Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4JaepfCsA_lI-MmKxIYkIhWjTNo.roa
File: 4JaepfCsA_lI-MmKxIYkIhWjTNo.roa (raw, json)
Hash identifier: n4hI5BYrL4MC9QXfsIecgobxU5/Ctvsdshk1tOj/4EM=
Subject key identifier: E0:96:9E:A5:F0:AC:03:F9:48:F8:C9:8A:C4:86:24:22:15:A3:4C:DA
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CBE72461593140BAF8ED41EB6C94A
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4JaepfCsA_lI-MmKxIYkIhWjTNo.roa
Signing time: Wed 01 Jan 2025 01:48:25 +0000
ROA not before: Wed 01 Jan 2025 01:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205499
IP address blocks: 185.188.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:be:72:46:15:93:14:0b:af:8e:d4:1e:b6:c9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0969ea5f0ac03f948f8c98ac486242215a34cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:bc:5c:cc:03:1c:84:87:b3:82:4a:be:8c:
2e:3d:d2:01:6f:09:86:8f:c3:4e:ff:92:2d:48:f4:
20:02:f8:ae:db:33:1a:47:e9:89:73:74:25:17:a9:
03:9a:ce:36:dc:f5:3e:d7:36:6c:2b:aa:6b:35:6d:
8b:62:8f:5d:9a:86:76:f0:2f:99:35:4f:b2:1f:ac:
5d:4e:77:c8:61:8f:22:f1:c8:0c:1c:1c:5e:8a:bc:
c5:e3:0d:57:1a:c7:fd:7f:1f:d5:bf:2c:42:13:fe:
b3:93:05:4a:2c:0b:d3:52:88:5c:e7:9c:78:0d:3a:
2d:11:7f:e1:bf:0e:e3:8c:04:fa:ba:50:53:5c:5c:
92:78:94:d9:ce:27:16:eb:43:f6:36:22:0d:4c:64:
60:69:44:7d:a8:56:d2:d1:78:72:12:c9:14:a6:5b:
df:f3:86:dc:ef:d4:16:1b:b0:fb:da:70:f6:52:dc:
13:9f:1c:bc:d7:d8:09:9e:dd:95:58:2b:d8:07:73:
83:2c:2d:25:92:8b:e4:0d:43:e0:be:04:ea:de:ce:
db:8f:21:c9:06:47:bd:d3:ac:fa:f8:64:fa:b6:ea:
03:10:4f:46:24:9f:2e:1d:38:75:46:72:f4:3c:af:
4b:a2:57:a3:e0:71:61:4c:ad:d3:d5:94:03:11:8d:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:9E:A5:F0:AC:03:F9:48:F8:C9:8A:C4:86:24:22:15:A3:4C:DA
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/4JaepfCsA_lI-MmKxIYkIhWjTNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bd:01:95:1f:60:a5:13:9b:f9:7e:ab:24:fc:f4:a7:41:a8:
2f:20:db:b5:22:90:60:f6:19:07:17:50:2b:e3:55:35:77:31:
3e:d5:3c:a1:c7:4a:0f:f7:64:4b:f8:ac:4e:e3:25:a5:e9:8f:
e2:ab:f9:fd:9a:c0:c3:e7:d7:cf:13:90:cc:92:01:ca:0d:14:
2a:f2:b2:0f:7c:77:36:e3:06:de:03:ea:50:00:e8:80:7a:93:
cd:fa:ea:28:b0:5f:bf:34:69:e7:fd:a4:3d:0e:01:2f:fa:a2:
20:a0:0b:b0:4b:ed:72:65:34:df:a1:73:aa:69:2c:f9:2a:fb:
b5:58:14:18:35:de:a1:06:a4:bc:c7:10:82:83:d4:40:98:a6:
f3:54:da:e0:dd:3e:2a:fe:b5:53:65:f4:a4:35:4c:71:7d:55:
1f:aa:f2:c9:41:2c:5c:f6:b0:2a:01:bf:8e:9e:36:f4:3f:27:
db:4d:a6:6f:d0:e5:ed:c8:83:ba:89:48:06:ab:c2:68:a2:62:
34:67:4f:fe:d3:01:44:3d:fa:48:95:ab:be:8d:20:7f:1b:16:
31:67:bb:4c:dd:91:07:1d:69:43:6a:6c:ec:00:c6:10:8d:4a:
a0:65:9e:3c:98:02:fc:9c:81:38:25:b2:7f:4c:f7:c2:4b:ab:
15:e6:4c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net