Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa
File: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (raw, json)
Hash identifier: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=
Subject key identifier: B7:85:A2:6F:1A:B8:38:30:9B:EC:F6:53:C4:40:EA:77:8C:C8:59:D1
Certificate issuer: /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial: 0194221F562C93CEFA3D0FE8B5EDE4ECE35B
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa
Signing time: Wed 01 Jan 2025 13:47:46 +0000
ROA not before: Wed 01 Jan 2025 13:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33927
IP address blocks: 185.93.186.0/24 maxlen: 24
194.6.231.0/24 maxlen: 24
194.6.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:56:2c:93:ce:fa:3d:0f:e8:b5:ed:e4:ec:e3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Validity
Not Before: Jan 1 13:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b785a26f1ab838309becf653c440ea778cc859d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:3b:9d:e1:22:7d:94:9c:bf:be:ce:86:b9:
07:cd:f4:b6:98:15:30:96:86:26:80:90:94:73:55:
39:46:ea:cc:c6:21:39:85:b8:bd:0e:38:c8:c2:4d:
7b:ad:3e:9a:ab:35:0d:c1:3f:e6:84:48:62:7d:ed:
4d:be:6a:e5:64:48:73:20:d7:33:38:e7:3c:b0:72:
9c:96:9e:55:80:66:d4:13:0e:73:50:12:a7:e9:b7:
26:95:f4:01:2f:a1:ce:3b:a2:d5:61:04:2d:5c:f7:
38:4b:49:98:05:29:82:ff:13:c3:d9:d0:2d:2b:89:
7d:0c:c6:a1:fa:64:e2:f3:27:9f:a7:a5:a3:14:63:
4c:12:fa:e1:49:52:81:f2:61:59:f6:99:ba:ca:34:
e4:26:c3:9f:56:2a:23:fb:6a:1e:62:a4:0a:ba:b8:
81:8d:0c:f4:aa:4d:cb:80:45:f6:14:84:7a:eb:5f:
73:0c:c9:72:3d:c9:f9:14:5f:01:fb:0e:4a:2f:40:
16:ec:ee:cb:05:17:8a:38:19:8f:1b:e6:6d:f6:08:
43:d9:ed:d2:52:af:90:e2:2d:fe:13:dc:6d:15:40:
2e:bd:6a:a8:f8:17:3d:d4:e9:de:91:89:e8:5c:c0:
12:ab:ee:47:e1:24:79:9e:59:a6:7d:2e:d5:d2:c6:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:A2:6F:1A:B8:38:30:9B:EC:F6:53:C4:40:EA:77:8C:C8:59:D1
X509v3 Authority Key Identifier:
keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.186.0/24
194.6.231.0-194.6.233.255
Signature Algorithm: sha256WithRSAEncryption
bf:02:e0:94:46:41:f5:ca:be:98:e8:d9:c1:f0:ae:3f:ed:1a:
82:0a:29:57:26:69:53:5c:88:d9:bb:d8:aa:24:31:6a:cd:c2:
6a:15:e9:ea:5a:db:6d:b5:14:67:8a:3c:d5:0c:58:2b:da:df:
d9:f1:f6:3c:5f:ec:0c:6b:c5:2c:1f:f3:31:52:c8:f7:81:1b:
36:c7:8f:ad:d1:56:6e:65:82:c9:4d:bf:44:95:e7:44:b1:26:
a4:4a:d8:d2:35:ce:5c:cb:fa:3e:43:f2:f0:bb:a8:c0:61:02:
fc:a0:f7:37:06:cf:dd:99:d3:06:47:11:be:10:6a:13:24:93:
59:fb:39:ce:b1:2e:79:39:2b:75:22:2d:d1:c5:3c:ec:09:6f:
59:ad:00:69:d5:37:10:d9:c2:ca:a8:44:f9:85:c0:70:ce:ed:
c0:05:12:26:8a:a3:ef:8a:55:20:ce:a2:27:53:42:93:cd:73:
d6:bc:ec:de:e3:47:21:dc:65:14:5b:7d:08:3c:bc:74:0c:69:
a4:ae:54:16:f6:6b:4d:51:bf:c1:14:34:d8:39:a5:ad:c2:02:
44:fc:1b:f7:b4:1c:b5:2f:84:08:d5:ba:f1:30:d6:60:20:d5:
d7:91:90:8f:cc:2b:63:cf:d4:3f:bf:b9:07:37:9d:6b:84:a7:
40:6f:0e:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net