Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/afa9sH973MF_a6T8rkTlgAGHY44.roa
File: afa9sH973MF_a6T8rkTlgAGHY44.roa (raw, json)
Hash identifier: lhKLVMPsfwQTy1zJyXyEQaU5ystLh/ZAF7RCu/NRIio=
Subject key identifier: 69:F6:BD:B0:7F:7B:DC:C1:7F:6B:A4:FC:AE:44:E5:80:01:87:63:8E
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 019423699FA3098774C79FE7AE9272441BC5
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/afa9sH973MF_a6T8rkTlgAGHY44.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20701
IP address blocks: 185.43.135.0/24 maxlen: 24
193.17.47.0/24 maxlen: 24
2001:148f:fffe::/48 maxlen: 48
2001:148f:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9f:a3:09:87:74:c7:9f:e7:ae:92:72:44:1b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69f6bdb07f7bdcc17f6ba4fcae44e5800187638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:e0:7d:f7:5f:29:95:a1:87:a8:bc:65:7a:
4e:2f:44:e6:5b:ed:33:85:ef:3a:08:5c:15:81:f0:
5d:b7:16:42:e6:ef:20:f6:65:85:cd:a7:d7:8a:d9:
a5:03:87:41:ef:8d:c5:f4:5e:9b:86:50:e1:f1:00:
ab:13:b4:0b:60:cc:fa:7a:27:c2:ec:98:a3:4c:21:
33:0c:ae:f0:7a:a4:38:bd:20:60:2d:68:97:1e:f5:
2c:e9:e1:76:cf:ad:32:53:59:f3:dd:ba:86:dc:48:
12:36:93:b3:f5:be:3c:84:6b:0f:37:c9:10:1f:e4:
34:37:a0:0f:ca:bc:af:99:00:1c:cf:83:f7:c0:b7:
6f:32:49:ec:40:00:8d:c3:60:e3:f0:8a:14:69:c4:
10:34:f5:3a:b7:a0:20:17:e1:65:fb:38:5b:de:7d:
37:65:aa:7e:c4:57:88:0a:ec:ae:95:39:c0:d2:ba:
2a:b7:32:ea:1c:00:61:03:91:24:1f:b3:88:37:bc:
4d:da:6d:eb:59:89:97:0f:44:03:5b:ec:26:5a:0b:
b6:3b:e1:13:e7:f0:6f:3e:e1:7a:e4:a2:97:c8:78:
c2:f3:c5:3d:65:a8:19:4b:da:a6:82:a8:02:ad:ed:
86:b9:f7:ef:b9:ae:08:0a:9c:20:9f:32:67:71:df:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:BD:B0:7F:7B:DC:C1:7F:6B:A4:FC:AE:44:E5:80:01:87:63:8E
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/afa9sH973MF_a6T8rkTlgAGHY44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.135.0/24
193.17.47.0/24
IPv6:
2001:148f:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
3c:dc:df:c0:5a:d8:0b:fe:26:d8:1f:35:a4:b7:8a:f0:61:13:
c0:05:6e:e1:20:b2:4e:73:41:84:08:08:47:44:14:09:fc:82:
e1:5b:ed:c8:70:2a:19:35:d1:16:28:20:e2:ff:65:1e:3f:f0:
2b:09:cd:59:38:62:23:14:f7:1a:44:21:0b:4f:61:49:27:aa:
7c:6e:fc:76:12:9a:ec:48:d5:88:73:13:56:b9:2e:33:11:11:
93:ae:36:36:12:1c:c3:b3:de:a3:dd:c3:5c:53:79:99:25:69:
8e:e9:f4:df:db:58:05:58:45:e6:e3:9a:68:21:ae:be:c8:ac:
9a:3f:29:51:7b:e2:b0:10:f1:09:fd:6f:f8:e4:ad:8b:fa:84:
99:b2:fc:38:fb:56:cb:4b:e9:43:80:dd:d3:42:2b:a7:85:c5:
f4:e4:d1:08:d2:92:13:13:1b:bd:5d:ee:03:d6:b1:2e:40:7e:
70:e8:16:63:4b:d4:49:e7:b9:cf:ef:c1:a3:63:eb:23:16:94:
70:a0:e2:25:be:d0:86:99:79:f3:1b:8a:03:4b:72:bb:1b:0c:
3e:ee:85:ba:d7:22:42:08:b1:50:83:f2:e1:9c:a8:c1:56:16:
ce:83:98:46:0f:c6:63:17:2a:b5:6b:39:65:6b:d9:ee:09:e9:
78:95:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net