Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/u1fNRyXyMUiOEFJEZY8QmByB7E8.roa
File: u1fNRyXyMUiOEFJEZY8QmByB7E8.roa (raw, json)
Hash identifier: ZcFES+4nNrRKAxBfx+5gDYNJV+7c5V3Qx9m+LvRk+bg=
Subject key identifier: BB:57:CD:47:25:F2:31:48:8E:10:52:44:65:8F:10:98:1C:81:EC:4F
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019424B26EB18F7E78039DFC796797E8940C
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/u1fNRyXyMUiOEFJEZY8QmByB7E8.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.186.0/24 maxlen: 24
185.1.231.0/24 maxlen: 24
185.188.82.0/24 maxlen: 24
185.188.83.0/24 maxlen: 24
217.29.64.0/21 maxlen: 21
217.29.66.0/23 maxlen: 23
2001:7f8:b:100::/64 maxlen: 64
2001:7f8:b:101::/64 maxlen: 64
2001:7f8:101:7::/64 maxlen: 64
2001:7f8:101:13::/64 maxlen: 64
2001:7f8:101:14::/64 maxlen: 64
2001:7f8:101:16::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6e:b1:8f:7e:78:03:9d:fc:79:67:97:e8:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb57cd4725f231488e105244658f10981c81ec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:74:ba:cf:db:73:84:f3:fd:e1:29:99:55:
75:2a:a6:71:f7:26:49:61:f6:9c:7c:ee:d9:b4:52:
c7:ce:b5:d4:b5:7f:5a:60:a8:fd:d5:6e:c5:26:f3:
bc:df:db:a3:c5:23:8b:dd:13:3d:d0:20:a8:c0:59:
fc:dc:b5:7f:59:a2:31:22:30:c8:af:3a:3d:71:0f:
ae:3b:4d:1a:af:dc:6e:91:4b:3b:4b:bf:7f:6a:21:
0d:d6:ef:b5:05:3f:cb:46:21:e3:20:41:8c:56:29:
b5:db:de:dc:42:0b:99:75:e5:b0:4b:10:3f:cf:f2:
27:b5:34:a0:dd:1a:f7:81:9c:dd:2b:75:a7:be:f4:
29:4a:71:dd:33:ea:33:b7:6c:ea:3e:50:7c:b4:5a:
13:74:fb:97:44:5c:71:64:45:f4:9e:85:28:8b:09:
fe:06:5f:d9:e6:76:58:48:96:23:32:db:27:47:8a:
a2:3a:62:d3:88:9f:cc:9e:ee:d6:23:85:af:8e:0e:
cd:86:40:ff:8b:2d:cf:c2:a1:b1:b5:5f:63:5f:a8:
37:d0:d4:f0:55:8a:5d:4b:6c:0f:68:d4:cf:72:9e:
5b:c4:2f:59:97:05:e4:a4:5b:11:19:71:0c:9a:a4:
dd:40:97:ab:54:4c:21:02:bc:a8:de:89:06:ae:19:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:CD:47:25:F2:31:48:8E:10:52:44:65:8F:10:98:1C:81:EC:4F
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/u1fNRyXyMUiOEFJEZY8QmByB7E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.186.0/24
185.1.231.0/24
185.188.82.0/23
217.29.64.0/21
IPv6:
2001:7f8:b:100::/63
2001:7f8:101:7::/64
2001:7f8:101:13::-2001:7f8:101:14:ffff:ffff:ffff:ffff
2001:7f8:101:16::/64
Signature Algorithm: sha256WithRSAEncryption
3f:06:23:bb:75:0d:7a:2c:e4:81:ef:57:5f:2e:8a:6d:47:0b:
ff:2b:5e:d7:90:aa:22:0a:c1:71:90:ba:c9:97:76:6e:6f:7a:
a2:01:26:f9:87:13:97:bb:4e:2a:9d:06:90:fd:e7:99:a1:bf:
5c:93:36:80:21:dd:19:10:f0:b5:52:1c:17:fb:d4:0a:f3:ad:
c9:3c:2c:b1:af:e6:dc:17:d3:83:4d:a8:fe:7c:31:0f:1a:76:
10:2d:ce:fc:42:5b:db:21:5c:5c:28:41:be:39:07:7c:9e:13:
53:8c:ea:b0:be:51:ea:24:45:69:4b:8c:c7:c1:6d:f2:70:42:
a2:d9:73:78:ae:4f:3e:c4:89:27:90:a5:a7:0c:ca:13:3c:d4:
61:ff:e3:62:0d:90:d7:c4:19:30:b3:73:84:91:6c:1c:81:07:
89:3d:d7:7c:97:39:02:38:fa:35:7c:6c:44:8a:0b:b8:5c:84:
1e:9c:cb:59:bb:8c:16:a9:b1:1a:c7:0d:86:31:ea:db:8c:a7:
3f:86:0b:d1:16:db:de:21:1d:df:8b:6a:43:cc:12:87:cf:16:
ad:bb:f0:18:69:42:f4:7a:00:6d:d1:d0:3e:26:fb:1e:e7:18:
0d:1b:88:91:16:24:09:70:41:ae:93:b7:7a:4c:ea:fd:0c:18:
71:4d:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net