Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/XlUV47Af6RgAqHn9dKADpSmWXow.roa
File: XlUV47Af6RgAqHn9dKADpSmWXow.roa (raw, json)
Hash identifier: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=
Subject key identifier: 5E:55:15:E3:B0:1F:E9:18:00:A8:79:FD:74:A0:03:A5:29:96:5E:8C
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 019422FB164478A46841A8AE55E094E40E36
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/XlUV47Af6RgAqHn9dKADpSmWXow.roa
Signing time: Wed 01 Jan 2025 17:47:48 +0000
ROA not before: Wed 01 Jan 2025 17:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61292
IP address blocks: 185.12.56.0/24 maxlen: 24
185.152.34.0/24 maxlen: 24
2a02:ed03::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:16:44:78:a4:68:41:a8:ae:55:e0:94:e4:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Jan 1 17:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e5515e3b01fe91800a879fd74a003a529965e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:37:b5:62:be:4a:9e:98:29:ff:a6:f9:f8:
2e:13:88:d2:cd:04:59:12:f3:12:d9:d9:36:36:5e:
2b:f0:2a:cf:9b:24:bc:d7:35:ff:37:7a:ed:9a:4f:
89:3b:33:a8:ab:7b:df:40:36:37:67:36:f4:9c:d5:
b4:f8:17:46:bc:e2:75:c8:94:e2:ee:3a:1f:bd:5d:
b8:56:94:a3:2c:bf:d1:17:ee:08:23:63:ec:c1:0b:
d2:23:f4:27:29:4f:e2:fc:f3:d1:d9:51:eb:ed:15:
d0:8d:3b:8e:5b:e9:b8:ca:8b:77:95:4b:eb:74:19:
4a:b0:84:76:8f:75:05:84:73:e8:15:da:f8:8f:86:
e4:30:47:9b:52:54:57:4d:77:2e:62:78:9f:7e:f9:
60:4c:42:44:e6:f1:6f:dd:3e:cc:3e:46:e3:fc:62:
87:5d:55:7f:72:28:24:87:4a:f5:29:f9:fe:59:91:
b1:67:63:c9:33:e7:ed:b7:be:f6:58:89:22:ae:55:
0a:02:bd:8f:9b:d9:47:5c:bc:16:03:fd:80:ab:eb:
cd:ea:53:93:37:03:00:91:85:ad:2d:17:1f:24:91:
93:57:bf:33:77:46:f1:d6:2b:de:fa:80:76:bc:0b:
5d:32:d6:1a:88:ae:7c:75:02:7b:59:18:eb:35:34:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:55:15:E3:B0:1F:E9:18:00:A8:79:FD:74:A0:03:A5:29:96:5E:8C
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/XlUV47Af6RgAqHn9dKADpSmWXow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.56.0/24
185.152.34.0/24
IPv6:
2a02:ed03::/32
Signature Algorithm: sha256WithRSAEncryption
53:55:83:0a:84:29:6f:3b:b4:b8:2f:82:4d:ab:de:e8:6d:f6:
88:1d:46:58:62:c0:0d:9c:16:f7:a0:da:1c:73:42:00:fd:fc:
4d:c1:a1:67:48:53:1d:ce:8e:bd:c2:b7:bd:66:b9:9e:b0:bc:
aa:bd:a8:3b:09:32:88:d8:bf:32:7d:06:fe:9d:5e:20:45:07:
d0:46:54:bf:9a:50:8e:15:ec:c7:79:9e:9b:36:ce:3c:84:2b:
cb:1c:71:6f:bd:be:00:71:24:94:fe:c9:47:9f:0b:24:cd:31:
2b:08:73:03:d5:aa:b5:11:26:25:57:bd:79:02:fe:96:d4:18:
cf:48:a2:ce:e9:b9:1a:ab:5e:66:29:7a:5b:e5:25:3c:af:c2:
ac:f0:89:8c:ec:b9:01:f7:2b:39:bc:0c:c4:b6:0b:35:c0:27:
b5:5f:9c:8f:4a:07:3f:ab:5e:9e:14:5c:d4:c3:5c:d5:fb:31:
6b:c3:ba:2f:e4:86:00:3c:88:b9:c9:eb:c2:40:e4:16:44:af:
44:48:3b:a2:60:8e:13:82:32:79:41:27:c4:8f:58:4e:3d:88:
75:ef:f1:62:e2:cb:8a:b5:b9:c8:ae:6d:12:bd:f5:97:26:0a:
8f:9a:c0:66:26:51:c8:1a:30:02:d4:39:be:7d:a6:6d:b4:00:
df:d9:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net