Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/z-aedfRRonuK4ZXzUIrNR4PdfsU.roa
File: z-aedfRRonuK4ZXzUIrNR4PdfsU.roa (raw, json)
Hash identifier: BNKK48T9xjSLXX7UcwlUuf7DP/yY5snaJUjNNyf//TA=
Subject key identifier: CF:E6:9E:75:F4:51:A2:7B:8A:E1:95:F3:50:8A:CD:47:83:DD:7E:C5
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 019427479411DDDF2FC617656918DA2B1286
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/z-aedfRRonuK4ZXzUIrNR4PdfsU.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53589
IP address blocks: 85.236.152.0/21 maxlen: 24
146.88.232.0/21 maxlen: 24
185.22.108.0/22 maxlen: 24
185.22.111.0/24 maxlen: 24
185.221.180.0/22 maxlen: 24
209.16.158.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:94:11:dd:df:2f:c6:17:65:69:18:da:2b:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfe69e75f451a27b8ae195f3508acd4783dd7ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:35:fb:ca:0a:db:cb:95:03:2e:a3:37:0d:
2a:8f:90:1d:81:26:03:2b:c7:57:7e:34:9d:d2:79:
93:42:e2:42:67:74:80:8d:44:4e:57:47:64:2e:2a:
0a:f5:0f:28:66:93:ec:11:f1:7a:2c:e9:d1:ff:af:
9f:ef:f0:c9:92:93:d0:1c:c4:ed:5c:5e:39:78:29:
11:34:75:e4:c5:87:1b:84:0c:46:07:99:69:63:ce:
12:21:35:e3:72:92:cd:87:74:75:d7:6e:79:f9:26:
a5:ec:e0:62:8a:58:27:aa:61:3d:c1:70:d8:ff:4c:
01:65:2b:4b:18:20:5c:67:59:59:31:a0:6d:41:ee:
36:e6:12:a4:48:ed:c6:d1:06:9f:0e:4b:9a:b6:df:
35:05:7b:d6:db:74:c3:ac:f9:75:e6:0b:ce:f5:cb:
5c:ee:2c:de:e0:b7:7d:91:ba:f1:03:3b:99:9e:c3:
2a:41:e5:90:0a:47:3f:ed:1e:cb:10:12:0c:b2:e9:
ca:be:00:0d:7a:2b:e0:ff:ae:9a:6e:41:61:75:31:
4a:f5:d6:83:07:f8:35:b6:e0:87:8c:c9:5d:a2:1c:
a2:91:1e:cf:a7:e4:05:b6:fc:93:69:58:1c:54:11:
1a:dc:15:e6:63:72:d6:c7:fe:c1:ba:41:da:ef:1e:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:9E:75:F4:51:A2:7B:8A:E1:95:F3:50:8A:CD:47:83:DD:7E:C5
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/z-aedfRRonuK4ZXzUIrNR4PdfsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.152.0/21
146.88.232.0/21
185.22.108.0/22
185.221.180.0/22
209.16.158.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6d:f6:af:de:25:1b:9b:34:19:5f:f1:9e:a5:c8:2f:83:c0:
62:cd:1e:29:68:7a:ee:cb:34:57:e8:c3:df:fd:fe:fe:f9:66:
0f:93:dc:d0:b0:c1:9b:38:af:ce:5c:44:81:10:bb:4e:1e:68:
8d:b4:60:1e:68:c4:3e:03:ec:bb:74:9e:cc:80:70:82:05:46:
d7:17:ee:8a:26:77:be:72:57:b3:6f:01:89:65:55:a6:53:f1:
85:88:58:d5:29:90:90:57:69:a6:59:51:1d:af:7b:d6:6a:e3:
6d:c9:ac:5c:32:ed:4b:ac:55:34:31:ea:b0:af:0e:dc:b0:dc:
1e:fe:ee:0f:f8:a3:48:6b:a4:4d:99:46:3e:93:e3:b4:6a:8e:
e2:4b:c1:64:cb:56:3e:c4:07:86:d1:ef:0a:2a:5a:ee:be:8a:
f3:4a:9b:fa:b2:40:0b:ad:47:6a:d0:29:ad:51:77:76:b7:ac:
68:7d:0a:8a:64:b0:19:d1:31:46:91:4e:2a:50:47:30:53:03:
49:f5:99:40:5d:62:b2:a1:45:b0:c3:9e:c3:9c:7a:6f:48:7a:
23:c3:59:b0:af:fc:44:82:7e:59:e3:a4:2a:84:a5:71:92:f6:
14:69:8a:14:37:a0:9a:73:9c:5f:82:f9:f9:fd:70:e3:81:33:
87:d7:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 14:40:31 2025 by rpki-client on console.sobornost.net