Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/gfhu0UMjPTGrZruaeirhOo04QTw.roa
File: gfhu0UMjPTGrZruaeirhOo04QTw.roa (raw, json)
Hash identifier: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=
Subject key identifier: 81:F8:6E:D1:43:23:3D:31:AB:66:BB:9A:7A:2A:E1:3A:8D:38:41:3C
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0194CAF784F2FED3388CEB547102977387BB
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/gfhu0UMjPTGrZruaeirhOo04QTw.roa
Signing time: Mon 03 Feb 2025 08:40:06 +0000
ROA not before: Mon 03 Feb 2025 08:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207024
IP address blocks: 185.79.14.0/24 maxlen: 24
185.79.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:f7:84:f2:fe:d3:38:8c:eb:54:71:02:97:73:87:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Feb 3 08:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81f86ed143233d31ab66bb9a7a2ae13a8d38413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:78:fc:5c:c9:05:dc:e6:db:b8:2a:74:7d:
a8:e6:1e:52:8e:3a:34:ca:e5:eb:2a:a1:b7:bc:3f:
f2:bb:e4:e9:e7:b1:bf:6d:f0:08:ab:dd:b9:30:d5:
3c:55:0d:ff:66:60:97:81:c0:28:0c:34:b7:d5:4b:
85:86:11:2d:15:14:e1:0f:35:98:75:d4:fc:d0:56:
aa:e4:ab:93:60:f2:0c:c0:d1:45:2a:7c:c9:d4:04:
f4:47:f9:a9:97:f3:b1:14:9f:46:2d:ce:28:d3:d6:
0f:86:18:2a:da:74:37:96:b2:a9:44:fd:f0:39:c1:
2d:a8:c0:dc:4c:59:07:a2:3c:40:4d:be:15:3e:03:
ea:2e:43:4d:66:dc:04:35:18:90:f5:d1:8e:40:1a:
a6:40:0c:ad:bd:3d:2e:b8:0c:ce:0f:1c:ae:f4:1b:
76:5e:a5:0f:ce:67:ff:ef:4d:c3:87:92:91:15:db:
72:20:db:36:4c:7b:15:e2:cd:81:82:bb:d9:9d:bf:
b9:b2:f7:5c:10:a9:0b:6f:ae:aa:8d:ba:b5:42:cc:
1c:be:63:f6:df:f6:97:ce:2a:5e:4c:15:67:bd:e1:
e0:74:4d:e7:b0:73:73:45:f8:61:dc:43:d6:3f:a7:
25:8e:f4:94:11:d4:53:0b:56:b0:18:14:37:e0:2d:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F8:6E:D1:43:23:3D:31:AB:66:BB:9A:7A:2A:E1:3A:8D:38:41:3C
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/gfhu0UMjPTGrZruaeirhOo04QTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.14.0/23
Signature Algorithm: sha256WithRSAEncryption
15:2b:bf:90:a0:76:cf:62:ff:16:67:8b:61:48:e2:ab:d3:7a:
7e:3d:21:e2:1b:eb:e8:28:38:26:ba:62:b1:13:31:18:ae:3f:
90:b3:7c:32:5c:a0:cc:f2:02:f6:99:7a:5d:c5:f0:1a:9a:f8:
c8:a6:d0:fd:38:9d:8e:08:34:cf:3b:e1:23:57:a3:63:8e:fc:
cf:af:ca:19:75:0c:ed:2e:ff:18:39:28:9d:4c:6e:c9:00:83:
fb:6a:9e:52:db:a8:dc:56:dc:54:a5:6e:89:01:f4:9c:dc:ae:
7d:73:9c:5b:86:8b:86:dc:79:92:4f:c2:2f:45:86:49:4e:f5:
ad:81:89:d4:0a:4a:87:a3:df:28:36:b7:47:e6:b6:1f:78:f9:
b7:f3:c0:01:5c:6c:82:37:66:ba:ed:83:32:f9:0b:63:f4:31:
53:01:61:32:da:d6:c6:d8:2f:8d:9a:e0:d4:aa:f5:a0:78:e5:
3e:eb:a3:87:f8:ad:1f:b4:7b:1c:64:a4:a2:d5:d5:b2:49:66:
25:76:cb:d9:a1:a0:a3:69:09:13:d1:7d:c9:e3:8e:ee:0a:c4:
e3:5c:ee:ac:4c:ab:89:4f:8b:72:6b:f3:a2:47:39:ed:18:26:
59:75:1d:cc:a2:69:67:76:2f:61:b5:59:8f:75:c1:47:0d:8a:
c1:46:73:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net