Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa
File: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (raw, json)
Hash identifier: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=
Subject key identifier: B2:1D:A9:14:B1:51:5D:0F:CB:34:76:3C:67:A9:04:EA:E5:46:26:C3
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 01941FFAB0F1B253729C5C0A3D13E4FFCE19
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201661
IP address blocks: 185.234.88.0/24 maxlen: 24
185.234.89.0/24 maxlen: 24
185.234.90.0/24 maxlen: 24
185.234.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b0:f1:b2:53:72:9c:5c:0a:3d:13:e4:ff:ce:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b21da914b1515d0fcb34763c67a904eae54626c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:bb:51:ff:00:69:fa:64:b5:4f:b3:f2:70:
ec:c7:9f:d8:ac:41:a8:4a:5f:c6:ca:dd:4c:5a:73:
e2:ba:ad:05:93:38:85:ed:56:11:eb:e5:f4:b9:b5:
a1:76:49:ee:3d:3e:cf:e6:a0:ce:ed:43:32:ef:87:
72:63:4c:c8:c2:fc:97:2a:ba:86:f7:7e:55:52:a5:
f9:b1:7a:78:b4:4a:c9:25:3b:0e:16:db:23:de:27:
20:54:47:04:41:e4:ef:76:96:f7:0f:19:ad:e9:09:
63:71:ce:48:63:45:a9:2b:7b:c3:6b:af:44:6e:5e:
19:b7:f4:62:07:83:b8:34:8b:51:18:e0:5f:99:a1:
8c:3d:65:9c:f0:2b:5a:0d:fd:83:c0:1e:b2:b7:cd:
71:b9:9f:68:29:79:8f:c1:cd:ef:7d:1c:f9:4d:f5:
cf:c5:61:e3:a0:4f:ed:04:f7:16:bf:8d:90:c2:3a:
03:67:32:70:bb:5c:48:55:9c:d6:9f:5f:2d:85:b1:
a9:da:3b:7c:0f:f1:df:3a:1b:d7:9d:2d:55:de:ca:
64:e8:1c:98:0a:b6:f3:79:7b:cf:57:33:fa:7f:ec:
cc:91:93:17:72:1a:3c:a2:09:e0:24:81:1b:cf:8c:
86:45:d5:b2:0d:f3:93:86:ac:44:a7:57:68:df:b9:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1D:A9:14:B1:51:5D:0F:CB:34:76:3C:67:A9:04:EA:E5:46:26:C3
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:a3:7d:3f:b8:ab:b5:43:5d:5b:84:07:a8:82:af:dd:ce:69:
37:24:f0:cd:6a:b1:ef:d8:4e:7c:d8:7d:c1:a8:05:26:71:4e:
b4:e3:2f:8d:a5:b9:79:96:3a:93:94:2c:97:a5:ed:70:f7:7f:
b1:f8:f7:bd:34:91:e4:57:de:69:8c:05:5d:0d:5b:f4:fa:be:
3e:1a:79:30:c1:45:a1:41:9a:4e:a0:c7:13:2c:98:a8:b0:25:
48:01:a6:58:de:e4:e9:5f:9f:7b:f9:bb:5a:51:e1:bf:5b:f2:
f9:cf:be:a4:52:3b:33:79:f1:e1:7d:75:76:17:62:d8:ac:56:
42:23:18:24:0c:e8:6d:27:b9:71:6b:d4:d8:1e:05:b0:a8:12:
89:21:86:c4:67:c4:14:fa:08:d0:c6:91:08:f3:cd:37:1d:d2:
4b:ed:f5:37:4a:6e:88:0c:1b:7d:ad:31:c2:f2:ba:20:62:78:
f9:e0:6f:e4:b8:bd:7d:32:c7:44:89:58:74:d5:02:40:18:a7:
83:85:60:dd:9d:08:5d:5a:8a:da:df:b9:a8:bf:dd:af:91:b6:
96:cf:f1:e7:bb:4f:d1:c4:1a:7f:7e:0b:bb:bc:dc:1c:70:d1:
ee:cb:12:18:09:53:b2:aa:fd:0e:e0:2d:ef:5a:de:79:f8:28:
17:6a:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net