Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/IsL0Zx1rZ-iy8-jtpPfkClhI8pc.roa
File: IsL0Zx1rZ-iy8-jtpPfkClhI8pc.roa (raw, json)
Hash identifier: sqoYzZMt8wf4mUS5nMLQEfv8sbqAQGSNWeCswIb6zp0=
Subject key identifier: 22:C2:F4:67:1D:6B:67:E8:B2:F3:E8:ED:A4:F7:E4:0A:58:48:F2:97
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 01942521994919A26C1FFE6E857FDAFE8FA4
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/IsL0Zx1rZ-iy8-jtpPfkClhI8pc.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62417
IP address blocks: 185.32.78.0/24 maxlen: 24
185.32.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:99:49:19:a2:6c:1f:fe:6e:85:7f:da:fe:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22c2f4671d6b67e8b2f3e8eda4f7e40a5848f297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:63:b6:f8:ec:02:6e:80:2d:83:27:aa:e0:
91:b6:2c:80:ac:7e:f3:6c:ce:e0:c5:15:e8:86:75:
b3:6c:bf:01:68:18:5f:c9:a0:58:af:2e:20:06:76:
e1:5f:79:47:72:45:ec:1b:c1:7e:5b:33:b7:d4:bc:
10:69:e6:10:7b:b7:a5:06:58:55:7e:5d:77:16:8e:
aa:cf:e3:84:41:be:08:2b:12:5f:8e:22:ea:6f:02:
61:5b:ae:79:f1:8e:1b:9d:f8:e4:32:3e:6a:ac:2d:
33:3c:23:1c:31:9c:e5:44:84:dc:78:26:8c:38:e5:
8f:c8:a1:ad:44:09:d7:f9:67:40:a8:f3:2f:18:2a:
8d:9f:dd:06:72:51:94:79:a2:1a:3b:14:30:a8:c6:
fa:ac:d5:11:c2:9e:6e:1c:94:4c:83:cc:45:87:31:
f5:5e:b5:65:1c:de:99:72:aa:c5:38:19:94:53:95:
81:f3:d8:23:c8:e3:9f:e9:2c:1f:c9:7c:0d:0d:3c:
39:9c:96:76:6d:66:c5:74:00:0c:c7:36:57:03:17:
65:92:a6:b6:19:92:e9:c7:ea:91:f0:9e:3d:ac:e5:
6f:e1:63:8e:4d:b0:7b:88:5c:07:d6:8f:6c:eb:7d:
f0:4b:4f:9a:a7:35:28:83:2d:1e:70:65:dc:93:d4:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C2:F4:67:1D:6B:67:E8:B2:F3:E8:ED:A4:F7:E4:0A:58:48:F2:97
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/IsL0Zx1rZ-iy8-jtpPfkClhI8pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.78.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:dd:f6:2e:42:07:18:dc:11:9a:bb:f4:2a:f8:08:06:69:16:
63:b6:78:90:4d:6d:c0:33:5f:ae:4f:6c:c2:4f:6d:c6:e6:65:
1e:8d:4c:ce:f0:ba:f2:1c:9d:bf:cc:3b:47:ca:4d:24:0a:34:
c9:f2:1f:77:ef:30:f5:bf:67:e7:e3:09:1d:2e:8f:ef:9e:1e:
f1:1b:d8:8f:3f:c1:0e:5f:08:69:57:8e:76:3a:c3:f0:69:be:
4a:9e:d3:21:50:1a:fd:38:bf:28:e9:b6:6e:dc:63:ac:65:c5:
05:0e:b6:22:8c:15:dc:e0:70:6a:14:10:0f:e9:94:9e:77:e6:
e6:d9:ca:e5:20:4e:4d:50:59:f7:6d:7f:ec:19:a5:88:89:07:
63:0f:20:94:8f:da:20:ee:e2:83:d6:e8:4a:cd:a6:fc:1d:5e:
60:9e:c7:16:ba:a2:ed:7d:dd:90:9b:b8:d5:d4:24:91:54:89:
ee:06:b0:c1:a0:84:fc:4b:df:67:52:b1:b7:43:d8:1b:42:9f:
91:45:c5:5c:1c:48:61:b7:85:99:47:7d:91:e3:57:c9:5e:50:
8c:73:fa:6f:65:8f:01:78:39:81:04:1a:c5:3e:86:08:20:40:
ec:20:53:39:87:35:9c:72:18:9e:9d:34:73:77:b8:a5:67:00:
8e:d3:79:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:57 2025 by rpki-client on console.sobornost.net