Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/18mEs4Z6fHdJG430-23p2cFj4nQ.roa
File: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (raw, json)
Hash identifier: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=
Subject key identifier: D7:C9:84:B3:86:7A:7C:77:49:1B:8D:F4:FB:6D:E9:D9:C1:63:E2:74
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F8BA46D5FAC7F1D0ABFFA08371687
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/18mEs4Z6fHdJG430-23p2cFj4nQ.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43732
IP address blocks: 82.119.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8b:a4:6d:5f:ac:7f:1d:0a:bf:fa:08:37:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7c984b3867a7c77491b8df4fb6de9d9c163e274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:a5:57:b4:8f:ca:fc:a4:94:7c:c9:ba:c0:
c3:bf:e5:8a:1a:f5:e8:bc:65:19:45:83:27:42:d1:
78:9e:91:89:bc:be:5c:e3:31:cf:f3:5d:f5:41:a7:
12:92:c7:85:03:26:26:7c:5c:0a:81:b1:20:9d:89:
79:8b:4e:0b:13:52:3c:18:4e:bf:48:5c:33:c3:27:
4b:ab:20:f1:15:f7:62:d9:e7:2d:4c:ba:e9:91:b5:
bf:dd:20:69:d9:0d:17:c8:9b:08:6b:fa:54:73:25:
db:1d:f5:d7:15:71:30:bd:b5:f6:04:0c:d5:e1:1d:
ac:86:c9:10:33:0b:d8:4d:09:5c:59:00:b0:41:2b:
06:c5:53:70:47:22:1d:55:22:aa:b7:48:a4:37:4f:
73:31:75:24:39:e4:68:46:fe:5c:ce:c3:8a:53:8f:
c9:f8:f8:06:eb:7f:17:bc:a2:be:f0:91:a9:09:a4:
62:b0:7a:0b:4f:33:5d:c0:f9:90:15:36:ba:fa:c2:
ca:22:84:2e:d9:7f:64:19:dc:4e:2b:c7:7d:55:67:
68:98:4c:bd:fb:61:80:1c:0b:ee:1a:a4:68:e2:fb:
81:51:1b:ff:dd:e2:d4:6a:cc:80:2a:24:a3:27:a6:
f6:18:52:3a:c0:9f:59:69:a4:59:59:d4:36:c6:9b:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C9:84:B3:86:7A:7C:77:49:1B:8D:F4:FB:6D:E9:D9:C1:63:E2:74
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/18mEs4Z6fHdJG430-23p2cFj4nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.78.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6c:0b:58:54:0e:03:b1:20:0d:31:be:8d:50:72:f7:d2:62:
42:87:b0:12:fc:0c:2d:e6:26:27:67:d2:e8:16:e4:87:f7:cf:
05:6b:5f:40:00:3c:11:e1:35:fa:e1:fe:7b:18:2d:22:50:34:
99:35:55:0a:30:1e:45:35:13:af:6c:c3:0e:f4:ce:ac:bd:d2:
35:a5:5c:d8:52:02:ce:61:3b:23:2b:3f:74:6d:f8:4d:b9:0f:
a4:23:99:da:08:99:66:36:6c:40:3f:8b:47:8d:6b:31:1f:75:
78:e1:be:bf:ef:8a:07:ed:f0:d2:6a:39:5a:bc:24:5d:38:00:
8a:0a:6e:77:c7:80:ef:3a:69:47:46:e3:35:fe:e0:aa:33:77:
d1:4b:e3:7b:77:8a:a3:0f:6e:fc:31:1f:6f:bc:64:7d:e4:e9:
4c:cb:63:42:23:b8:9c:da:e7:b0:ef:27:b0:cc:76:87:ba:90:
3d:85:9d:81:68:d2:85:fb:23:d1:3c:5d:dd:4a:c3:5f:e2:42:
a9:7e:1b:17:ea:32:db:e3:f7:b1:a3:9b:fb:cb:81:d4:63:b4:
ef:d2:24:f5:38:4f:a7:00:81:b4:2c:39:e9:c5:1d:ec:82:d1:
73:e7:38:a2:5c:be:fd:8f:f5:98:9a:40:cb:d4:07:23:18:bc:
6d:ba:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net