Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/mduo7I3wNgYNMDFTnFs9bATZw0U.roa
File: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (raw, json)
Hash identifier: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=
Subject key identifier: 99:DB:A8:EC:8D:F0:36:06:0D:30:31:53:9C:5B:3D:6C:04:D9:C3:45
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 01941FFA1F4FF971E1419B9AC8BD8D1949F4
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/mduo7I3wNgYNMDFTnFs9bATZw0U.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204568
IP address blocks: 185.209.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1f:4f:f9:71:e1:41:9b:9a:c8:bd:8d:19:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99dba8ec8df036060d3031539c5b3d6c04d9c345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:1a:b2:c6:38:6c:e8:94:2d:d3:dc:d3:60:
70:4f:b6:5d:98:69:16:97:3c:62:1b:58:b1:60:8f:
c2:c5:1d:1e:19:45:c9:7e:06:19:f8:41:10:c5:01:
35:1b:f3:1c:7c:df:25:00:7a:68:4a:3c:b1:0b:84:
db:8a:6c:d6:4b:34:95:4a:d7:a3:d6:f2:15:d8:7e:
5e:3e:fb:c4:5a:94:d4:b6:35:31:bd:4d:e9:ce:24:
1a:74:47:fd:8c:d9:cd:99:e8:0d:2e:49:16:5a:24:
08:a0:1e:92:8e:6b:19:ab:b1:ae:61:63:f5:db:ff:
e5:f1:6d:95:6a:e3:50:4e:2d:2c:02:3a:91:10:6f:
e4:0d:e4:71:a8:04:36:cf:ac:9b:85:10:83:f1:ef:
66:55:22:7f:ab:8d:75:24:40:d9:e2:9e:3e:9d:0f:
1f:d4:5a:89:dc:ee:71:d0:ef:88:12:45:46:98:56:
4d:0d:db:df:30:20:9d:bc:f4:f5:45:c9:a4:b6:6d:
eb:d2:f6:d9:26:44:71:f2:13:82:23:be:0f:b8:9b:
0b:f3:a5:51:81:39:32:0f:b6:c3:97:d5:04:d3:ef:
6c:90:e8:bc:bc:d0:f1:19:f5:15:3f:e2:41:36:a8:
5e:54:75:89:a7:3c:b6:2b:5d:72:fe:f2:c2:4d:c1:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DB:A8:EC:8D:F0:36:06:0D:30:31:53:9C:5B:3D:6C:04:D9:C3:45
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/mduo7I3wNgYNMDFTnFs9bATZw0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.70.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:7b:c5:da:20:bf:ee:da:e0:74:80:dc:6d:ab:47:6c:06:48:
9a:af:e0:b8:b2:2e:f2:59:d2:ec:e5:84:83:dc:09:e0:56:36:
32:b3:80:bc:8a:9c:d0:55:3f:f3:69:fd:8f:9f:12:53:74:77:
ae:33:dd:9a:65:45:19:3d:97:37:09:79:78:8f:07:99:a3:f2:
b1:5b:9e:5c:53:b5:a1:ed:17:d6:ce:03:23:2c:f2:dc:a0:c6:
ab:06:e3:f3:ae:e2:cd:79:f4:a9:86:15:f1:50:0c:23:fa:83:
9c:04:c3:e4:0e:c7:38:55:1f:5d:2b:29:81:a8:9a:11:e9:9a:
c7:73:1a:8e:fe:d9:51:33:5e:2e:a2:9b:db:bd:2e:7b:b1:17:
63:b8:d6:57:1f:c5:46:c7:74:e2:44:aa:89:ee:20:fe:70:e8:
3e:6b:89:f0:d1:6d:5d:4a:77:16:aa:ce:0d:08:54:4a:67:76:
1d:11:d5:8e:14:18:da:26:19:e6:77:52:2f:a0:a1:e9:aa:4d:
a9:dc:43:83:88:75:7d:82:15:bd:0f:bb:92:bd:50:f7:d6:c6:
f9:d7:10:a0:19:87:af:ee:ce:c3:15:bb:55:5e:56:a4:c5:9d:
71:95:38:87:66:f5:b2:45:95:2f:8a:79:2d:b9:d2:31:7b:b2:
42:ff:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:42 2025 by rpki-client on console.sobornost.net