Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa
File: n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa (raw, json)
Hash identifier: 9t7F6PBfxlnF6OlI2OhDxP2xK45ENz8bFdMmt86tiuo=
Subject key identifier: 9F:75:38:4F:46:FF:79:9B:C2:F3:EE:B2:70:BD:1D:E7:F7:83:36:E3
Certificate issuer: /CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Certificate serial: 0194266B4E18EB723D5961914A29792EB56C
Authority key identifier: A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa
Signing time: Thu 02 Jan 2025 09:49:14 +0000
ROA not before: Thu 02 Jan 2025 09:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29070
IP address blocks: 185.103.20.0/24 maxlen: 24
185.103.21.0/24 maxlen: 24
185.103.22.0/24 maxlen: 24
185.103.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4e:18:eb:72:3d:59:61:91:4a:29:79:2e:b5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6e8a25a93792a58b3a2d80fb1aad959e65aeddf
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f75384f46ff799bc2f3eeb270bd1de7f78336e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:3c:be:93:3a:b2:28:71:b9:26:ca:4f:32:
3e:09:bb:ce:41:64:12:7c:7a:ba:74:68:b1:94:09:
b0:68:69:32:84:39:52:f3:f9:de:d6:f9:db:0b:f8:
2f:8d:bc:3a:2c:72:2c:64:49:03:57:ac:2e:28:6c:
83:95:5d:c1:f2:e0:a7:9c:d4:ae:23:31:be:0b:0e:
41:01:eb:34:b1:5d:01:7b:4e:4b:9d:16:9b:fb:cf:
60:6a:14:3a:82:ff:67:2f:c1:7c:1c:0c:ee:2e:69:
53:60:20:46:16:8e:ce:b1:ac:f4:51:17:c0:9a:98:
c3:50:4c:15:2d:f4:4a:45:13:b7:eb:06:76:62:09:
18:78:6e:0f:78:9e:1d:2b:cd:54:b4:9b:0c:98:ef:
37:32:2f:24:98:33:8f:fc:be:20:a2:b1:e1:2c:de:
fa:4b:6b:61:ba:a4:01:5e:ca:a8:ed:99:6c:e6:6a:
42:7a:46:70:74:7b:82:b6:dc:36:4e:76:98:00:06:
10:03:b6:9f:0d:0b:a5:81:3d:4e:25:ff:49:4d:7a:
bd:95:40:c7:53:de:53:c4:86:2f:4b:ee:1f:a7:fa:
1f:29:7f:92:ad:02:a4:f9:7f:c4:5a:d7:79:07:e7:
ab:5b:28:5d:e0:4c:fb:3d:9e:9d:b4:09:0e:fb:b5:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:38:4F:46:FF:79:9B:C2:F3:EE:B2:70:BD:1D:E7:F7:83:36:E3
X509v3 Authority Key Identifier:
keyid:A6:E8:A2:5A:93:79:2A:58:B3:A2:D8:0F:B1:AA:D9:59:E6:5A:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/puiiWpN5KlizotgPsarZWeZa7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/n3U4T0b_eZvC8-6ycL0d5_eDNuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c6e75-a800-4d4f-8ac7-4eaeb2a23b27/1/puiiWpN5KlizotgPsarZWeZa7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.20.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0d:3a:93:d9:20:bd:90:92:eb:95:77:df:61:df:2d:68:79:
7b:72:4b:29:31:e8:32:13:94:5c:c6:c4:0d:63:3b:88:d8:7c:
88:89:57:25:09:aa:1a:07:76:76:d6:84:49:9f:41:76:05:eb:
df:d8:c4:43:9c:ab:73:c7:aa:a3:bc:ed:44:ad:fb:dc:be:34:
f8:ca:86:c1:0e:1c:6d:89:f9:a3:e3:72:a3:04:e4:5f:f1:30:
67:d1:3a:98:ca:c1:c4:fb:7d:2a:b0:8a:86:85:08:33:cb:42:
c9:61:82:94:0a:20:1a:6c:8f:22:f7:48:b5:fd:5b:cd:5e:6a:
04:2d:e5:85:c9:de:fa:7d:24:c5:d0:c0:d8:95:88:ff:b7:14:
0c:52:6e:bb:30:9a:6c:28:1d:05:c6:4c:c5:44:34:1c:4c:16:
e2:22:de:f0:38:f0:cd:fd:ce:f2:a7:db:61:51:af:4f:6a:ac:
7a:fa:14:fc:2d:e2:ca:45:6a:8a:55:ec:f1:dd:e4:ef:0c:ed:
ac:28:ba:a5:44:95:df:dd:df:27:3e:16:15:c5:02:ad:bd:02:
ae:ae:05:35:5b:33:1a:e0:e3:37:ae:8d:8b:4f:54:78:22:2e:
2a:85:6e:47:57:29:cd:b2:be:92:f7:b2:35:5a:a8:72:4d:4e:
78:e4:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net