Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa
File: 4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa (raw, json)
Hash identifier: Bfi//UXbV5M/NCBFlKGAD2+i4yYB9vi4KZuferz0+fI=
Subject key identifier: E1:08:ED:D1:6E:48:86:83:E0:0C:C8:D1:94:76:CA:B3:C8:D0:C1:63
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019422FC4AB6891B842870CE84660CF76309
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62197
IP address blocks: 185.15.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4a:b6:89:1b:84:28:70:ce:84:66:0c:f7:63:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e108edd16e488683e00cc8d19476cab3c8d0c163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:c8:db:7a:d3:fe:58:ba:af:02:18:3e:3a:
40:65:72:56:1c:ca:5e:e8:ca:ce:b7:09:18:61:93:
fe:76:bf:63:f7:16:7b:55:52:be:e7:e3:0f:f7:94:
8e:1b:f7:87:47:e5:c4:73:d3:3a:1f:40:1a:3a:a6:
73:d5:39:80:f1:11:e1:d1:64:e7:8b:0a:da:e3:f9:
fb:bf:03:58:35:9b:4c:c9:bc:04:35:a1:ed:f4:56:
b8:9b:12:7c:ac:6e:65:02:38:b1:b7:24:61:2d:a1:
e6:c9:c4:e9:ad:62:a1:fd:f3:16:f2:bf:f9:41:84:
dd:07:9a:44:89:d7:e6:83:81:c6:a3:cf:ea:ed:52:
59:89:22:e2:fd:e4:2c:af:34:a1:10:d1:84:5a:64:
4c:c5:fe:67:93:bd:8c:38:19:0a:55:db:42:56:10:
0f:93:f5:7f:c7:98:92:c1:14:f2:7d:68:f6:d8:c9:
e4:4e:2b:d2:4d:76:df:9e:1e:7b:72:b5:27:4c:91:
33:7c:f5:9b:07:f3:cb:1e:a7:f0:97:8b:e5:9a:6b:
5a:5f:2b:54:f1:1a:4a:ca:7c:41:bc:e8:4d:2b:35:
fe:f3:fa:1e:fb:40:69:0a:c5:f3:19:ae:fa:41:5e:
3c:91:82:da:9d:87:c5:15:e9:c2:e2:07:fb:68:f2:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:08:ED:D1:6E:48:86:83:E0:0C:C8:D1:94:76:CA:B3:C8:D0:C1:63
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/4Qjt0W5IhoPgDMjRlHbKs8jQwWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.158.0/24
Signature Algorithm: sha256WithRSAEncryption
98:29:f4:a0:4b:af:10:d4:65:cf:6e:36:69:20:52:4a:ab:5e:
d0:44:a8:a6:fd:e3:3d:04:44:b5:82:8a:c6:7e:60:18:08:ed:
cd:ef:3e:cf:82:b0:a4:d3:ff:d9:7c:3c:37:b0:60:16:e4:7e:
b8:5a:58:ee:78:50:a4:03:e2:12:ac:b9:25:6c:d9:53:e2:8d:
fa:de:7b:85:21:35:bb:1b:94:f3:53:5e:2d:78:1a:94:90:d7:
00:62:18:c8:25:4d:98:d0:43:0a:03:02:74:ce:ab:20:19:47:
fd:5f:78:db:e4:60:5b:10:7d:c0:41:9d:94:f5:5b:66:58:40:
e4:a4:a4:fc:1d:78:30:4f:ba:9d:be:a4:b9:d0:25:20:93:45:
c9:09:68:b5:8f:78:df:81:21:3c:f2:07:4c:84:b6:27:cf:0b:
3d:c7:f4:8a:10:81:41:78:64:dd:30:ef:a9:bd:d4:49:0c:7c:
59:dc:44:31:ba:f6:ca:b2:08:99:5f:a3:0d:67:61:d5:14:13:
aa:01:22:66:02:83:91:e5:8b:ce:be:70:ac:26:df:e1:1d:33:
86:26:8f:7a:b6:74:dd:e9:8b:85:20:1d:63:3e:e5:8b:0e:91:
6c:73:08:eb:08:67:b4:9b:e9:28:23:65:69:8d:19:83:1b:fd:
d4:eb:6b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net