Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/F9mCTEFo2VHLyLNCvGdkZm7NM54.roa
File: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (raw, json)
Hash identifier: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=
Subject key identifier: 17:D9:82:4C:41:68:D9:51:CB:C8:B3:42:BC:67:64:66:6E:CD:33:9E
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 0195A3D21928736447861DF62D769CCDDB6E
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/F9mCTEFo2VHLyLNCvGdkZm7NM54.roa
Signing time: Mon 17 Mar 2025 11:16:49 +0000
ROA not before: Mon 17 Mar 2025 11:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35798
IP address blocks: 185.70.176.0/22 maxlen: 22
195.130.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:d2:19:28:73:64:47:86:1d:f6:2d:76:9c:cd:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Mar 17 11:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d9824c4168d951cbc8b342bc6764666ecd339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:8b:b1:1e:9f:3c:e0:bf:1c:5c:03:41:88:
04:87:db:47:19:d9:ee:15:4e:a1:15:00:72:8c:e4:
b5:5a:ec:fd:ba:56:49:b8:05:0f:12:70:db:a9:77:
7d:4c:43:b6:bd:4a:3d:f3:d3:7c:4f:c6:c6:4e:11:
97:21:ad:4f:14:93:07:a4:c4:d3:33:19:36:82:f7:
93:68:47:48:6d:37:41:46:96:9d:1f:8c:be:63:e1:
b0:a2:68:6d:ca:57:d7:ce:0d:51:61:ee:e6:7d:fe:
cf:4a:39:68:54:68:58:b6:01:d1:65:ee:c9:21:14:
98:f5:e3:0a:dc:58:b3:d9:2a:7b:28:ba:03:f7:a3:
8a:b7:5d:0e:fd:3b:1b:85:d0:cd:17:e6:01:63:b7:
3f:f4:00:e4:6b:38:b7:0b:af:d9:69:d3:6a:a2:10:
31:a7:53:e4:df:a4:da:d4:47:04:77:97:93:89:07:
82:68:9d:93:88:e2:49:6b:38:26:ac:a9:01:fa:f1:
96:c5:f2:9a:75:2f:9f:43:ce:60:2a:20:ad:96:99:
04:4a:7f:a1:72:24:97:34:67:cb:a2:b4:14:68:7b:
4a:cb:8b:82:a1:39:d7:15:90:f2:62:b2:8d:85:d9:
08:35:3f:74:2b:23:aa:6f:17:5c:68:91:c3:56:24:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:82:4C:41:68:D9:51:CB:C8:B3:42:BC:67:64:66:6E:CD:33:9E
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/F9mCTEFo2VHLyLNCvGdkZm7NM54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.176.0/22
195.130.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:67:f1:02:59:63:6e:e2:5e:c6:cc:b2:b2:9e:23:d9:43:6e:
cd:b0:28:48:fa:5f:2e:5f:e9:41:f7:8a:d8:5f:65:e1:f3:5d:
d5:5d:00:2e:44:e5:0e:ee:c3:45:00:01:e3:27:b6:32:73:91:
95:9c:a4:0d:c8:89:cf:38:5c:75:b8:44:ce:bb:cd:b9:55:5c:
73:07:02:45:49:47:03:75:5a:31:10:f1:46:17:1a:c8:a6:e3:
ad:05:7b:72:8c:47:fd:9b:5d:40:88:a6:5d:c0:db:bd:dc:0e:
cc:36:b2:39:ed:be:20:c2:96:67:2d:af:aa:75:9e:11:ab:32:
df:91:d0:af:bb:e4:d8:a6:63:2f:b2:94:84:80:f2:1e:65:66:
34:fb:76:94:3a:f1:b6:12:e5:87:0e:fc:da:d7:8d:53:81:41:
5e:ac:5d:d5:8e:3d:9a:74:88:38:68:f7:dd:d1:1a:8f:7b:21:
98:e9:c3:fa:72:ef:fd:c1:c4:41:08:fa:e3:74:f4:c2:13:05:
25:28:14:0b:d8:b3:15:03:e3:b3:76:21:6f:8e:32:24:df:5e:
3b:25:e6:7d:7c:a7:d5:bb:20:19:c1:b6:9f:46:a3:c3:48:84:
1d:f1:8a:d3:84:20:65:fb:1f:b6:4b:f1:97:4c:53:bc:32:ab:
10:a3:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net