Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa
File: 0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa (raw, json)
Hash identifier: oJ2JUNCDknxTjzNTxQM1bVAa79T0L1UKQs2YDAYDgxc=
Subject key identifier: D2:4F:0D:53:46:1F:D8:07:87:1D:B8:93:A6:70:17:BC:00:6C:D6:15
Certificate issuer: /CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Certificate serial: 0194266B411D13082101511B33FED7D7E778
Authority key identifier: E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa
Signing time: Thu 02 Jan 2025 09:49:10 +0000
ROA not before: Thu 02 Jan 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205594
IP address blocks: 185.81.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:41:1d:13:08:21:01:51:1b:33:fe:d7:d7:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43bac4a1bbba56cc434861a4c769ff9ce2d15ec
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d24f0d53461fd807871db893a67017bc006cd615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:23:af:e4:90:c9:40:35:f2:c5:74:e2:ad:
6e:4d:86:af:18:3f:76:eb:b9:6b:af:0a:48:66:71:
ec:0e:8f:7c:99:ed:8c:79:82:73:c3:e1:9b:eb:01:
c5:b6:57:58:4d:30:1a:cb:42:9b:bc:db:cf:d5:0c:
c7:fe:28:e7:db:2b:cd:2f:d1:dd:8b:35:8c:e7:d6:
a4:65:27:db:64:a2:ec:8c:fd:61:92:98:37:f9:35:
ee:63:97:64:24:50:16:07:7d:64:7a:95:db:2a:50:
ee:62:82:a2:00:6d:87:2f:7b:e5:94:8d:16:e9:2e:
a3:b2:22:44:f2:67:b8:06:1d:dd:a8:4f:ba:eb:d7:
c8:c3:24:1e:4b:37:c8:ec:fa:36:91:68:f9:cc:50:
09:8e:aa:fa:db:8f:fb:88:15:cc:95:89:20:27:18:
17:5a:56:32:3f:19:4a:2d:66:fb:bd:6d:a3:2e:86:
ba:e6:76:0c:91:e8:c6:2f:1c:5c:3c:63:02:f1:07:
aa:63:61:bf:c7:c8:7c:b0:1d:88:93:46:39:6c:1d:
96:74:c3:9a:18:aa:ca:a0:a2:6d:45:72:49:ed:f2:
00:67:4b:5d:51:8b:42:50:13:7b:80:2f:6c:04:b8:
1d:73:cc:28:c0:c6:21:ad:9a:0c:4a:b2:21:87:88:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:0D:53:46:1F:D8:07:87:1D:B8:93:A6:70:17:BC:00:6C:D6:15
X509v3 Authority Key Identifier:
keyid:E4:3B:AC:4A:1B:BB:A5:6C:C4:34:86:1A:4C:76:9F:F9:CE:2D:15:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DusShu7pWzENIYaTHaf-c4tFew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/0k8NU0Yf2AeHHbiTpnAXvABs1hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2ab0f-be43-4665-bbaa-1cd3cb07ef5d/1/5DusShu7pWzENIYaTHaf-c4tFew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e7:7a:41:56:d4:39:6d:bf:c3:47:07:1d:4e:6f:4f:a9:62:
6f:30:8d:53:e2:85:5f:9c:6f:08:93:a3:1a:86:56:39:26:9d:
97:ca:9c:78:ac:cd:49:48:50:5a:fc:a9:56:80:7f:48:cf:66:
a8:6b:8a:f3:d1:86:69:3f:18:e8:5d:a6:4b:fa:e9:ff:f1:e7:
a5:8b:53:28:4f:cf:33:d3:2a:0c:b7:8b:b5:7a:41:0f:3b:cd:
dc:db:34:b4:83:df:44:3d:a8:4e:86:91:b3:29:88:89:a3:29:
4b:21:f6:35:68:ff:e8:51:d5:1c:91:79:27:89:12:d3:b5:0a:
5b:76:89:de:c4:79:91:18:17:b3:2f:65:85:d4:f8:0c:d0:f6:
6a:f1:00:83:c2:c4:79:f3:e2:e2:11:8c:3f:48:93:02:3b:f7:
4d:af:60:6e:1a:cd:c3:67:b0:a2:30:6c:08:77:1d:a7:9c:13:
8b:0f:a5:30:1f:3f:42:cc:75:07:ad:7b:6e:9b:21:fb:ad:9b:
7f:4d:19:a8:df:98:5b:f2:2d:58:f2:80:d7:c5:2e:23:ad:00:
aa:0f:ba:dd:8f:f3:2d:fa:de:ef:51:11:8d:70:d3:8c:55:78:
08:92:a5:a0:6b:43:68:26:67:76:22:6c:4f:c4:8f:43:c3:66:
d4:69:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net