Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/u-28X2e_QK57_FwKns881CWMp-M.roa
File: u-28X2e_QK57_FwKns881CWMp-M.roa (raw, json)
Hash identifier: mnCpJ6c77tMsA8C2BwDpmN2eotoq+p9B3KyML3KcafM=
Subject key identifier: BB:ED:BC:5F:67:BF:40:AE:7B:FC:5C:0A:9E:CF:3C:D4:25:8C:A7:E3
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 01941F8CA751CE1CB913C53A0E964E32F379
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/u-28X2e_QK57_FwKns881CWMp-M.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20559
IP address blocks: 185.157.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a7:51:ce:1c:b9:13:c5:3a:0e:96:4e:32:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbedbc5f67bf40ae7bfc5c0a9ecf3cd4258ca7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:31:f7:d9:ee:d1:03:f3:f9:71:d8:b4:81:
75:44:21:2f:f5:8f:bd:a6:dc:89:b3:e3:24:7e:38:
9e:ed:0f:0b:06:3b:d0:28:20:e4:16:0a:42:5c:12:
fd:5f:f2:4e:99:af:19:36:11:f1:27:a8:fe:5b:6e:
4f:84:9b:05:9c:48:b2:00:46:03:3e:04:a5:21:22:
f9:b4:fc:85:10:14:87:06:3b:6e:ed:40:3e:6c:d3:
26:6a:d6:fa:86:e0:67:08:d0:7f:e5:6a:f4:35:64:
aa:c9:26:cb:e5:89:9b:bc:4b:db:b4:e5:25:be:c1:
28:23:8f:49:66:64:80:23:24:cd:bf:92:72:8a:d9:
bd:7f:d1:6c:72:d8:7f:4d:c4:b2:84:bb:fa:4b:4c:
95:1e:01:c1:49:25:c9:06:0a:e3:b6:58:aa:cf:8a:
fe:c8:b7:71:98:79:4a:35:a8:23:cf:65:25:a9:d3:
35:df:a9:42:76:10:0a:4d:79:6f:25:39:1a:55:5c:
c6:40:70:bb:5a:19:27:23:4e:da:df:c4:ed:a9:66:
e4:90:ae:0e:dd:f4:5b:0e:a4:c1:7e:f5:38:f8:50:
fc:85:fd:d9:09:1b:36:e5:25:35:4b:c5:e4:5f:ee:
dd:5d:e0:11:fd:76:54:65:67:d7:93:a4:c2:28:ae:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:ED:BC:5F:67:BF:40:AE:7B:FC:5C:0A:9E:CF:3C:D4:25:8C:A7:E3
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/u-28X2e_QK57_FwKns881CWMp-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.145.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1d:bd:6f:ae:f2:79:49:96:69:4b:79:9f:a2:01:3e:ef:d6:
c6:ea:64:c2:ce:66:fe:a3:30:08:47:8d:ce:ba:a5:c5:bd:8d:
22:f6:da:f4:73:24:04:34:44:a1:1f:e2:28:f1:c7:04:0d:8b:
b1:0f:13:f0:ac:23:56:25:f7:eb:1a:86:2e:7d:c1:ba:4d:d2:
dc:0d:6e:d1:dd:e1:68:fe:db:30:5e:8f:68:a7:16:d8:9f:05:
d5:53:53:61:e4:f2:af:7c:46:1d:67:d9:93:a6:fe:96:d4:95:
8a:90:c8:08:23:a0:f6:66:22:ca:18:07:61:b8:96:84:08:97:
c2:06:9f:97:e2:1b:b4:8a:ae:68:35:df:c9:43:1a:ff:d3:87:
a7:7c:ee:93:f1:5f:59:45:92:a0:79:77:85:e8:65:cf:7d:3b:
d8:9b:e6:1a:0d:68:3d:46:95:ae:bc:2c:d8:5c:ba:7d:f3:b2:
2b:a0:5e:d5:ac:a4:8a:ac:ad:da:e9:4a:a7:a8:0b:70:bc:d1:
1b:52:9b:a2:86:e1:fb:e9:36:9f:56:1f:55:9b:46:31:a3:c3:
9a:61:5f:59:ba:23:86:96:17:45:4a:62:ec:f3:d9:ed:35:d7:
b7:26:e2:2f:8b:42:dd:73:a9:f8:aa:6e:3e:dd:87:d6:6e:95:
01:7f:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net