Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/2d0NREbfTK2FI7htmEEh4N4XLQs.roa
File: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (raw, json)
Hash identifier: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=
Subject key identifier: D9:DD:0D:44:46:DF:4C:AD:85:23:B8:6D:98:41:21:E0:DE:17:2D:0B
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 019423D7930E09B485D7A9F9CDBA0CB713D8
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/2d0NREbfTK2FI7htmEEh4N4XLQs.roa
Signing time: Wed 01 Jan 2025 21:48:37 +0000
ROA not before: Wed 01 Jan 2025 21:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50472
IP address blocks: 185.106.84.0/22 maxlen: 24
195.54.164.0/23 maxlen: 23
2001:67c:20a0::/48 maxlen: 48
2a02:8000::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:93:0e:09:b4:85:d7:a9:f9:cd:ba:0c:b7:13:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jan 1 21:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9dd0d4446df4cad8523b86d984121e0de172d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:6d:82:97:32:a6:06:18:1c:ce:29:9b:a3:
7e:71:93:ed:11:c2:50:88:1f:fb:55:b1:bc:9c:06:
c4:51:aa:3d:46:90:c4:13:a3:19:1f:d7:8d:cf:84:
5c:3d:e3:e9:a4:ca:6d:8d:d5:0c:8e:8f:c4:ba:55:
6a:03:0d:1b:5e:be:0f:42:5c:42:78:47:f2:3f:d0:
4e:5d:16:62:24:52:8d:f1:7b:25:77:23:31:73:3d:
87:93:79:3e:a7:e2:12:6c:5e:5a:8f:18:e6:d1:88:
8b:cf:3d:c7:c5:2d:08:6a:71:37:6d:c1:29:db:6a:
9f:b9:e6:cf:4c:01:31:6a:34:89:b6:67:d6:95:f2:
f7:1f:dc:c7:0e:e7:7d:49:5b:94:fb:51:f2:37:98:
96:fd:ea:6b:2b:1d:4c:8c:90:38:64:43:07:7b:cb:
bb:17:c9:ce:0f:88:d1:cc:b3:d3:e8:1a:65:7b:5c:
b4:0b:c2:dc:a1:8b:c2:64:ec:3e:60:bf:fc:27:63:
13:8f:02:5c:46:5d:d3:a1:3b:40:d5:a1:b1:aa:da:
c7:1e:8b:b1:a1:74:31:bc:c9:ee:33:f6:29:0c:cb:
7a:74:1e:19:df:d1:99:44:c9:92:68:66:f1:21:9b:
41:61:ff:0e:e5:e6:52:9a:b4:64:f8:3f:bf:ef:dd:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DD:0D:44:46:DF:4C:AD:85:23:B8:6D:98:41:21:E0:DE:17:2D:0B
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/2d0NREbfTK2FI7htmEEh4N4XLQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.84.0/22
195.54.164.0/23
IPv6:
2001:67c:20a0::/48
2a02:8000::/32
Signature Algorithm: sha256WithRSAEncryption
ae:9e:ca:14:63:5b:17:52:5b:76:9a:5b:f6:4f:80:e0:33:b2:
f2:3c:06:21:59:e4:65:8c:da:fb:e3:95:3e:4d:09:fd:54:45:
f5:a7:27:9e:69:52:f3:64:ed:0f:4b:5f:f3:f0:35:a9:d8:a5:
ba:82:77:fd:5e:3c:ea:1a:4b:cd:c0:a1:a4:d9:3b:46:28:ed:
c7:80:36:2e:3d:d8:9b:aa:e0:94:31:8d:d3:14:db:6a:34:23:
5c:d9:80:c0:59:c1:9f:c1:fa:44:9b:ba:69:5f:20:31:e1:06:
4d:ac:46:8c:21:c8:3b:76:12:bd:bd:d7:10:d2:dd:15:b3:b0:
4a:d9:d1:b6:1b:de:25:94:24:50:c4:bb:8f:3d:b3:bf:e1:1e:
2d:e9:1d:41:23:c8:7c:ec:4a:13:76:e6:59:71:bc:9b:99:70:
5a:4f:a4:32:2c:33:47:b8:25:28:60:fc:7c:89:fa:83:58:44:
ee:85:52:fb:e6:c5:5b:ba:4b:70:78:09:2b:3e:93:dd:67:3f:
f0:23:42:9a:a6:f3:da:eb:e5:04:fb:81:4e:4e:68:4b:f3:72:
7e:e9:5c:c0:f4:6d:54:ee:cf:ea:57:40:2d:14:6e:bf:61:46:
fc:4a:93:1b:2f:3d:f6:12:5f:a6:a4:a3:25:1e:fe:9a:35:8e:
12:a0:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net