Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/u2BNAAC7Dm0euPOTB8HOX-QylyE.roa
File: u2BNAAC7Dm0euPOTB8HOX-QylyE.roa (raw, json)
Hash identifier: GNqBAmVB3is0CDKmPUm0vfs8TWmU1YL168pv/EKk5Z4=
Subject key identifier: BB:60:4D:00:00:BB:0E:6D:1E:B8:F3:93:07:C1:CE:5F:E4:32:97:21
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 019427B5A4F29744CDEAB8433D004553652A
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/u2BNAAC7Dm0euPOTB8HOX-QylyE.roa
Signing time: Thu 02 Jan 2025 15:50:03 +0000
ROA not before: Thu 02 Jan 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203927
IP address blocks: 185.119.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a4:f2:97:44:cd:ea:b8:43:3d:00:45:53:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb604d0000bb0e6d1eb8f39307c1ce5fe4329721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:15:87:5f:63:34:a6:89:2c:cf:1f:b6:f7:
7a:f1:96:16:7c:81:9b:7f:0d:3f:f9:70:50:2f:87:
19:7b:bd:ea:78:64:c1:32:b4:f3:95:44:e4:1c:b4:
f3:52:23:12:15:dc:34:8e:c3:cd:af:53:52:03:8f:
a3:13:e3:70:dd:8f:6d:80:39:1c:0b:e0:72:62:7a:
43:88:fd:07:6d:2d:c8:0e:20:71:1e:e7:04:f6:a8:
ad:e5:fe:b2:c8:14:44:e2:2a:24:c4:d3:25:11:50:
21:f3:5c:1f:fd:00:1e:38:25:02:91:53:b3:10:c7:
d6:eb:07:b3:e8:92:13:10:a3:ca:35:d8:8e:17:68:
35:c7:bb:7f:a5:c0:1f:c6:80:45:40:ce:0a:e3:f9:
27:d9:5c:17:28:7b:d2:cd:94:19:ed:e6:29:5f:17:
2b:42:b6:7a:9d:ad:a7:ca:f4:02:bb:ca:9f:03:e9:
86:8f:52:da:91:6f:c6:b5:2f:fa:c0:45:e0:b7:0c:
82:d6:3f:2a:5b:09:69:b4:a3:60:98:6d:b0:2a:88:
02:e2:00:e9:d7:95:79:02:13:d1:a5:09:82:0d:45:
49:3d:83:90:1d:81:9a:ab:c6:01:45:63:29:8c:71:
7b:a3:1d:16:9c:ee:86:51:39:cd:3d:52:70:80:84:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:4D:00:00:BB:0E:6D:1E:B8:F3:93:07:C1:CE:5F:E4:32:97:21
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/u2BNAAC7Dm0euPOTB8HOX-QylyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:7f:bf:cf:8a:d7:68:31:98:6c:47:4a:e1:18:c4:3b:b0:5b:
ea:00:8a:d2:0d:05:3d:33:57:38:31:f4:b5:ad:4d:15:5b:c9:
a3:98:1c:6a:21:de:09:76:57:f8:8b:c8:0f:0e:b3:e5:cf:21:
0c:29:53:52:83:b2:46:82:25:63:e8:10:5d:24:45:a1:bc:15:
c4:01:40:50:26:05:ef:9e:93:ad:0a:94:61:3e:25:ee:00:18:
5f:a8:95:0b:d4:89:47:0c:db:9b:33:6d:75:d4:a5:51:35:0e:
20:27:48:6c:87:ad:60:d6:86:fb:60:33:64:de:c1:98:64:b9:
12:90:35:35:74:d7:8d:21:c5:89:d1:d3:da:41:aa:e6:3e:34:
3f:7d:79:55:33:5c:9c:00:f7:92:96:fc:62:47:a9:fa:79:88:
2c:29:4a:d5:0b:99:38:b8:49:b7:fb:96:f4:f1:f6:e0:25:a4:
b0:a8:2d:c2:94:bb:a2:88:05:57:0a:22:8b:cd:f1:69:26:41:
85:2b:5b:04:1d:1a:55:4a:cf:a3:20:0e:f6:3f:08:0f:aa:53:
78:1d:32:80:67:21:bf:66:03:b1:7c:82:36:c7:68:74:f3:4c:
ae:10:b5:46:52:ff:9a:36:05:7d:f1:5d:f3:a7:5d:b4:c6:6d:
13:52:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net