Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/UnbwSxH6ZVeEnUksjRft9S3sebQ.roa
File: UnbwSxH6ZVeEnUksjRft9S3sebQ.roa (raw, json)
Hash identifier: 9U4mL4N8d7vors4YWo2644UK3bJphFQDyoU+KjBkOjc=
Subject key identifier: 52:76:F0:4B:11:FA:65:57:84:9D:49:2C:8D:17:ED:F5:2D:EC:79:B4
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 01942748464F2EB451806F592DAA1F35A1AA
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/UnbwSxH6ZVeEnUksjRft9S3sebQ.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215033
IP address blocks: 85.90.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:46:4f:2e:b4:51:80:6f:59:2d:aa:1f:35:a1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5276f04b11fa6557849d492c8d17edf52dec79b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:9d:fc:92:b3:84:e9:71:d2:bb:3c:ae:f1:
63:92:e1:a6:cc:a1:f8:18:15:e8:b8:da:b6:18:17:
be:f1:c0:7b:bd:61:cd:1b:cf:3c:db:f7:79:ee:7e:
f0:74:3b:21:21:a0:c7:61:8c:11:49:5e:f0:a5:93:
ac:11:41:cb:33:61:29:36:ba:74:f6:ce:dc:33:90:
83:9c:b9:7d:f3:81:68:84:66:4f:26:a1:f0:3b:17:
6c:a2:e4:7e:21:5e:c2:02:38:68:ee:15:57:c0:b8:
9d:e7:5a:e2:51:c1:32:ef:b2:69:f5:9c:09:78:e4:
a0:71:43:02:bf:3d:b8:ea:eb:a8:31:c1:1a:3f:d2:
e7:5d:c9:b9:4e:ac:eb:94:75:92:69:6d:f3:1e:3d:
8a:57:f0:de:aa:f9:9d:be:3c:99:92:8d:91:c6:57:
b4:67:e5:f3:81:52:43:64:87:ed:16:30:aa:78:12:
a5:84:ba:a1:13:fc:40:f2:31:f6:81:3e:4e:e2:4f:
03:db:22:e1:8d:ec:af:f5:48:bc:e0:fd:a9:c1:d5:
67:5e:b9:9e:6a:ab:45:84:e6:5b:0d:bb:46:80:fe:
70:bf:1a:62:5a:98:55:4b:27:99:34:f0:29:97:4e:
10:f1:40:91:dc:ea:b0:9a:62:0e:97:b5:0a:be:64:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:F0:4B:11:FA:65:57:84:9D:49:2C:8D:17:ED:F5:2D:EC:79:B4
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/UnbwSxH6ZVeEnUksjRft9S3sebQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.90.210.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:82:ac:5d:37:ee:7e:01:93:81:c9:98:5e:2f:05:56:09:cf:
94:cc:79:2b:5d:74:bd:89:23:5a:b3:b8:d8:32:dd:0a:9b:51:
e2:da:43:4d:43:c7:48:12:b1:85:2f:06:fd:60:cb:7e:4f:c7:
d2:78:93:79:84:d2:d4:d7:27:bc:0f:3a:68:41:24:9f:13:1b:
1f:86:5c:fd:3d:4c:98:d2:f1:0a:97:19:70:6d:30:af:c6:94:
63:15:07:be:f3:65:9b:d4:91:26:bb:16:de:23:c2:19:83:34:
96:cb:c3:c6:7a:ee:cc:f6:13:eb:da:e2:a9:b0:e5:04:b4:a1:
0a:eb:ed:34:e2:8f:8b:60:b2:2a:0f:2e:db:04:69:4a:15:be:
f9:b6:97:b8:13:cb:fa:24:8a:a0:40:2c:88:a5:cc:af:fd:29:
21:2f:70:2f:97:e2:49:93:1d:c9:a8:0e:5b:d4:98:b0:13:6e:
55:93:66:29:1a:d2:5b:e7:2f:7d:bc:5f:38:3c:80:84:6f:0e:
c3:96:9c:97:59:d1:7d:7c:0b:d4:dc:ec:8f:be:a5:e5:25:71:
bc:bb:37:30:36:82:87:40:f6:b9:82:fd:30:23:74:90:87:cf:
b8:8b:5c:90:96:6d:4b:70:c5:af:b1:84:6c:9c:e1:8c:2c:f9:
fd:87:c2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:05 2025 by rpki-client on console.sobornost.net