Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa
File: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (raw, json)
Hash identifier: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=
Subject key identifier: 5F:B9:90:60:90:8B:0A:44:81:30:F9:FF:96:B4:A8:23:C2:88:5C:06
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019422FC23A9DE8A1109209EE7A98976F3D8
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39599
IP address blocks: 185.51.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:23:a9:de:8a:11:09:20:9e:e7:a9:89:76:f3:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fb99060908b0a448130f9ff96b4a823c2885c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:34:71:4a:a0:b7:49:20:c0:af:ac:ca:1a:
0d:90:63:9a:fe:4e:60:7f:aa:a3:cc:dc:6f:c3:a0:
6d:21:d0:3e:05:b3:75:e7:a8:43:89:45:85:ae:f0:
d3:4a:c3:9c:e6:8d:3f:09:4b:c7:84:05:b2:ac:22:
28:2a:c8:7a:23:31:40:db:af:68:1b:e0:ea:8a:78:
0d:f6:a2:6f:44:8d:39:8b:66:66:d8:3b:c4:74:d3:
3d:f0:59:f4:60:62:7f:4a:40:ef:82:9d:01:09:b2:
5b:de:33:56:8d:48:64:2c:e6:1f:02:d4:a7:3f:c8:
b7:2b:f6:e8:3f:1e:8d:41:37:ba:66:bc:24:55:30:
78:81:c2:ef:13:fe:0d:42:7f:66:7e:1a:e8:4d:c6:
55:65:9b:c5:4d:0c:e4:fc:cc:09:c5:44:33:fa:54:
b9:96:d9:11:aa:57:9a:f5:ce:48:fa:c1:f4:58:93:
b4:3b:df:45:b5:ba:3b:7d:1d:3a:0e:c5:17:ca:7b:
de:74:02:d9:fc:f2:8c:c8:38:cd:2d:36:c5:58:84:
78:24:1b:78:4b:89:d0:8b:df:13:30:bc:7b:49:36:
d8:dc:3b:89:04:d6:b1:42:0d:61:3d:16:66:7c:1f:
aa:9d:ca:a1:b9:8b:16:01:10:77:2c:55:ae:d5:98:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:90:60:90:8B:0A:44:81:30:F9:FF:96:B4:A8:23:C2:88:5C:06
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.117.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d3:cb:b1:d7:f7:6f:c8:7c:d6:da:75:09:6c:f3:6a:b0:d8:
d7:e4:fe:dc:52:5c:c2:00:ff:b7:ec:70:83:21:08:3f:83:66:
ba:c3:cd:ea:75:94:b3:a2:65:b1:b6:74:05:78:f3:9f:f1:44:
43:02:34:94:11:1b:af:6f:6a:3d:74:dc:09:98:cf:38:ba:42:
4a:25:ed:2b:f2:d9:55:da:8e:ea:c9:54:01:12:22:20:59:07:
af:7d:a9:19:46:8d:2c:48:be:9a:a2:d6:67:77:4f:b7:dd:91:
f7:09:94:f3:ba:8d:dd:7c:19:0c:3b:a5:eb:ec:d8:27:49:b1:
8c:d0:ed:91:a1:05:eb:f0:00:f6:06:0e:c2:65:6f:75:4c:aa:
5c:65:95:d0:c0:b8:d0:e8:12:bf:e6:6c:c3:9b:c6:3a:be:96:
36:74:a6:fd:fb:f4:f5:ec:4e:23:07:81:51:8a:e0:6e:2e:83:
3a:a4:70:c3:fb:71:8d:2f:97:89:eb:b1:12:64:03:1c:93:27:
e5:2d:ac:29:de:74:26:e6:f9:f5:e7:95:ad:e8:a7:8e:51:bc:
cf:cc:4c:30:74:47:e3:cc:77:51:2d:44:81:df:93:b8:93:5e:
13:7c:d2:5a:d6:9c:40:a8:bc:77:db:1d:3f:ac:0c:16:56:44:
af:cd:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net