Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/2gXpcecRRCZij4ZXTFv5wgCwpoc.roa
File: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (raw, json)
Hash identifier: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=
Subject key identifier: DA:05:E9:71:E7:11:44:26:62:8F:86:57:4C:5B:F9:C2:00:B0:A6:87
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 01941FFAAD0B76B397D94CF1C855A894FF81
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/2gXpcecRRCZij4ZXTFv5wgCwpoc.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49321
IP address blocks: 185.245.58.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ad:0b:76:b3:97:d9:4c:f1:c8:55:a8:94:ff:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da05e971e7114426628f86574c5bf9c200b0a687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:cf:41:84:19:6c:c8:5f:8d:ee:7e:30:0a:
a8:b0:e1:61:b4:77:6c:76:b1:b1:f9:95:ef:23:ef:
22:55:bb:92:3d:62:88:6b:71:80:86:fa:3d:1e:23:
69:c6:e2:e3:7a:ce:8c:26:9d:bf:8b:43:5e:1b:69:
1e:ae:fa:2a:6d:a1:bc:14:df:6a:82:05:d7:1f:84:
3d:c1:a3:ad:52:43:01:65:27:8f:2c:1f:b4:2c:1c:
cf:1d:54:15:90:e1:17:79:73:d7:f3:8c:28:34:05:
cb:d8:77:14:22:a7:cc:51:9b:ed:3d:c3:94:bc:8e:
ee:1d:f3:13:3c:e5:b7:7a:35:92:70:e0:5e:7c:38:
c7:21:03:1a:cf:9e:42:e0:dd:37:7e:9f:b7:c4:21:
11:15:d4:a3:c0:f4:19:5e:5e:c7:a3:b9:4e:6e:f5:
96:ad:34:71:c1:04:4c:9a:bc:d6:1a:65:1e:ab:76:
b7:3b:18:de:3f:77:3e:35:4b:44:d7:fd:f4:2c:83:
7e:68:1b:b7:3a:47:32:43:b2:43:d4:3e:22:a2:17:
30:d8:99:d3:4e:3f:4f:f4:f6:63:ca:af:e2:cf:5d:
b8:6b:1e:92:f3:f3:d6:e6:76:2a:f7:7a:5a:97:4d:
4f:9b:de:1e:86:cf:13:98:d8:ac:37:5f:72:50:04:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:E9:71:E7:11:44:26:62:8F:86:57:4C:5B:F9:C2:00:B0:A6:87
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/2gXpcecRRCZij4ZXTFv5wgCwpoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.58.0/23
Signature Algorithm: sha256WithRSAEncryption
26:01:79:fa:2f:e5:40:e5:97:63:73:d7:ee:ea:be:2e:15:3f:
05:b3:4a:07:01:42:de:6c:c3:a6:16:c4:f0:2c:64:85:cc:08:
49:0d:d3:5a:5e:dd:d1:c4:cf:44:30:70:ba:41:2e:41:a6:43:
e6:95:61:21:59:de:35:49:f4:f7:70:24:3f:1b:79:13:00:2a:
47:04:e4:84:55:7d:29:d5:44:d6:87:7f:d0:ba:ee:f1:e5:94:
ee:cc:32:6d:37:be:a6:a4:02:52:d8:52:4f:d1:39:3d:ff:77:
b0:d2:ad:19:a7:04:18:00:62:b7:95:3d:87:79:b3:b0:6f:71:
c6:a0:45:44:24:ab:f0:57:1b:5b:fa:84:81:e6:54:a5:ec:36:
fc:b1:83:e9:0c:18:2a:5a:e1:72:86:ae:bb:9d:52:93:cb:04:
0b:c6:fa:6e:00:7d:ad:70:db:0e:69:d5:0a:f6:e5:a4:e6:aa:
d8:44:3b:52:ac:89:59:41:e0:46:a1:6f:37:76:81:24:7a:a2:
4e:7e:25:84:5d:cb:1f:99:8a:c9:b9:a6:51:0f:f6:ae:a2:72:
ff:fc:b6:2b:4b:45:58:8f:fc:e9:04:2b:43:c8:18:49:41:e3:
44:d2:0c:ba:82:85:b2:91:34:2c:10:98:26:32:a1:db:be:48:
0a:bc:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net