Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/8Yr3TcpHaEQid4NaHBnD3vpLE84.roa
File: 8Yr3TcpHaEQid4NaHBnD3vpLE84.roa (raw, json)
Hash identifier: nwAi63b6Bc3AJUqoLYElL2URnBMmDXAT9b7jn7wDHew=
Subject key identifier: F1:8A:F7:4D:CA:47:68:44:22:77:83:5A:1C:19:C3:DE:FA:4B:13:CE
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 019424B3829C414664CFC5A461FAF566F34E
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/8Yr3TcpHaEQid4NaHBnD3vpLE84.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204031
IP address blocks: 146.255.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:82:9c:41:46:64:cf:c5:a4:61:fa:f5:66:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f18af74dca4768442277835a1c19c3defa4b13ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:44:32:5d:40:41:35:d7:8a:d5:74:ea:71:
50:c0:96:39:d5:03:88:82:7a:99:25:ea:f0:c8:50:
09:12:e6:b2:6e:37:81:1c:0f:90:cb:95:93:46:0c:
76:36:28:2c:b7:a2:8f:d0:79:7e:13:79:05:0d:ae:
9b:09:b5:41:df:e3:ed:42:16:f6:35:52:82:8d:89:
98:54:77:94:f3:d4:a7:a1:4b:32:c7:80:3e:68:e3:
57:8f:7b:50:19:9c:75:75:0d:01:df:94:af:c4:4f:
1e:9d:03:a7:07:87:21:37:f3:a1:d7:78:53:72:80:
75:86:57:2c:fe:73:d0:fa:5c:9e:2e:8c:df:10:db:
c6:53:a0:85:58:15:b0:7d:ed:b0:a6:b1:88:ab:86:
60:7a:f3:84:1b:d1:0b:db:39:8d:ec:b8:94:41:6a:
5a:0a:59:9d:6d:d5:35:cf:f0:47:f2:e1:df:60:36:
5e:3a:d2:05:29:dc:57:7d:50:b1:95:f0:41:a5:95:
d7:8b:19:8e:39:df:d1:9b:04:bb:f1:bb:41:3e:3f:
a6:d8:d9:e0:19:d8:c3:7a:82:31:0d:9c:45:d5:1f:
a9:8e:04:c2:2a:7b:52:4a:f0:95:ec:12:a5:81:de:
05:17:a0:92:c6:da:92:b4:64:6b:ef:af:3b:9f:3b:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:F7:4D:CA:47:68:44:22:77:83:5A:1C:19:C3:DE:FA:4B:13:CE
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/8Yr3TcpHaEQid4NaHBnD3vpLE84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
86:93:4d:63:ae:1f:79:4d:f9:8e:a2:3c:6d:53:81:14:13:05:
ec:08:47:62:29:50:d6:03:08:fa:1c:64:ad:ab:0f:77:03:22:
d0:fc:9f:ef:87:8d:75:d9:3e:61:48:c1:b7:ac:0f:53:7c:72:
29:28:a3:ec:a3:d6:eb:dc:33:23:ec:8c:21:d9:fb:af:a4:b6:
c5:5b:4b:95:32:67:2d:e7:f0:c9:87:48:c9:aa:ab:2f:81:95:
7d:e4:4b:78:77:b6:ce:36:ac:45:f8:e0:c1:19:e5:f1:39:e1:
dd:ee:02:d3:76:cf:1f:9f:11:d4:58:ae:00:8f:17:4f:a1:c4:
36:8d:78:a2:5b:1a:c1:28:f4:63:d3:06:2e:cb:c6:39:52:9c:
ed:c7:1a:de:fa:6d:17:78:bd:78:90:9b:e9:41:63:91:e8:8b:
8b:9c:e7:8d:5a:fc:ae:c9:a0:90:2e:ff:6f:b8:f4:d6:5e:1e:
9e:7f:b7:53:ee:84:3d:68:10:27:40:6e:ae:95:57:0f:f4:6c:
01:78:f6:e1:ac:e6:a6:e4:4f:b6:f7:dd:fa:85:33:33:96:40:
50:c2:93:c5:2b:82:f5:33:5a:f1:63:7d:de:b1:3e:2e:18:77:
3a:35:eb:2f:c0:6f:b8:ae:3a:0f:f6:f5:4a:35:98:8d:4a:20:
5e:39:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net