Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa
File: ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa (raw, json)
Hash identifier: cmWFvWsaKmng7ap8MPbk+Im12d7rE+Ec0a+YGQdZ6rM=
Subject key identifier: 6B:2F:E7:93:47:D1:97:C1:56:A0:8B:3A:5B:D7:D6:20:AE:D6:70:1C
Certificate issuer: /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial: 019424B382E2FAA1C9ED5305A9AA70DF5C40
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42162
IP address blocks: 85.31.152.0/21 maxlen: 21
185.70.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:82:e2:fa:a1:c9:ed:53:05:a9:aa:70:df:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b2fe79347d197c156a08b3a5bd7d620aed6701c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:19:95:90:dd:8a:3b:ce:0c:77:1e:fb:41:
63:26:c3:9e:33:62:98:ae:23:54:b0:64:a0:0f:df:
b3:63:df:8c:15:4d:c2:62:eb:44:21:68:34:87:42:
e3:9e:ad:3b:b2:02:dd:66:cb:10:53:9c:99:82:70:
90:b3:95:d7:59:22:b2:c8:40:9c:18:b7:5d:e1:6a:
85:8b:6e:e5:d3:4a:23:c1:37:3a:78:11:1a:59:a1:
51:d5:87:9a:71:7d:42:c4:08:5f:16:0a:14:a5:b5:
e6:60:ce:d2:42:1c:95:32:8d:f5:b5:35:61:36:37:
67:57:b8:6c:10:18:42:dc:f0:7a:97:61:75:f5:67:
d5:6a:07:ff:d3:56:b7:ce:32:ff:4b:4d:17:07:32:
a3:be:a8:59:7b:14:23:bd:7d:e2:28:ac:fc:5e:11:
06:fc:bf:ba:ea:ed:dc:1f:e2:0b:63:d2:a9:9d:c4:
4c:22:56:66:40:de:f5:3f:90:94:9d:9d:d3:c4:5b:
79:c7:14:35:74:08:0f:a0:7f:7c:f4:bc:35:44:fc:
f7:52:50:c7:60:73:f1:f6:93:91:96:a8:9f:52:71:
82:25:29:3b:9f:5d:99:61:57:80:66:1c:eb:13:9c:
72:3a:f9:fb:38:89:99:1f:06:6d:98:1b:d3:3a:7c:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:E7:93:47:D1:97:C1:56:A0:8B:3A:5B:D7:D6:20:AE:D6:70:1C
X509v3 Authority Key Identifier:
keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/ay_nk0fRl8FWoIs6W9fWIK7WcBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.152.0/21
185.70.80.0/22
Signature Algorithm: sha256WithRSAEncryption
45:c7:3c:0c:40:ba:ec:44:20:8f:97:6f:08:9c:c5:16:7c:e5:
78:2e:c7:7d:f9:9a:77:5b:d3:0e:8f:b9:08:bc:ce:cd:1e:e2:
77:93:8b:63:3f:ca:13:ca:45:00:cb:f2:1b:e0:d6:f2:5b:d9:
1e:6f:f4:79:da:f5:12:cd:2a:f8:16:2e:0e:c4:89:62:b7:b7:
04:43:b7:dd:11:69:85:75:56:33:47:54:09:b9:fc:fe:11:f5:
8c:81:22:b7:fa:33:38:33:1c:f2:c6:48:01:36:6b:b7:c6:88:
b9:1a:a5:33:de:30:ef:40:5b:a5:3b:5d:4b:45:36:ce:54:fc:
e8:0b:e2:fb:10:7d:db:20:53:a7:9f:6b:5c:35:a3:5a:7a:25:
bf:c8:c8:6c:53:07:97:28:65:0f:89:d3:45:b5:14:fa:f8:4a:
99:83:fd:c3:89:da:23:3f:a6:40:92:28:c0:2d:ee:7c:ce:b8:
a3:80:73:78:3f:36:df:34:8e:f4:33:6f:b0:2c:9c:96:fc:c7:
33:63:fd:00:c8:a9:31:ce:b7:6a:59:dd:b8:4a:b4:22:23:fc:
be:12:2b:28:5b:ad:0d:b0:7b:7c:86:2c:76:9d:e8:d6:56:d9:
ac:bf:9e:07:4d:db:7e:6c:f2:4f:38:67:cb:ae:45:90:cd:cd:
74:80:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net