Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa
File: 3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa (raw, json)
Hash identifier: DxwsnC6ETAvm52TcakM8AMF0oIdLtUXLvOU8uNsDQAw=
Subject key identifier: DE:36:55:98:86:17:46:91:46:69:4A:4A:17:19:B1:83:AC:A4:D2:FE
Certificate issuer: /CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Certificate serial: 01941F8C748CA4ACAB5AD2B2BCF1FCA8FE33
Authority key identifier: 30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58128
IP address blocks: 185.155.204.0/24 maxlen: 24
185.155.205.0/24 maxlen: 24
185.155.206.0/24 maxlen: 24
185.186.180.0/24 maxlen: 24
185.186.181.0/24 maxlen: 24
185.186.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:74:8c:a4:ac:ab:5a:d2:b2:bc:f1:fc:a8:fe:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306d618355bd8937f75bb4650bb5c1af70f9a12e
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de3655988617469146694a4a1719b183aca4d2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:de:1e:47:c2:2d:c7:70:4b:f1:91:87:18:
78:aa:fe:85:a9:c1:23:90:5e:ee:5b:72:9b:ba:48:
90:fa:95:b7:f3:8e:f9:91:84:4b:48:b3:54:ad:a9:
d3:ef:d9:45:b7:b7:25:04:ef:1b:0d:45:d9:5f:75:
75:cc:ad:a5:3e:b7:77:ee:08:70:23:ff:a2:8f:de:
ed:ab:37:66:42:8e:44:73:2d:60:c6:31:03:49:4e:
bb:8f:d2:bf:9d:1b:12:3d:5f:ff:2a:f5:52:81:67:
a0:6b:f5:58:8c:74:cc:76:9e:5f:36:bc:1a:94:e4:
a6:59:4e:f6:97:f9:ec:29:16:18:11:e6:f3:73:18:
f8:0f:53:4f:db:83:c0:db:e6:11:f3:e6:20:f4:ba:
b5:d7:25:b9:1d:bd:97:c2:8a:72:86:10:c5:1c:0c:
75:ec:71:2b:c1:01:7c:ce:8d:fc:4c:bf:a8:77:88:
56:0a:53:0e:7e:a0:46:7d:aa:bb:f6:07:10:2c:55:
10:bf:ff:17:65:a6:96:d7:a2:e2:36:1f:6e:c3:4d:
c6:dd:ca:21:d6:90:a2:0f:e7:04:88:c2:73:ec:7b:
21:ef:e1:74:a0:17:bc:91:1a:cf:b0:dc:c4:94:7e:
19:ff:ee:69:ba:f0:b7:b6:d7:43:81:ab:52:bb:8b:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:55:98:86:17:46:91:46:69:4A:4A:17:19:B1:83:AC:A4:D2:FE
X509v3 Authority Key Identifier:
keyid:30:6D:61:83:55:BD:89:37:F7:5B:B4:65:0B:B5:C1:AF:70:F9:A1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MG1hg1W9iTf3W7RlC7XBr3D5oS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/3jZVmIYXRpFGaUpKFxmxg6yk0v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3cde9b-3705-4dc3-8d7e-516ffd87376c/1/MG1hg1W9iTf3W7RlC7XBr3D5oS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.204.0-185.155.206.255
185.186.180.0-185.186.182.255
Signature Algorithm: sha256WithRSAEncryption
1f:d6:cf:3f:7a:e8:98:56:01:d2:b8:24:10:4a:6f:c9:bc:5b:
c8:23:83:f9:7c:ef:91:39:a0:34:db:30:05:1e:1c:33:74:b0:
b4:88:44:ba:88:41:c1:92:65:bc:44:00:85:68:49:c6:0d:80:
4f:7d:fc:e1:f3:09:8e:4d:31:09:de:d8:68:ac:81:ea:aa:89:
da:5c:c5:81:e1:4e:aa:a5:02:65:76:db:ac:2a:a8:28:30:f3:
5f:d1:02:24:07:14:c8:38:ad:37:c1:30:66:a9:d9:0a:8c:6e:
b6:5a:76:12:9e:c4:a6:38:df:de:65:40:0e:36:51:da:ff:a8:
ed:36:df:d4:5a:49:22:76:72:1b:45:7f:13:d0:8c:d1:3a:9d:
39:2a:44:f0:57:9f:21:f3:50:3a:8f:6d:67:72:e4:bb:e4:13:
c3:3c:25:8f:3e:0f:33:b9:f9:52:e1:1f:5b:f6:9f:b0:21:28:
bb:84:ff:26:ed:0d:1f:13:1d:b2:88:03:05:81:91:26:08:b0:
04:04:b9:24:30:5c:c5:8a:6f:c9:4f:1c:d6:37:56:6b:6d:d2:
af:f6:06:74:2d:ba:d2:de:8c:73:08:ca:33:58:1b:22:02:55:
80:2b:2c:d8:f4:58:0c:da:9b:8a:d5:52:4c:19:cf:8d:0b:9d:
c6:ed:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net