Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/8lw7rY_Ajlikule3WA_Zgmg5cis.roa
File: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (raw, json)
Hash identifier: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=
Subject key identifier: F2:5C:3B:AD:8F:C0:8E:58:A4:BA:57:B7:58:0F:D9:82:68:39:72:2B
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 019423D6B2B25C1B1C65950C12BEBE7A3EEB
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/8lw7rY_Ajlikule3WA_Zgmg5cis.roa
Signing time: Wed 01 Jan 2025 21:47:40 +0000
ROA not before: Wed 01 Jan 2025 21:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15702
IP address blocks: 185.190.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b2:b2:5c:1b:1c:65:95:0c:12:be:be:7a:3e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f25c3bad8fc08e58a4ba57b7580fd9826839722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:fe:65:51:f8:2f:2b:d8:f7:85:3a:f9:8c:
04:d4:a8:c3:20:4a:93:59:37:f3:88:71:cc:f3:58:
d7:f0:64:d1:f6:0d:18:65:96:11:e2:f3:e0:d5:35:
f1:c7:af:a4:d4:99:22:5f:89:cc:2d:64:50:f7:6d:
07:83:7c:19:1d:97:bd:42:d1:4a:cd:91:07:12:73:
0f:99:6a:f1:92:00:c7:5f:17:64:06:e5:3c:da:46:
dd:20:eb:21:43:e4:fc:f2:ea:96:6b:27:fd:66:1d:
f6:c7:a8:1f:6a:e5:1b:f8:77:85:7c:b9:9f:e8:a0:
d5:b6:04:66:9a:27:86:6c:0e:0c:37:32:33:eb:22:
94:d6:e1:95:01:41:dc:bb:3b:ca:00:02:5e:6e:3a:
02:46:70:2e:3b:5d:75:15:f2:a4:66:b4:73:0e:ce:
3f:1f:09:99:29:d2:10:73:d0:7a:35:45:3c:45:3e:
2f:54:15:4f:57:fe:71:31:45:f2:1d:66:5f:c5:04:
6a:e3:e2:54:85:ce:a1:34:bb:58:89:4f:2e:28:53:
da:bd:0d:35:a6:c4:e1:a7:78:81:42:4f:20:26:ab:
75:3d:68:e3:ef:fe:52:bb:72:8b:86:32:5d:96:da:
3e:c0:61:54:69:ea:ab:94:67:bb:f7:1f:c0:77:30:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:3B:AD:8F:C0:8E:58:A4:BA:57:B7:58:0F:D9:82:68:39:72:2B
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/8lw7rY_Ajlikule3WA_Zgmg5cis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.51.0/24
Signature Algorithm: sha256WithRSAEncryption
43:88:55:c2:c9:61:57:0f:13:60:5d:5e:e8:f1:4b:8c:a7:fb:
97:19:90:6a:d3:58:dc:fa:05:22:a1:38:c8:90:a9:80:27:e1:
07:85:29:47:2c:58:aa:38:43:75:d8:2e:1d:5b:8c:63:67:7c:
cd:f4:7a:d5:f4:d7:ce:fd:89:f7:ff:e8:d6:99:e3:c3:d2:9e:
40:e4:e5:57:5a:69:f1:33:c5:73:20:93:5d:5e:b8:f7:c8:4b:
49:4b:ec:1f:84:4d:b0:28:41:36:21:26:3b:c5:c5:fe:3f:94:
0d:ed:42:c0:c9:0f:c2:dd:c3:c1:a6:be:09:dc:6f:98:fd:95:
3b:9c:38:02:0e:2d:3c:59:b0:80:be:18:44:d1:09:75:25:2f:
61:29:df:f6:93:11:c8:fc:ce:ec:a7:7c:54:32:ba:6f:5b:de:
f3:a8:2c:de:ef:46:82:cd:a0:29:9a:36:03:79:db:6e:e5:94:
ea:30:26:ac:da:c9:72:c5:96:3f:f2:e0:e8:73:ab:20:c2:cb:
a0:09:45:43:57:32:34:71:93:64:03:ed:84:7f:b7:b4:31:5b:
ab:7e:dc:1a:65:05:7a:70:25:5b:b1:e2:69:65:b3:f0:5b:f7:
69:33:00:c6:cb:f4:aa:d9:93:2a:3c:c5:f7:e6:b6:bd:e0:5b:
af:6a:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net