Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/yRFwTpF8uIi1_BjVUC-RFgZjVto.roa
File: yRFwTpF8uIi1_BjVUC-RFgZjVto.roa (raw, json)
Hash identifier: mNA1Sl4UbZtF2SriucljnpKsQkjCoecRg9zlE7G/VLE=
Subject key identifier: C9:11:70:4E:91:7C:B8:88:B5:FC:18:D5:50:2F:91:16:06:63:56:DA
Certificate issuer: /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial: 0194228D773A039D6F5A18933D53A750269B
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/yRFwTpF8uIi1_BjVUC-RFgZjVto.roa
Signing time: Wed 01 Jan 2025 15:48:04 +0000
ROA not before: Wed 01 Jan 2025 15:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212374
IP address blocks: 185.209.82.0/24 maxlen: 24
185.231.240.0/24 maxlen: 24
185.231.241.0/24 maxlen: 24
185.231.242.0/24 maxlen: 24
185.231.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:77:3a:03:9d:6f:5a:18:93:3d:53:a7:50:26:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Validity
Not Before: Jan 1 15:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c911704e917cb888b5fc18d5502f9116066356da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c3:98:50:3a:73:f0:6c:bd:a8:f8:ef:4d:0d:
03:7b:ea:fe:a0:44:70:8d:ea:d4:ff:8b:c5:3a:09:
70:1a:5b:68:9d:19:4f:f4:39:f3:8a:6a:ad:3f:c4:
09:7c:2f:9d:23:b0:8e:70:0d:18:41:35:3e:90:8d:
b8:31:72:21:db:40:42:f4:8e:39:77:53:d0:5b:3c:
18:98:6c:8f:c3:18:a3:de:c9:60:6d:a6:44:db:9d:
21:f6:d6:16:f5:0c:75:30:70:36:7a:39:1c:85:2b:
f5:fd:a4:6a:97:84:f8:de:b3:68:b1:67:1c:3f:5d:
68:c5:16:9d:10:8e:90:d6:b5:4c:56:a1:70:ac:51:
4e:1b:51:9e:94:92:c8:61:38:f1:c6:ab:21:71:61:
24:6d:d3:93:25:08:73:0a:6c:63:c1:5b:a9:ea:c2:
09:05:74:3b:ab:b5:f3:34:f2:55:5d:f0:05:9d:36:
8d:c4:49:4a:39:7d:41:2b:53:65:49:0f:45:24:49:
ed:f1:2b:c2:64:30:16:7d:f0:96:44:5a:c5:b7:cd:
7a:29:3e:e9:c3:39:57:4c:62:37:8b:46:92:d5:5b:
68:ac:7b:94:86:b7:ef:1b:11:42:94:0b:44:5a:58:
45:d5:bd:dd:66:41:f5:9d:31:86:8f:7d:bd:e9:48:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:70:4E:91:7C:B8:88:B5:FC:18:D5:50:2F:91:16:06:63:56:DA
X509v3 Authority Key Identifier:
keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/yRFwTpF8uIi1_BjVUC-RFgZjVto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.82.0/24
185.231.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:26:ba:20:d4:3c:78:14:8e:9d:dc:9c:1f:21:c4:3b:4a:37:
5f:80:07:2e:6c:d1:02:d3:cd:6e:7d:18:4f:04:c1:c7:c9:96:
3e:a4:de:b2:a9:3a:01:06:c8:b7:04:67:fd:5c:d1:c0:f1:36:
61:93:eb:04:27:54:7e:6d:e1:79:15:1a:e3:bc:a4:79:a4:a0:
76:68:d9:5f:79:41:d8:56:31:0c:d3:af:be:49:6a:48:c6:70:
6b:36:36:ce:20:37:8e:1c:30:28:57:8b:24:25:a5:dd:13:ff:
21:d7:78:14:8d:90:af:41:80:9b:5f:fc:aa:a0:5f:1d:dd:0b:
07:cc:e8:6e:92:05:30:67:10:49:5b:74:68:f1:c8:be:26:d3:
12:1b:a3:32:d7:19:74:12:5a:32:1c:c8:dc:96:11:73:f9:a6:
63:97:5e:c6:12:71:a0:96:44:5a:c6:8e:a8:0c:f6:56:e3:a3:
84:2a:28:f3:e0:7a:8f:12:96:05:a6:76:ec:6e:9e:88:95:93:
18:a1:0b:a9:74:66:e0:03:bc:cc:2d:45:9e:37:99:04:72:05:
94:37:df:d7:b4:5e:71:25:2d:18:00:54:d1:87:92:44:86:ec:
db:4d:8f:92:4e:4e:74:b9:67:4a:81:4e:f4:7c:4d:34:62:39:
e1:69:cd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net