Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/ArCJqTzX_sEk_DHHySgQMJUeLC8.roa
File: ArCJqTzX_sEk_DHHySgQMJUeLC8.roa (raw, json)
Hash identifier: c2rd+JdXNOMDPKYRrrcQLA7xUjenlWywhht/2+icFHw=
Subject key identifier: 02:B0:89:A9:3C:D7:FE:C1:24:FC:31:C7:C9:28:10:30:95:1E:2C:2F
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019611DA213C9781C4C6828DDFB0F9E3C86A
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/ArCJqTzX_sEk_DHHySgQMJUeLC8.roa
Signing time: Mon 07 Apr 2025 20:03:50 +0000
ROA not before: Mon 07 Apr 2025 20:03:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41981
IP address blocks: 185.105.252.0/24 maxlen: 24
185.105.253.0/24 maxlen: 24
185.105.254.0/24 maxlen: 24
2a06:3a80:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:da:21:3c:97:81:c4:c6:82:8d:df:b0:f9:e3:c8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Apr 7 20:03:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b089a93cd7fec124fc31c7c9281030951e2c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:aa:29:8d:80:b6:1a:49:1a:61:8f:38:12:
b7:f4:ef:b5:99:73:78:87:eb:f0:d7:68:33:59:f8:
79:28:fd:4c:bf:1d:b9:20:26:ea:f9:ae:91:e1:79:
62:29:d9:79:96:4e:07:fc:4b:d5:9e:80:66:1e:2d:
95:52:7c:f1:c3:1e:53:9f:3d:6e:b9:d4:c6:ce:8a:
53:bc:a6:8d:f2:52:d3:8c:4c:dc:b2:44:f7:86:2f:
b0:4c:cd:f0:2f:b6:e0:94:d7:ba:97:af:79:3c:5d:
85:72:d2:c6:cd:0c:16:3e:88:63:bb:67:0f:8a:b3:
69:2d:05:fe:5d:e5:c8:4a:03:a6:ef:46:42:4c:84:
ad:cc:ed:a0:cd:3e:dc:e4:65:6e:e9:dc:35:a3:37:
b5:5e:57:b1:f4:4d:eb:8d:01:d2:8e:13:8a:26:b3:
dc:1c:47:00:5b:5c:ff:27:86:f5:ef:3d:0a:19:55:
cb:35:d4:69:f6:89:c8:f5:2f:62:d2:7a:e9:d2:eb:
54:0b:24:66:4d:70:41:a4:83:38:de:b8:52:26:04:
f5:98:fd:35:82:1a:06:7f:f5:d3:d6:65:90:7b:42:
d5:cb:23:4b:5b:26:fb:fc:43:9a:4b:21:d8:35:b9:
44:d7:e9:ec:10:27:19:2e:7d:fd:a4:1c:a8:36:ac:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B0:89:A9:3C:D7:FE:C1:24:FC:31:C7:C9:28:10:30:95:1E:2C:2F
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/ArCJqTzX_sEk_DHHySgQMJUeLC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.252.0-185.105.254.255
IPv6:
2a06:3a80:200::/40
Signature Algorithm: sha256WithRSAEncryption
a7:e1:97:3f:38:3c:eb:ea:65:ea:e4:e3:7c:09:a8:23:72:74:
7c:b6:47:c6:91:60:2f:56:7c:e8:ef:85:d2:16:30:67:17:96:
cd:b8:6d:79:3f:b1:98:0d:23:38:a5:b8:98:1f:37:0e:4b:58:
ac:af:2e:ee:96:3c:cb:77:22:e4:72:2b:ad:d6:7f:35:95:f9:
22:a2:95:a1:c6:1e:59:34:c1:7a:f4:14:19:80:4e:e9:a7:3f:
40:91:c7:6c:56:0e:df:c1:fb:b3:ed:4e:83:9f:13:36:ef:a9:
f2:ae:af:6c:b1:31:8f:4f:02:7e:09:bc:85:90:6f:ef:a4:5a:
62:79:96:c4:67:b8:1a:ca:99:20:f9:21:3b:92:2c:93:f1:6a:
9c:4a:49:99:03:d2:33:83:83:11:5c:39:6b:5a:e7:bc:fd:5a:
4a:67:8c:a0:a4:74:35:60:05:0f:3b:b1:8a:ab:4a:54:8f:3a:
c0:e4:34:cb:82:80:2b:e4:54:2d:26:92:0a:3b:c3:28:ba:e9:
ac:de:59:68:0c:4f:51:2d:ea:ca:72:3f:4f:69:c6:4a:dd:84:
27:7e:f4:0c:58:86:66:6a:af:9e:2a:b8:ec:44:01:53:f6:80:
7b:44:14:dd:f7:13:7b:21:3d:69:7b:e7:26:05:96:9a:3a:9a:
0c:2b:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net