Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa
File: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (raw, json)
Hash identifier: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=
Subject key identifier: 89:0A:DB:DD:85:D5:7E:4C:20:23:0E:EA:73:B1:41:62:3C:B8:88:44
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01942746E8DD4E220F80C661643D859100C5
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa
Signing time: Thu 02 Jan 2025 13:49:06 +0000
ROA not before: Thu 02 Jan 2025 13:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201749
IP address blocks: 195.85.223.0/24 maxlen: 24
195.85.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:e8:dd:4e:22:0f:80:c6:61:64:3d:85:91:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jan 2 13:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=890adbdd85d57e4c20230eea73b141623cb88844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:9b:4c:b4:12:8d:4a:94:4f:a1:73:62:54:
ce:61:c9:91:6f:75:7c:f2:83:c1:ac:79:a0:29:54:
c5:26:fd:a4:c0:58:33:63:0d:b9:91:fb:c5:11:13:
75:f3:7d:0d:aa:9a:f6:99:fd:b1:3f:48:53:25:8e:
44:4c:94:2d:74:bc:a0:22:77:b5:69:e5:3b:aa:b7:
08:3f:d7:56:67:d8:6a:c8:b0:09:48:85:70:a9:57:
c0:e5:a8:55:3b:c7:6b:c4:51:39:ce:db:48:87:10:
b3:9b:ae:55:f6:4c:96:3d:44:65:3a:ca:94:a5:d4:
fe:88:77:5f:b2:a2:67:f2:1c:78:5b:5e:1c:55:9b:
5a:bd:26:86:56:4a:ed:59:9a:6b:60:f5:34:70:e7:
d8:fe:d6:94:ba:bf:25:28:d4:91:2b:35:cf:bb:39:
dc:0c:ae:45:40:07:5b:00:a0:3d:be:06:c1:5c:71:
9a:d0:d0:3c:a8:42:51:ac:e2:64:95:95:a9:e0:a4:
2a:a9:de:be:2a:6b:42:1b:2b:97:b0:ca:64:a9:80:
f3:e8:9d:32:dc:64:21:f9:3b:83:d6:90:60:27:a6:
bf:84:55:eb:4e:8f:84:da:d0:da:c7:54:2a:e6:25:
3f:c5:26:4d:f0:9d:4c:7e:41:c3:21:9f:62:af:f3:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0A:DB:DD:85:D5:7E:4C:20:23:0E:EA:73:B1:41:62:3C:B8:88:44
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.223.0/24
195.85.226.0/24
Signature Algorithm: sha256WithRSAEncryption
20:00:af:06:89:78:aa:ed:a7:e8:f8:24:5c:7d:97:6f:31:86:
54:60:c4:6c:e9:69:0a:75:3d:37:94:ce:28:22:bb:24:8b:77:
00:92:d7:65:f9:a0:70:0b:67:e9:cc:d1:da:53:2e:6c:41:fa:
2d:03:c2:ce:d6:54:33:b5:b4:4d:59:07:bc:65:92:c0:d0:27:
56:2e:79:10:ef:ef:48:b8:2a:58:53:86:6d:5e:60:3a:d4:1d:
80:2e:0c:bb:b8:e0:bf:bf:0e:b8:02:fd:65:10:08:2c:81:9a:
ad:d1:4a:45:cb:59:94:33:dc:e6:73:a2:66:b5:26:b8:99:f7:
01:09:d7:0e:5d:51:10:f7:2b:ec:ee:aa:39:04:01:0a:df:fd:
9a:c2:a7:68:8e:8c:c9:45:9f:d2:5c:c9:10:5f:27:1f:bb:32:
a8:a8:aa:db:90:cc:0d:e4:9d:f6:d3:1c:76:04:4b:69:45:06:
a0:99:45:b2:9c:ef:4e:46:e1:61:82:97:32:e3:e7:a3:6a:67:
05:09:83:ae:1a:c2:32:51:e3:22:a8:f0:8f:e8:76:3c:fb:39:
65:02:c8:c2:50:6a:47:1c:76:ca:9e:56:71:b3:d8:6a:bf:da:
45:35:87:32:e0:92:40:ae:87:41:c9:43:66:d4:cb:59:f6:0c:
69:1a:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net