Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa
File: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (raw, json)
Hash identifier: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=
Subject key identifier: 62:3F:4F:03:A6:9E:52:D2:98:58:20:A8:50:6F:0B:D1:FE:E3:FE:AC
Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial: 01953DA86C0F2A21C66FB1C3710A747341FF
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa
Signing time: Tue 25 Feb 2025 15:10:02 +0000
ROA not before: Tue 25 Feb 2025 15:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 185.66.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:a8:6c:0f:2a:21:c6:6f:b1:c3:71:0a:74:73:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Validity
Not Before: Feb 25 15:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=623f4f03a69e52d2985820a8506f0bd1fee3feac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:4b:90:35:ab:77:f4:70:fe:37:9d:ec:60:
6c:59:b0:5e:fe:4d:d2:a9:63:2d:16:d3:2e:2e:74:
df:a5:1f:50:37:76:0d:e6:0e:58:22:5d:00:ee:e6:
23:29:9a:02:bf:29:e4:d1:5c:65:f9:a3:13:f0:da:
45:30:7d:0b:89:23:db:c5:d5:38:e8:a4:04:fe:6f:
c7:8f:50:d5:53:89:b5:d5:fc:88:af:28:79:9e:f4:
1b:94:03:ca:ed:bf:10:c1:8d:e6:22:4c:d9:ef:9d:
13:3b:0d:a7:bc:5d:13:7a:38:ac:37:9b:2f:c3:bd:
f3:7c:7b:e8:33:17:4c:06:e3:5a:a4:4f:a8:d9:07:
f6:0d:c0:86:d4:c5:80:13:d5:87:f0:7f:42:b2:c0:
fa:b4:91:14:61:ed:37:6c:65:07:b4:f0:57:a5:5a:
05:6e:f3:6a:52:b0:12:b8:b4:46:df:3c:88:00:e6:
c2:1d:58:cc:7a:4b:d6:e1:bb:77:b4:a6:50:85:4a:
c9:35:83:9a:ad:6d:5a:78:d1:a6:05:2f:04:f5:94:
3b:e4:8a:07:41:55:fb:90:df:4a:46:31:14:1d:f2:
62:25:ae:c4:e7:60:36:ee:51:28:0d:29:8b:09:6b:
5a:d7:8b:78:2e:ea:97:36:de:5a:d9:c1:28:3e:05:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:4F:03:A6:9E:52:D2:98:58:20:A8:50:6F:0B:D1:FE:E3:FE:AC
X509v3 Authority Key Identifier:
keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ea:89:31:86:5a:f8:45:85:0a:0b:99:60:d2:91:79:db:bc:
bf:b7:5a:5e:c0:44:77:91:ef:76:17:d3:bc:cb:12:0a:e4:09:
fb:b5:aa:0d:26:d6:68:28:e9:0e:f9:7b:0a:ba:cf:6f:ea:bf:
5f:d1:cd:53:60:62:af:38:03:00:4c:b5:12:d7:de:5c:a3:bc:
54:b9:9b:89:35:f4:82:8c:a3:8f:76:13:bf:21:43:ed:bf:87:
f0:f4:47:10:55:e4:bb:86:ad:0f:50:4b:38:6f:81:07:f8:e8:
48:0e:0b:36:b1:11:d1:92:8f:32:f1:ef:d5:9a:5c:6c:5b:f4:
b9:10:a6:a8:1a:05:9a:7e:8d:c4:cc:e6:5f:c3:2d:14:8a:bf:
db:49:9a:72:c6:23:fb:51:cd:1d:21:49:b3:3d:7b:ae:a5:90:
18:64:cf:38:78:f1:b8:61:49:37:34:8d:34:4e:d7:e1:20:a0:
f5:fd:98:ab:29:e0:d9:53:60:f8:90:61:be:f0:d4:59:8e:38:
c7:09:0a:e6:f2:f2:42:2a:9e:b4:6a:f2:d7:26:bb:bc:56:36:
90:d0:23:86:16:62:bc:76:92:66:93:9e:ac:a5:b2:ad:61:78:
49:2f:45:4a:5c:06:e4:7a:40:85:d4:fc:51:7d:f4:fe:66:ff:
ac:14:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net