Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa
File: aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa (raw, json)
Hash identifier: 2eZg5Esd5JZxUzRdKZEfMd9ilMWbL+Zmx8dFdFF5esA=
Subject key identifier: 68:B7:92:EA:42:4D:30:CB:17:47:F7:D6:9B:89:DF:04:97:34:45:B6
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 0194214468A511A7D8F225CF9E64C4A41C4E
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa
Signing time: Wed 01 Jan 2025 09:48:38 +0000
ROA not before: Wed 01 Jan 2025 09:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212140
IP address blocks: 185.226.96.0/24 maxlen: 24
193.56.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:68:a5:11:a7:d8:f2:25:cf:9e:64:c4:a4:1c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Jan 1 09:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b792ea424d30cb1747f7d69b89df04973445b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:cc:99:77:7f:d2:73:83:61:bc:d9:ee:4e:
14:dd:7c:eb:27:f0:10:45:df:32:09:52:f7:af:92:
ee:53:48:be:b1:16:4a:ff:6d:8e:62:51:65:ed:e1:
46:6d:de:42:23:da:f6:8c:06:04:23:c4:dd:86:c3:
6e:95:86:ea:9f:75:ec:f8:44:9d:9f:ca:c9:b3:48:
20:25:10:9c:d7:d4:30:04:c6:6b:2b:91:e2:18:a4:
c0:36:a2:cf:b7:25:cd:26:2e:a4:cf:a6:da:bc:3d:
cb:de:0c:78:84:15:f8:41:eb:3e:33:69:6a:b8:82:
6f:da:5e:58:44:a5:90:69:cf:ce:ae:d4:c9:bb:a6:
17:76:fc:78:43:e3:59:70:1b:03:12:81:62:25:21:
80:77:4d:75:ee:ec:57:41:92:a1:f0:ae:98:be:22:
7c:17:d5:73:b4:15:96:49:68:37:34:48:b4:6d:0d:
40:f1:a9:bb:17:ce:b5:8f:ff:85:60:6b:c9:24:4f:
38:f2:26:2d:d4:90:81:07:3d:d6:30:b7:76:9c:df:
fd:74:92:af:3b:0d:2d:be:70:79:ec:4a:d0:24:f0:
0f:42:8b:7f:6c:f3:a3:bd:2c:b1:02:a3:e2:1d:59:
0c:a4:ae:b7:c3:a2:0b:cf:76:b0:5f:6a:31:16:2e:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:92:EA:42:4D:30:CB:17:47:F7:D6:9B:89:DF:04:97:34:45:B6
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/aLeS6kJNMMsXR_fWm4nfBJc0RbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.96.0/24
193.56.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ab:74:60:c0:ed:73:3e:00:fc:78:17:7f:40:fa:e3:2d:0c:
88:ed:36:7c:0b:1e:1b:9a:37:ea:9f:a4:13:40:52:71:26:62:
95:99:ec:c9:35:11:b0:5a:6f:ae:66:11:e7:1d:c9:17:0d:56:
67:f3:63:81:a4:f7:6c:0e:91:bf:ac:96:4f:b8:47:6c:74:10:
65:9f:d8:ae:16:4b:e4:c5:28:85:19:89:ec:73:85:c8:c7:bd:
0e:eb:3e:24:d2:98:22:a7:4e:db:8f:a9:bf:6e:01:14:38:b3:
36:ae:75:0c:2b:ab:97:0b:bc:22:87:46:bc:da:65:ce:65:ff:
07:80:65:e5:44:fa:6a:18:ad:a6:6d:26:f5:ee:c4:f5:63:d5:
e1:e5:20:a2:70:70:62:d5:41:41:c8:f3:e8:20:2a:23:61:3c:
ae:4f:3a:30:b9:9d:af:c9:47:14:c3:d9:6b:b1:5a:f8:63:e5:
9b:8b:88:ba:19:35:4b:84:f7:6c:bd:8f:12:63:e2:44:79:fd:
5b:30:ae:d5:23:15:ee:9e:04:98:5a:5c:35:35:a1:5e:0d:1a:
eb:56:a1:69:68:67:39:1f:58:28:5c:04:24:85:26:46:82:9b:
63:8d:20:fa:cf:1d:c3:32:66:ac:f5:8d:95:e9:92:1e:c3:a1:
db:57:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net