Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/5ocobjXAQN7qODPTjOuuWzc3Drk.roa
File: 5ocobjXAQN7qODPTjOuuWzc3Drk.roa (raw, json)
Hash identifier: 14+OU8AbCkgUWRx9CUz2j/OQprhkWMpdBdWPi/5l58Y=
Subject key identifier: E6:87:28:6E:35:C0:40:DE:EA:38:33:D3:8C:EB:AE:5B:37:37:0E:B9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019521EAAD5B5AE01AE7C06F8B6C27333953
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/5ocobjXAQN7qODPTjOuuWzc3Drk.roa
Signing time: Thu 20 Feb 2025 05:53:02 +0000
ROA not before: Thu 20 Feb 2025 05:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5484
IP address blocks: 185.33.25.0/24 maxlen: 24
185.46.216.0/24 maxlen: 24
185.46.217.0/24 maxlen: 24
185.46.218.0/24 maxlen: 24
185.46.219.0/24 maxlen: 24
185.128.152.0/24 maxlen: 24
185.128.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:21:ea:ad:5b:5a:e0:1a:e7:c0:6f:8b:6c:27:33:39:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Feb 20 05:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e687286e35c040deea3833d38cebae5b37370eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:8d:1a:d6:b7:44:02:e5:3d:97:21:78:e8:
06:f2:1a:f8:71:6e:4a:bb:64:0e:2f:5d:2b:6b:4e:
bf:f6:b2:93:d0:d5:c8:bc:e5:2f:87:6a:90:0e:ff:
87:6e:d1:ee:67:c7:83:3a:f3:f5:82:21:eb:a5:2a:
e4:b1:a8:08:eb:0f:ae:f6:a4:25:91:b7:24:68:f0:
1b:c2:ac:f6:4d:e4:dc:b4:25:2d:63:f7:72:82:91:
4e:f4:fe:b5:34:97:44:35:c1:f9:11:7f:43:ad:94:
b6:fe:3e:51:1f:f3:54:25:b2:ad:07:4c:01:b8:13:
b2:61:2c:7b:33:59:e9:31:f4:6c:8c:4e:5a:a1:d2:
48:e6:d7:d2:19:c8:5c:4a:c5:65:73:50:aa:6c:76:
c2:96:76:36:39:6c:91:74:a0:7c:20:64:e9:d1:d2:
69:a5:55:a6:37:53:3f:fa:3e:73:0d:dd:74:c2:77:
ff:96:6f:8f:0a:4c:2a:33:52:a3:91:db:75:21:03:
cd:9c:f1:00:72:4b:ed:e7:cd:bc:aa:8f:bf:ab:c6:
48:76:52:09:2c:77:40:68:35:e8:5a:bb:9e:32:f4:
40:da:3b:72:77:e9:7e:d9:ed:3a:bd:1d:94:64:aa:
70:2f:d9:76:fb:41:c9:37:04:e2:7c:5e:47:dd:a3:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:28:6E:35:C0:40:DE:EA:38:33:D3:8C:EB:AE:5B:37:37:0E:B9
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/5ocobjXAQN7qODPTjOuuWzc3Drk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.25.0/24
185.46.216.0/22
185.128.152.0/23
Signature Algorithm: sha256WithRSAEncryption
72:c2:ef:38:7b:86:ab:f4:8a:94:b2:ae:69:56:8c:c0:fb:2a:
fe:ef:56:9c:80:a4:6a:86:07:82:c8:c1:e0:f0:46:7b:39:02:
a3:e6:4c:9a:27:ef:dc:18:c8:4d:d2:42:1f:ec:27:56:62:cb:
25:4e:5a:e7:38:f5:c4:79:f9:e3:80:d1:ea:b7:59:1f:ed:2e:
f2:7e:d8:be:50:7c:0e:46:d9:6e:97:ed:fa:e6:42:5c:c7:f6:
64:0b:71:1d:b8:60:c0:b9:92:b7:eb:92:cc:78:b5:5f:09:d6:
e3:0d:94:67:ab:b2:ed:93:f6:68:bb:c8:d4:57:c1:48:d1:0d:
b4:25:a0:ad:3b:35:05:37:bc:76:a9:a8:38:0a:11:b9:9b:ce:
7c:b3:24:95:e3:9d:62:80:55:72:a0:e0:02:14:0e:24:41:ae:
c8:73:90:c7:7a:b6:15:4a:de:d4:6d:db:a6:04:21:e7:df:27:
56:51:cf:db:b0:e2:c9:96:2b:9a:c8:ed:32:af:ca:45:09:df:
c3:0d:3b:40:14:6c:02:b2:fb:24:76:91:89:df:a6:2d:e9:dd:
b0:8f:5b:2c:fb:6a:a2:98:4b:30:47:f7:62:27:2f:a1:43:c6:
2c:e8:b3:5c:13:13:a2:00:bc:c3:35:93:43:b5:ca:de:4f:5c:
32:59:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net