Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa
File: S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa (raw, json)
Hash identifier: Wj6L5jF5/gTOwMGZzw/KKTZV7RAbfIUF0qejcJRN4Ao=
Subject key identifier: 4B:A9:7F:D0:93:9C:58:12:39:EA:8D:4A:CB:65:57:A0:C7:5E:35:BB
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019422FC140B72AD9DB73224B264CAB7E2BC
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205185
IP address blocks: 185.142.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:14:0b:72:ad:9d:b7:32:24:b2:64:ca:b7:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ba97fd0939c581239ea8d4acb6557a0c75e35bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:41:c2:c2:62:80:78:19:55:d0:ab:c5:fd:
89:39:c8:ba:d4:78:0f:a8:65:73:21:ff:6f:00:a0:
aa:7a:31:9c:70:f7:b2:95:b5:7f:6a:dc:b3:b7:2a:
1f:b6:8c:83:08:8f:e4:9c:de:8b:dc:80:5a:11:6d:
f6:79:90:b5:02:dc:f5:64:f5:8f:09:f9:58:e9:9b:
8f:be:08:f8:c3:93:18:99:12:79:41:e7:9e:22:a2:
78:7a:24:28:1c:ab:da:4e:e4:a9:82:b4:0b:66:a5:
be:0f:bb:ac:28:5c:f3:95:75:dc:a6:50:ba:94:70:
ee:ad:75:da:1f:24:e8:65:de:1b:a4:56:a7:86:7d:
fa:07:28:66:4e:65:1b:e4:d3:0c:b0:2b:bd:d9:57:
fd:dd:bb:f6:7b:77:f2:9e:31:af:6f:a6:34:3a:46:
0a:87:4d:18:0c:f2:96:5b:00:fc:c8:79:c4:d5:31:
84:78:44:5f:89:27:1f:bb:0c:f0:a5:b6:88:d5:44:
17:c2:a4:de:78:63:56:43:95:47:11:a4:85:6e:9b:
76:ba:b8:63:d5:83:77:32:cb:ec:78:93:2f:47:1f:
95:0e:01:a6:32:ce:98:fa:82:72:68:a5:13:b6:d6:
c4:76:60:ea:75:25:43:a1:8f:37:19:05:7d:50:eb:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:7F:D0:93:9C:58:12:39:EA:8D:4A:CB:65:57:A0:C7:5E:35:BB
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/S6l_0JOcWBI56o1Ky2VXoMdeNbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8a:be:a4:f7:98:91:4a:b0:70:ed:94:98:37:39:d2:00:9a:
24:43:bf:42:23:89:d1:3a:2f:4c:25:e0:49:62:13:f4:21:cd:
10:ff:97:57:e8:91:16:5e:3b:90:dc:c3:13:52:ec:1a:e2:59:
bc:bb:3a:bb:74:be:c3:a1:2d:d0:33:7a:11:a2:fd:e2:bf:02:
fd:fe:a1:30:1f:fc:2c:98:11:59:36:ba:e6:c4:ae:e0:4e:4d:
74:d4:44:e6:ca:b3:0d:3c:31:20:74:c5:df:9c:7b:2a:a9:c1:
64:6f:00:c2:d8:90:86:73:69:8e:25:e8:06:8e:d1:95:4f:91:
a4:5f:7e:a4:a1:e1:7e:9f:da:b6:8a:49:ec:10:6d:b6:73:c0:
52:3e:69:25:2e:ce:ee:94:d1:e0:97:4b:67:a2:ff:a4:d5:0b:
f1:76:d3:43:a3:99:b4:29:a8:ef:5e:fd:bc:b4:d1:6e:de:f8:
e7:a8:d6:e5:f6:d9:16:52:cc:5a:ed:33:b9:64:20:53:96:b8:
51:b8:39:97:e7:e9:6b:86:ea:75:26:78:03:5d:7e:08:dd:14:
1d:3f:97:38:1e:6e:62:05:46:f6:ea:cc:42:90:74:f0:89:c1:
5b:ec:51:59:86:83:5f:7e:d7:46:22:ff:d8:86:36:93:31:b2:
73:9b:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:34 2025 by rpki-client on console.sobornost.net