Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/9V0vcgO-bdJZakQILqcfcNUVDzs.roa
File: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (raw, json)
Hash identifier: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=
Subject key identifier: F5:5D:2F:72:03:BE:6D:D2:59:6A:44:08:2E:A7:1F:70:D5:15:0F:3B
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449EDE9C7BDA9D2C348FDEE68602DE
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/9V0vcgO-bdJZakQILqcfcNUVDzs.roa
Signing time: Wed 01 Jan 2025 23:47:44 +0000
ROA not before: Wed 01 Jan 2025 23:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212183
IP address blocks: 185.79.2.0/23 maxlen: 23
185.79.2.0/24 maxlen: 24
185.79.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9e:de:9c:7b:da:9d:2c:34:8f:de:e6:86:02:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55d2f7203be6dd2596a44082ea71f70d5150f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:22:91:9b:60:8b:f4:9d:d2:5a:b6:97:a3:
85:23:47:3a:d0:8a:f5:69:ea:1c:24:04:5b:50:3e:
32:7c:77:14:03:55:d1:15:d1:c5:5f:f1:48:83:3e:
dd:49:0f:bf:57:a8:11:0e:1d:3c:9d:d2:f8:ad:a7:
5c:c5:ea:6c:f7:db:be:7c:7d:36:ec:d7:31:b3:71:
6a:0b:a5:fc:1d:37:15:14:aa:ad:da:60:f7:03:a8:
be:5a:cf:cb:e8:a6:31:cc:f6:77:08:3d:d2:3e:0b:
2e:ef:f3:bf:d0:f3:ca:e7:af:e5:08:bb:d3:c7:3e:
0f:8b:25:92:b5:d4:a6:62:a1:93:27:0c:e3:79:76:
b2:93:1b:08:44:75:ef:52:d0:b9:60:ec:1a:46:52:
e1:e7:b3:67:f6:64:e5:cc:6e:b3:68:4a:1c:1c:b8:
df:b1:c2:0c:d5:06:e3:6a:df:67:26:4e:ab:d7:7b:
1d:4f:8e:dd:33:db:f4:4c:ce:5a:6c:e9:bf:ee:20:
54:31:5e:49:ef:0d:30:75:61:2d:5f:42:05:91:0f:
14:8b:e8:c3:6e:1f:4f:10:16:6f:07:bd:b4:c0:fc:
fe:52:e3:5d:d1:95:90:43:aa:87:50:41:69:45:08:
2c:53:b4:be:2f:05:8f:60:14:ef:e9:52:76:7c:49:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:2F:72:03:BE:6D:D2:59:6A:44:08:2E:A7:1F:70:D5:15:0F:3B
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/9V0vcgO-bdJZakQILqcfcNUVDzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.2.0/23
Signature Algorithm: sha256WithRSAEncryption
46:4f:57:b6:94:9e:2d:dd:e1:89:22:8c:71:4f:c2:e3:2a:12:
b9:1b:d8:ed:b2:f5:ac:56:80:2b:cc:77:c6:e1:99:e1:9c:02:
58:ab:9c:22:dd:19:2d:ed:fa:1c:2e:b3:eb:dd:ce:8f:84:a2:
57:57:f9:98:99:27:9c:df:89:d5:cc:84:d9:03:ae:13:f6:3a:
60:2a:e4:4b:40:4f:8d:c8:3a:92:d1:85:62:57:45:0a:ea:5a:
9d:d5:ac:a3:83:6d:63:73:8d:80:1c:2f:23:8d:78:2d:62:64:
6d:a7:96:30:4e:c0:29:68:25:8c:ba:a1:f4:ff:21:e1:4a:25:
1a:30:ac:3c:e8:56:18:9c:56:ec:a4:69:2b:2c:7e:5f:e2:9c:
8b:b8:b6:f1:da:4c:f7:3b:11:68:a7:3c:c0:db:12:58:55:1e:
a7:87:08:cd:ae:58:5e:7a:8c:df:f0:f7:d0:34:6b:4e:b9:e2:
2f:57:e3:cc:b5:7e:cd:94:32:c2:0f:f8:98:dc:aa:17:03:1a:
33:f2:01:70:1f:21:ea:7a:16:8d:f9:bc:55:e9:55:6e:a1:a0:
3b:04:55:45:be:c3:d5:aa:4b:89:0c:8b:6f:a0:c7:3b:4e:63:
b5:60:4c:73:c4:10:be:cc:9d:23:39:94:08:c9:26:2a:d4:ed:
7b:14:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net