60:3b:a1:06:d7:fe:3a:10:5d:81:63:1d:95:48:ba:58:59:53:
51:a0:3a:c4:43:39:66:bd:61:da:05:0b:c9:22:25:1e:27:4c:
b2:98:46:ef:8e:55:b5:59:fa:43:d9:f6:86:4c:27:b6:ae:25:
66:2d:61:3a:2f:41:f2:7f:6a:7d:ae:b8:b9:6c:82:83:03:1d:
89:43:5a:5a:e2:f3:40:15:41:71:9f:4a:47:eb:ea:77:78:0b:
8d:59:ac:c5:53:6e:70:b3:cb:e0:02:df:d8:18:51:10:7d:1c:
d6:38:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net