Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/b3daKVNqN9269bFF-QH-2tlagvI.roa
File: b3daKVNqN9269bFF-QH-2tlagvI.roa (raw, json)
Hash identifier: NmiB0EZ16MgPnN/crIN4RLnYXmkOIBWsWNNzZdFZsUU=
Subject key identifier: 6F:77:5A:29:53:6A:37:DD:BA:F5:B1:45:F9:01:FE:DA:D9:5A:82:F2
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019426D969F86860A5EE8F2609A6E7FC5258
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/b3daKVNqN9269bFF-QH-2tlagvI.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20771
IP address blocks: 185.163.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:69:f8:68:60:a5:ee:8f:26:09:a6:e7:fc:52:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f775a29536a37ddbaf5b145f901fedad95a82f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:3b:95:44:f7:f2:f5:ee:dc:bc:67:47:21:
98:3b:a9:25:89:35:bf:86:c0:82:99:72:bf:b7:dd:
74:0a:25:f8:cf:69:dd:67:6b:1e:e4:1c:61:8f:1c:
fb:0a:98:77:7d:32:a3:bc:71:c1:0e:a3:b3:7e:d5:
f5:a6:ca:1b:30:ab:07:04:b4:32:7b:da:a0:4a:be:
56:ab:2b:80:e9:d5:32:d4:c7:c2:fd:28:66:f2:c4:
d9:e3:b7:2f:ef:d3:d4:65:ed:58:5d:0d:d2:cd:94:
d7:ef:4b:48:1a:1e:9e:ce:d6:ed:e3:73:06:bf:31:
b1:07:ed:ba:56:e6:29:b7:fd:01:7e:eb:3e:a1:af:
35:8e:89:e8:be:60:ba:f1:fb:b9:61:40:6f:dd:61:
df:32:56:d9:46:f5:42:a5:a0:9d:3c:c6:fc:a8:8c:
64:e5:3e:d2:29:fb:9a:78:94:f8:d9:ef:ae:78:36:
56:c1:95:f4:ae:14:59:61:1e:ee:10:49:6b:e9:c3:
5f:90:ad:49:a2:c6:c3:fb:bd:0a:cc:1a:f3:fb:bc:
50:5d:85:0a:2c:6d:89:e3:c3:55:71:ae:e9:60:f5:
4f:07:68:81:db:e8:d2:b6:d1:b6:df:f7:4f:b4:6c:
a2:fd:7c:cd:ad:53:23:e6:07:54:07:9c:99:7b:a0:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:77:5A:29:53:6A:37:DD:BA:F5:B1:45:F9:01:FE:DA:D9:5A:82:F2
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/b3daKVNqN9269bFF-QH-2tlagvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:a3:4d:d6:5d:42:76:ee:3e:78:98:66:a5:86:d9:9c:b4:2e:
f1:ac:e1:c0:c0:1e:de:b0:de:46:1d:50:d5:18:dd:36:35:46:
57:c4:a5:20:8a:28:40:cd:02:1b:8b:6c:e6:89:72:1a:84:a5:
aa:b2:55:3b:2f:b7:c7:eb:a8:61:83:b4:3f:ac:7d:d0:89:39:
c9:e3:ec:65:5e:dc:93:7b:75:83:71:03:60:20:4b:47:c8:39:
d4:95:f5:1f:ba:fe:52:4e:9a:6a:4e:60:b0:61:44:48:e4:a0:
5f:0e:d8:b4:55:2e:90:bc:91:96:c5:4c:d1:01:f3:26:9d:7d:
3a:2a:36:da:f9:9b:e6:44:50:08:8e:e0:3d:f6:33:e1:71:5e:
4a:27:0f:db:20:ad:c0:5c:fb:c8:20:d9:6d:ac:e0:df:67:f5:
72:f4:15:08:2d:a7:c1:00:d6:d1:72:5e:0c:17:b4:3c:82:01:
7b:e9:75:76:a5:b2:55:2e:d4:05:05:c4:39:4e:dc:20:4a:bd:
1b:76:1e:53:f7:12:dd:d8:29:1c:e2:20:4d:85:e2:3d:87:d4:
87:52:0c:b9:70:23:3f:4d:99:d4:87:ab:32:51:be:23:08:3e:
64:e7:d5:d6:9d:ff:fe:6d:23:a9:9a:45:98:d2:6f:02:f2:0f:
67:88:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:46 2025 by rpki-client on console.sobornost.net