Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/KEydF7bMk6RADdNKhYi6WFKpHSw.roa
File: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (raw, json)
Hash identifier: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=
Subject key identifier: 28:4C:9D:17:B6:CC:93:A4:40:0D:D3:4A:85:88:BA:58:52:A9:1D:2C
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019427B633F1856ACE6D8BD0A9292BDF182F
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/KEydF7bMk6RADdNKhYi6WFKpHSw.roa
Signing time: Thu 02 Jan 2025 15:50:39 +0000
ROA not before: Thu 02 Jan 2025 15:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60976
IP address blocks: 185.192.112.0/24 maxlen: 24
185.192.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:33:f1:85:6a:ce:6d:8b:d0:a9:29:2b:df:18:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=284c9d17b6cc93a4400dd34a8588ba5852a91d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:53:0f:24:95:c3:e5:93:14:e1:f3:62:09:
fc:7d:5c:f4:87:34:4d:53:d8:6e:f2:3b:5e:cb:ef:
58:6d:8d:c4:17:47:cc:48:fb:53:6e:2a:f8:7e:7b:
a1:a7:80:47:c3:4d:93:1f:1e:bc:75:7c:f6:cd:53:
ad:47:62:37:db:90:e3:81:e7:87:1f:87:04:7b:e8:
17:98:66:43:7c:86:19:c9:91:77:5c:e6:d3:69:e4:
24:02:3f:f4:79:eb:b1:38:42:3b:4c:c1:49:f6:38:
77:27:a4:8f:35:94:bf:76:78:4f:52:ee:39:dc:e7:
40:07:ae:58:be:0c:9d:fb:e8:88:a2:da:d6:7b:48:
8b:a7:54:80:8e:8f:38:31:19:14:38:c5:f6:6f:18:
1e:dd:79:75:66:54:26:90:fa:34:cc:d3:84:f7:c2:
e2:c9:19:77:b1:66:82:f4:19:d2:23:ab:e1:32:25:
15:bc:04:e2:59:de:e9:4d:88:34:2c:5d:1f:e7:ef:
4f:17:95:d4:78:fd:42:b7:79:bf:a6:d1:4b:a5:84:
7c:1f:de:6b:d9:e9:f7:fb:79:e0:19:d4:d4:d5:4c:
ec:a3:4c:34:79:cc:c7:cf:73:e0:a0:fe:88:19:ef:
1e:57:fd:85:f5:2b:7b:14:4e:06:58:21:56:b1:67:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:9D:17:B6:CC:93:A4:40:0D:D3:4A:85:88:BA:58:52:A9:1D:2C
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/KEydF7bMk6RADdNKhYi6WFKpHSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.112.0/23
Signature Algorithm: sha256WithRSAEncryption
76:b3:84:7b:c9:d2:41:2d:e0:35:38:68:ff:04:b8:51:5b:28:
a7:0f:49:9f:f4:e9:bb:c0:26:c5:64:b5:f0:e6:bf:00:b9:5a:
e9:2e:f1:0b:85:12:64:90:66:7e:ac:e7:0c:ec:33:4b:4c:6f:
37:c3:09:ab:75:44:69:a2:c9:f0:73:56:8e:0a:60:a7:c6:a2:
18:dc:d4:ae:8a:3c:66:1f:4b:9a:81:db:2d:7a:8e:b1:df:2c:
32:a9:1d:89:34:b3:88:77:9e:36:83:43:04:69:30:11:fb:26:
f4:86:eb:00:b3:eb:69:2a:7b:87:80:1e:1a:22:2d:61:ea:d2:
68:8d:24:1a:de:d5:bc:bf:87:b3:00:9b:66:bb:6c:86:6c:03:
69:1a:fa:83:5d:7a:e3:4d:90:e7:79:b7:00:f7:ef:c2:bb:37:
6b:a3:e7:90:5d:e3:86:ec:a3:1e:d8:1b:9b:69:54:10:2f:21:
61:15:4a:c0:a8:2e:8e:a7:0c:ce:48:fe:00:15:75:57:74:0a:
6b:5c:cf:33:28:ea:71:fd:ec:6b:d7:79:2c:a9:ab:30:27:52:
d5:ec:64:01:ad:16:5f:fa:17:e8:3c:a5:51:05:c3:e3:ec:ed:
d6:5c:b2:3d:0a:1d:a8:e8:dd:5a:3e:19:d6:1a:85:08:72:af:
9b:ea:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net