Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa
File: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (raw, json)
Hash identifier: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=
Subject key identifier: 12:59:23:31:2A:3F:91:78:CF:EA:AF:5A:48:35:06:9D:98:BF:79:4D
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019423D6CD2859F68DD3320BEAD6DCA2D0CA
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206091
IP address blocks: 185.196.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cd:28:59:f6:8d:d3:32:0b:ea:d6:dc:a2:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125923312a3f9178cfeaaf5a4835069d98bf794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:9c:11:a5:cb:fc:53:50:58:57:5f:15:8d:
8c:5a:98:d3:4b:8a:3d:b5:02:ec:5f:f9:10:5f:3e:
90:10:d7:b9:c7:81:39:88:77:21:0a:81:73:bc:d9:
f8:07:1f:21:21:13:df:9b:e9:63:4c:07:05:ae:c1:
77:80:fc:35:c2:b0:e1:fd:53:7b:c0:d8:69:a7:4c:
29:42:a5:61:c9:a5:dc:99:8c:0e:cd:fe:6f:24:7d:
c1:50:93:ea:87:03:43:2d:b4:20:fb:46:5c:0b:09:
40:f5:09:82:37:aa:83:cf:2d:a4:7c:28:91:d5:b8:
57:1a:86:52:66:5a:5b:3e:ac:fb:e6:42:55:c6:3c:
07:c6:e4:e5:37:8a:84:42:91:f2:c3:09:74:7c:11:
23:e5:91:46:14:47:bd:06:23:8b:8c:24:4c:ee:30:
72:76:93:f0:46:8c:66:b1:c2:6a:b9:01:29:56:7e:
86:2e:0e:00:97:0a:cb:82:88:d1:48:13:13:df:1a:
5f:69:1f:1a:e5:4f:82:5c:56:dc:5d:ff:f8:e9:7b:
ff:f2:83:1b:d0:ec:ae:7d:56:28:3b:ab:d4:ee:75:
cc:ad:56:bc:26:7c:57:bf:50:11:49:2d:67:4d:4c:
75:ba:ef:f3:22:db:ff:2c:85:a3:dc:fc:43:19:46:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:23:31:2A:3F:91:78:CF:EA:AF:5A:48:35:06:9D:98:BF:79:4D
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.176.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:b8:97:99:d0:19:69:0d:eb:95:f7:49:be:fe:f5:25:12:e6:
c1:33:e7:55:d1:28:98:21:22:55:b3:98:f7:28:54:12:e6:b8:
1d:6e:85:46:cb:77:6e:17:92:1e:42:45:83:f0:84:a2:21:97:
94:c5:67:3d:da:71:ee:d4:f9:db:e8:fd:20:e9:61:59:1f:de:
0d:37:c7:a2:0a:44:d6:69:52:96:fe:4c:99:5d:45:35:fb:c5:
82:14:3e:c6:12:66:13:da:47:4c:ad:22:45:b3:94:9b:c5:93:
fe:06:f5:1c:f9:25:41:20:12:c5:19:b8:95:4a:5a:0e:17:7f:
bb:9a:ab:37:d6:c9:34:a0:9b:e0:62:01:78:74:e6:99:3a:b7:
3e:18:aa:8b:de:18:63:96:8a:58:e5:a5:27:77:43:5a:9d:93:
b7:e7:e8:0f:61:88:c5:1f:94:53:fa:63:03:a0:d9:28:05:82:
27:db:39:84:06:27:22:e0:6a:58:eb:6d:ac:3a:9f:e7:ce:13:
5a:08:be:59:a2:93:b3:e4:05:a5:8f:78:7f:82:85:c4:ff:31:
17:83:e3:1a:bf:f7:06:ce:36:e4:be:ed:ac:1f:07:82:6f:07:
28:d3:a5:6f:a6:50:61:06:8d:a3:0e:da:b8:b8:7e:62:04:2a:
3c:4b:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net