Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-JRpgmS804GixqJbmGbHX0P7qyA.roa
File: 1-JRpgmS804GixqJbmGbHX0P7qyA.roa (raw, json)
Hash identifier: qO4nOxed/i6SpvujBdGJWYKSPFxsyuUbQZn5El91oTA=
Subject key identifier: F8:94:69:82:64:BC:D3:81:A2:C6:A2:5B:98:66:C7:5F:43:FB:AB:20
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C84AB707B30201AF4DB9F48EE2F29
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-JRpgmS804GixqJbmGbHX0P7qyA.roa
Signing time: Thu 02 Jan 2025 09:50:33 +0000
ROA not before: Thu 02 Jan 2025 09:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199096
IP address blocks: 85.172.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:84:ab:70:7b:30:20:1a:f4:db:9f:48:ee:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f894698264bcd381a2c6a25b9866c75f43fbab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:96:c0:e7:ef:b0:c1:c1:cd:3d:a5:6b:28:
9e:e4:89:f2:d9:da:46:de:72:93:1c:da:90:84:fb:
02:60:74:d0:77:34:47:64:2f:c2:5c:e0:73:fa:e3:
ac:22:64:54:85:ab:e1:d2:0c:d7:cb:d9:8a:c1:a4:
09:19:28:b3:28:b2:9f:e1:37:29:ef:50:7d:5a:03:
9a:0f:90:10:de:ef:03:d3:cc:04:b9:85:58:e3:91:
7b:c9:05:ad:47:85:9d:10:73:df:77:c3:9a:6f:cf:
94:e9:6f:dc:18:21:59:62:06:dc:e1:27:b2:19:56:
db:9c:b0:81:97:c2:3b:0d:07:2b:23:09:ce:80:bb:
d7:86:65:12:63:51:52:f5:10:d4:a4:9f:85:07:c5:
1c:99:2f:b5:0c:8f:c5:cb:10:95:74:ca:f6:31:2a:
53:96:d7:55:a5:02:5e:13:f5:68:06:58:23:80:de:
d8:97:d6:4c:bd:6a:31:cb:41:5a:41:94:7d:ad:a6:
0a:e4:99:1c:da:a4:a3:49:87:6c:48:5d:fd:28:37:
53:fd:d1:f0:e0:68:d4:27:56:94:22:51:c2:1b:35:
db:b2:48:93:75:dd:31:9a:5c:5e:87:e5:ef:d9:44:
46:91:a1:d8:89:90:eb:e5:32:94:cf:28:73:86:d7:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:69:82:64:BC:D3:81:A2:C6:A2:5B:98:66:C7:5F:43:FB:AB:20
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1-JRpgmS804GixqJbmGbHX0P7qyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.172.168.0/23
Signature Algorithm: sha256WithRSAEncryption
52:b9:6f:9b:1b:04:05:6f:78:48:67:91:f4:0e:aa:67:ca:78:
20:94:69:97:ea:2e:d5:59:fb:9a:af:8e:2c:7d:f8:9a:02:0d:
84:96:98:04:ab:cd:10:ae:7f:e9:64:1c:80:11:d7:d6:df:e6:
3e:b6:95:3c:d6:77:02:b1:90:76:ed:c1:d0:a8:e0:13:2b:d2:
90:c6:db:48:49:99:96:b6:76:d1:b4:e4:91:aa:f0:24:03:11:
f2:52:c1:41:57:f9:56:0e:28:02:f0:8a:05:88:40:50:40:d7:
95:a3:ce:f9:1a:2f:57:06:bb:44:fb:b3:1b:7d:85:63:ab:9e:
59:4c:75:d6:1e:5d:5a:fd:84:32:47:df:c6:e7:0a:2c:c8:60:
04:09:d5:a6:50:46:2f:1f:07:28:48:25:4d:6c:0f:46:f6:06:
9e:49:e7:25:ca:ba:64:e5:b8:8d:05:e7:3a:49:d2:7a:ff:11:
b2:72:e3:83:61:a6:5e:1c:88:14:44:37:a2:67:1e:01:4c:66:
56:6e:6e:a8:6e:7f:6a:21:4a:57:bc:da:5c:76:39:a0:2a:d3:
69:25:41:86:fb:b1:34:8d:e1:d4:2e:08:7b:74:14:36:45:29:
d8:31:e6:48:63:2d:2d:ef:56:75:de:ac:fb:90:e4:9c:f1:6c:
50:04:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net