Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/g2Qy1mGt_Uu-pIexl99dczW8nXA.roa
File: g2Qy1mGt_Uu-pIexl99dczW8nXA.roa (raw, json)
Hash identifier: EYwBnQOkm7k11Gc3fa4U5v/wFkVqx3iUMXR+Q3N6saI=
Subject key identifier: 83:64:32:D6:61:AD:FD:4B:BE:A4:87:B1:97:DF:5D:73:35:BC:9D:70
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019427472B3FBD03BE57F0F28885CE379650
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/g2Qy1mGt_Uu-pIexl99dczW8nXA.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215853
IP address blocks: 185.240.180.0/24 maxlen: 24
185.240.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2b:3f:bd:03:be:57:f0:f2:88:85:ce:37:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=836432d661adfd4bbea487b197df5d7335bc9d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:f1:e9:7c:72:ab:99:58:8b:31:af:5b:44:
37:eb:d3:47:d5:12:f7:51:27:b0:7b:a5:30:fc:ee:
15:ab:01:b0:70:a9:a1:ce:ac:4a:9a:d9:95:1e:30:
24:ae:0c:bd:24:1b:d3:e8:1b:47:43:50:ed:bd:15:
fb:97:e9:12:b8:4e:83:76:29:84:e4:cd:5f:e3:30:
16:36:c9:2e:cf:fd:a9:32:ff:ff:bd:ce:aa:14:66:
ea:06:3f:32:cb:2e:77:09:bf:70:4f:42:b4:35:0e:
7d:7d:4a:51:34:84:f3:3d:10:f0:02:bc:fa:29:76:
3a:f8:f8:76:56:28:ea:0e:9b:48:73:1c:44:dd:22:
ca:8c:8c:0b:22:90:a7:e9:ae:61:34:65:87:02:44:
d4:d5:62:a2:c6:90:b9:71:99:ad:ea:57:c5:9c:ac:
ba:19:be:1d:6e:b7:74:2f:50:9e:2f:27:8a:27:86:
1b:7d:64:16:cd:bb:a6:22:7f:0b:d8:70:67:b0:ad:
40:4a:76:20:aa:77:6c:39:ac:a6:ba:39:fb:6d:e0:
97:d3:b5:54:da:8f:34:6b:4f:8d:36:89:fe:18:94:
ff:74:96:f7:3b:e9:9d:c9:19:a3:c1:5a:bb:44:30:
f5:9b:22:e9:4c:07:4c:b3:df:84:fe:88:62:91:2f:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:32:D6:61:AD:FD:4B:BE:A4:87:B1:97:DF:5D:73:35:BC:9D:70
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/g2Qy1mGt_Uu-pIexl99dczW8nXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.180.0/23
Signature Algorithm: sha256WithRSAEncryption
50:36:19:86:b4:b9:92:1b:28:fd:29:39:03:f5:c8:a3:84:2e:
5d:b9:41:64:1c:00:d8:64:47:0a:50:0a:90:5e:d1:06:bd:2e:
8d:df:75:bc:e1:45:a8:37:57:29:a0:63:1c:24:5b:77:43:cf:
1b:41:e4:00:d0:17:a6:66:e3:2e:7a:2c:09:73:84:b2:68:f7:
8a:9f:1c:61:37:f6:0c:4d:30:04:ce:62:5d:ed:49:7f:19:e2:
e2:c7:73:e8:99:01:2e:a5:07:8e:49:57:09:1a:08:a7:be:ba:
ad:33:32:f6:4b:fa:72:4f:18:04:13:4c:23:f0:0c:5c:33:f0:
8e:4b:90:0a:8c:86:36:c6:37:ca:2d:00:04:ce:ea:29:3c:ac:
2e:69:44:b2:35:7d:50:51:aa:6e:de:61:8a:21:f7:83:b1:73:
78:8e:00:69:4e:91:38:14:e7:5f:1c:e9:3e:7d:1e:d5:25:4e:
33:5c:ef:7d:5d:5a:e7:35:c9:6e:77:cb:63:a4:6a:75:12:71:
15:be:bd:93:37:fa:bf:70:06:65:5e:a9:9d:e4:d5:14:e3:02:
38:3f:7c:c4:29:80:93:56:66:52:39:3b:2e:03:81:2c:53:f2:
01:7e:f9:24:34:3e:30:e2:e1:d2:f0:f6:cb:0c:6c:e1:3e:c8:
83:d6:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:46 2025 by rpki-client on console.sobornost.net