Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/oQshIdOiDv_qCu3Qu0L_1blek4U.roa
File: oQshIdOiDv_qCu3Qu0L_1blek4U.roa (raw, json)
Hash identifier: rA5NHYZiid8aQEyiH3PeuTM4SKfbRAu+sIpmolcdW+w=
Subject key identifier: A1:0B:21:21:D3:A2:0E:FF:EA:0A:ED:D0:BB:42:FF:D5:B9:5E:93:85
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019423D789AE7F3CE7C691FAF866975E4BF5
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/oQshIdOiDv_qCu3Qu0L_1blek4U.roa
Signing time: Wed 01 Jan 2025 21:48:35 +0000
ROA not before: Wed 01 Jan 2025 21:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211336
IP address blocks: 185.184.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:89:ae:7f:3c:e7:c6:91:fa:f8:66:97:5e:4b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Jan 1 21:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a10b2121d3a20effea0aedd0bb42ffd5b95e9385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:21:44:3e:57:07:3e:71:6c:c0:fc:03:42:
a5:01:be:13:4c:13:18:e2:73:1f:ba:0c:5c:be:d0:
c7:7a:ce:20:c9:d4:3e:e1:c0:58:49:9d:6d:b8:29:
c0:96:08:ca:b2:dc:75:9a:a6:9c:0f:4f:00:26:08:
06:33:7c:8a:fe:f0:e0:5f:e8:0b:d5:a4:78:5f:99:
61:69:a5:e2:bf:5e:2a:65:36:44:6f:10:09:23:5b:
e7:db:f6:d4:0a:9c:b5:cb:9d:37:1a:76:21:1c:36:
a7:70:58:eb:74:fd:40:60:f0:e5:fd:af:7d:1a:17:
eb:62:af:01:d5:64:42:42:a8:2d:db:17:af:d9:98:
ca:01:ed:de:d7:ae:d9:24:78:b3:d3:47:dd:8d:52:
05:8d:9e:7f:31:b0:71:2c:bf:8d:16:41:02:c6:dd:
ab:12:2f:da:0a:c3:72:e8:7c:64:8b:01:e1:c7:e6:
44:40:66:ef:55:62:38:1b:fc:03:c6:6f:7a:ca:42:
e5:25:a2:17:45:91:98:ba:38:c0:70:b9:41:32:f8:
74:8c:15:58:7f:61:77:80:a1:2d:62:51:2d:2a:9a:
6f:3e:4e:f9:3c:d8:a4:01:ee:19:a6:d4:2e:ee:8f:
0a:e0:39:f8:eb:d6:4e:e3:9e:55:af:6a:29:e5:47:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:21:21:D3:A2:0E:FF:EA:0A:ED:D0:BB:42:FF:D5:B9:5E:93:85
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/oQshIdOiDv_qCu3Qu0L_1blek4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.145.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c6:ff:0e:b3:a8:58:76:04:4b:1a:f1:73:b0:d5:93:67:ee:
9c:d2:68:d6:7f:12:61:b1:31:26:8e:18:9e:5e:77:a9:d8:82:
cf:62:86:20:5b:30:4e:32:93:e9:44:11:ea:38:f6:f6:59:2c:
8a:8d:55:9c:36:f6:a4:62:77:cc:77:ef:aa:28:d1:99:64:23:
f4:fb:0e:e8:a0:09:45:03:45:d2:38:19:57:4a:59:55:b7:a1:
89:8b:a6:aa:19:77:39:94:30:34:63:f4:27:ba:84:f2:e9:d0:
06:8b:44:45:4d:19:a7:90:2f:d5:9b:18:fd:f0:8c:6d:d4:79:
59:fb:18:76:af:f3:00:1d:49:d0:6a:1b:a7:b2:5e:a5:0a:c1:
05:8f:42:bd:5d:b4:85:57:6c:2a:c5:6d:08:c6:ec:4e:17:bf:
77:92:bd:cf:89:66:62:db:60:58:4a:db:a7:79:17:7d:cf:29:
36:4c:5b:01:c9:33:03:62:cd:46:1c:f4:ed:9a:b3:d1:87:be:
1e:29:f2:e6:e0:af:05:17:13:d5:07:79:e9:fe:0b:a6:1e:76:
b2:d9:ca:00:b9:5f:a2:d1:c7:9d:ff:3d:9e:08:5e:b3:fd:3a:
31:ee:aa:de:a3:87:13:3e:ec:fc:7c:67:a2:b5:99:16:83:c8:
56:cd:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net