Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/P82-6fcmXy1vqdLrwWWqytTl0TM.roa
File: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (raw, json)
Hash identifier: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=
Subject key identifier: 3F:CD:BE:E9:F7:26:5F:2D:6F:A9:D2:EB:C1:65:AA:CA:D4:E5:D1:33
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019427B58CBE453367766C82F7B3B2EB98AE
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/P82-6fcmXy1vqdLrwWWqytTl0TM.roa
Signing time: Thu 02 Jan 2025 15:49:56 +0000
ROA not before: Thu 02 Jan 2025 15:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49372
IP address blocks: 185.165.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:8c:be:45:33:67:76:6c:82:f7:b3:b2:eb:98:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 15:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fcdbee9f7265f2d6fa9d2ebc165aacad4e5d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:6a:21:56:fe:eb:24:26:18:3f:cd:44:1a:
18:06:1d:d9:ab:c8:a6:46:fb:c1:04:57:a3:a0:d1:
ef:35:71:c9:65:59:14:98:bb:14:5f:9a:4b:0f:20:
4d:5c:e9:19:67:06:9e:8a:0b:5d:30:dd:4e:10:4d:
b3:44:0f:bf:f9:21:f8:39:e3:da:87:58:22:0f:80:
bf:08:16:fe:36:f7:1a:6e:92:33:8d:a0:4a:a4:2a:
6d:7a:f9:5b:27:a3:66:12:ec:4c:55:ff:df:cb:7e:
f7:89:64:4b:9c:80:9b:be:fc:5f:17:c3:58:7f:a9:
ad:fb:27:df:ca:5f:09:4d:4b:64:c2:2f:00:77:1e:
45:c8:46:bd:a5:f3:4d:86:21:9d:23:81:e1:63:28:
d9:25:80:80:4e:8c:74:7f:2c:59:0b:87:bc:4d:8d:
2c:06:16:a1:e1:c8:b8:0e:3e:96:ab:1b:8e:22:06:
88:8a:45:1f:4d:3e:60:b0:8d:6b:94:9f:75:03:8d:
cd:b3:07:2c:8f:ec:fd:3b:e5:68:c9:59:cb:87:d5:
4b:87:31:7d:72:76:97:24:5e:94:ad:83:e3:6c:95:
57:9b:d0:cd:00:56:af:77:d5:fa:8b:28:c7:b5:bf:
35:53:bf:1c:7c:c4:1e:08:38:6f:1a:fa:1f:d5:04:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:BE:E9:F7:26:5F:2D:6F:A9:D2:EB:C1:65:AA:CA:D4:E5:D1:33
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/P82-6fcmXy1vqdLrwWWqytTl0TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.154.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2d:44:cd:a6:21:76:87:3c:b8:ae:99:0f:b3:96:18:79:39:
bc:21:22:03:82:2e:76:42:78:81:9a:0e:67:4e:b2:d9:72:d6:
10:ce:ea:74:fb:02:14:5e:6d:b5:5e:38:72:97:d8:4d:a7:98:
d1:72:df:d5:0f:5c:eb:a7:c7:b8:41:1b:a6:b7:fa:5e:92:de:
df:e8:bd:6e:4c:85:d3:91:6f:63:eb:e6:0d:c8:1e:3e:10:26:
e8:ae:e2:f9:bb:d6:bb:b7:75:f9:4a:0b:a4:6d:aa:04:bc:2f:
7d:cd:ab:ba:76:0e:db:03:8b:c5:9a:35:7d:b2:81:85:ab:00:
f5:56:56:ab:82:03:48:f7:c0:c5:c1:9d:df:5e:9f:18:df:e7:
c2:60:a0:57:a5:95:a9:06:17:ca:ac:ac:2d:f3:62:b5:b9:c9:
de:88:2f:c8:44:00:80:88:e0:af:d8:60:90:c1:08:b6:dd:2a:
9c:77:ab:14:e7:e0:19:34:18:bc:31:f2:a6:7c:03:26:ad:76:
4d:ca:3f:fb:c5:05:da:94:16:37:2e:72:09:b9:d5:32:c6:32:
9e:37:92:f5:56:f4:ea:a0:04:63:fc:d7:67:06:60:40:11:75:
6d:49:5c:b8:0f:77:38:bf:37:a0:66:2e:7a:38:27:93:57:3e:
27:cd:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net