Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa
File: ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa (raw, json)
Hash identifier: jpk5x0LJxA24GS/spf+1miQnvaNt5hobGzGQml9l9aM=
Subject key identifier: 65:1C:CA:C7:2D:73:30:16:40:2A:58:AB:9E:3F:5F:E2:0A:FD:A7:EF
Certificate issuer: /CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Certificate serial: 0194266B55B1FA899E1A59B9E81CCDFDC820
Authority key identifier: 2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206668
IP address blocks: 185.179.124.0/24 maxlen: 24
185.179.125.0/24 maxlen: 24
185.179.126.0/24 maxlen: 24
185.179.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:55:b1:fa:89:9e:1a:59:b9:e8:1c:cd:fd:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0254bae699a6c6fcb67ee4ba3b01d02f18099d
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=651ccac72d733016402a58ab9e3f5fe20afda7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:12:8c:9b:88:c2:81:06:db:07:b0:cb:8a:
f9:cf:38:5a:8c:e9:4a:fe:65:73:22:a8:23:56:82:
f9:19:ef:95:d4:ca:9e:e0:fb:19:44:6f:b8:ce:be:
4f:bb:84:90:e3:e8:1a:08:71:9a:4c:72:6d:41:31:
48:62:70:90:dd:f6:3d:29:2a:65:0b:0c:7a:c1:03:
37:e0:24:b4:3c:bf:bb:68:13:d5:c2:da:00:43:82:
5f:87:50:80:c2:cd:b5:b8:8f:95:6a:a4:f4:80:7f:
a5:8e:94:24:b8:c0:12:2e:58:b3:89:c7:63:b3:53:
47:96:f0:de:8a:68:b1:d5:46:fd:7e:0a:33:98:b3:
91:dd:70:fe:85:b8:da:1c:34:c7:e4:0f:11:35:04:
99:cf:84:89:73:42:ed:13:c4:fc:a6:ea:f1:4f:aa:
c8:d1:e3:7e:dd:da:7d:1a:9e:bf:83:41:48:1b:b9:
23:16:60:d3:31:55:1a:16:77:7d:8c:30:5e:01:e6:
a5:a2:bb:7d:75:22:bd:75:62:55:e0:59:34:09:ca:
55:98:33:27:5e:71:21:6d:51:99:60:2f:ac:c5:78:
6a:ca:65:cd:b2:9c:d5:b6:ff:e1:0d:2c:9c:26:3b:
6f:bb:ae:0c:5c:5f:d1:32:7a:4e:be:23:a2:24:be:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:CA:C7:2D:73:30:16:40:2A:58:AB:9E:3F:5F:E2:0A:FD:A7:EF
X509v3 Authority Key Identifier:
keyid:2A:02:54:BA:E6:99:A6:C6:FC:B6:7E:E4:BA:3B:01:D0:2F:18:09:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgJUuuaZpsb8tn7kujsB0C8YCZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/ZRzKxy1zMBZAKlirnj9f4gr9p-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e4c8bc-5ba3-4fc2-bf4a-a5581b3be0ce/1/KgJUuuaZpsb8tn7kujsB0C8YCZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:e9:ea:11:83:a6:24:42:fa:bc:8e:ef:66:f0:54:f1:32:34:
ec:66:2a:fe:a3:a2:78:f0:44:d3:0c:0f:22:03:5a:04:33:66:
f2:6e:01:a6:a5:d2:36:47:c7:9c:f5:f3:f9:b9:4f:cb:c4:1c:
79:c8:e4:be:09:b0:5d:ca:ac:8d:88:06:a3:f0:c8:31:01:cd:
83:af:8a:ad:ed:c1:86:6f:50:5d:ad:56:68:19:ce:f8:a8:e3:
bd:32:45:05:18:24:c8:07:87:ad:62:75:ea:22:83:a9:e9:42:
25:7a:52:6e:95:81:96:fa:57:79:f5:cd:c4:cf:f8:e8:b9:87:
e4:94:b7:78:70:9b:16:38:e6:54:fa:83:dc:0b:8d:90:d2:a2:
30:e3:5b:9c:14:cc:27:70:c1:a6:fa:ec:b9:5d:d8:51:21:be:
1f:0f:20:17:bd:45:57:e4:ed:84:54:64:7c:a0:21:d8:1e:af:
46:0b:73:17:29:53:41:a7:51:ac:9b:9b:10:48:03:8c:6d:ba:
ac:30:24:a1:12:fa:cc:33:46:c3:ab:8b:3b:a9:01:26:06:17:
60:a1:04:34:da:aa:57:11:b6:2e:e3:cd:01:00:fa:46:e5:e3:
76:c9:32:d8:c4:41:ff:9e:62:c4:47:b6:a3:76:44:a0:7b:ff:
f3:fe:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net