Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/rSUUwkCTafmsCOhD-uI-_PP_ksU.roa
File: rSUUwkCTafmsCOhD-uI-_PP_ksU.roa (raw, json)
Hash identifier: n7ICRmWq6zp/x+daYVk+J66wnqsGhzVt3SgaUyuiB2s=
Subject key identifier: AD:25:14:C2:40:93:69:F9:AC:08:E8:43:FA:E2:3E:FC:F3:FF:92:C5
Certificate issuer: /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial: 01942522292AF97B7D06012F4F7FEB0A9C93
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/rSUUwkCTafmsCOhD-uI-_PP_ksU.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201522
IP address blocks: 185.71.172.0/22 maxlen: 22
185.71.172.0/24 maxlen: 24
185.71.173.0/24 maxlen: 24
185.71.174.0/24 maxlen: 24
185.71.175.0/24 maxlen: 24
2a05:33c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:29:2a:f9:7b:7d:06:01:2f:4f:7f:eb:0a:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad2514c2409369f9ac08e843fae23efcf3ff92c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:3d:ab:05:71:32:b4:a4:11:20:21:11:e7:
ec:ca:0c:af:ba:40:51:8a:0e:e9:8f:91:ac:4d:bd:
27:11:27:07:1c:31:57:5e:29:6d:52:d3:17:6d:d6:
f3:78:a5:19:9a:c0:17:7d:bd:f8:e9:fd:dc:1c:ce:
cb:a4:c4:4e:ad:f3:8a:87:8c:f4:18:d6:39:cc:f2:
5e:84:03:76:1a:de:da:ef:40:af:6f:0d:da:eb:ad:
d8:10:7c:c8:22:7b:b8:46:ab:26:10:64:5f:86:46:
f3:51:30:58:95:da:d1:5e:32:d8:eb:9e:de:96:d5:
84:c5:9f:41:0a:91:df:1d:1b:12:ad:34:5a:e1:1a:
9d:90:ab:80:68:9e:f7:41:c0:d0:22:05:6f:22:9d:
37:94:72:e5:c7:36:74:6a:2c:3e:e9:da:33:33:e9:
a1:c8:3a:bd:21:2b:78:35:bd:d0:ef:73:09:7d:4b:
c1:e9:23:3e:7a:72:a6:2c:86:17:83:9c:58:d2:ea:
16:3d:dd:cd:e4:a6:1d:59:c1:ab:3a:a7:52:de:ee:
5b:9b:9b:79:62:06:3f:37:d2:80:aa:1c:00:a5:8b:
da:85:32:8a:d3:cf:6a:e0:06:4b:47:ac:e4:43:c3:
b8:46:00:cd:95:df:1e:1c:fe:60:03:f1:b6:fb:a4:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:25:14:C2:40:93:69:F9:AC:08:E8:43:FA:E2:3E:FC:F3:FF:92:C5
X509v3 Authority Key Identifier:
keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/rSUUwkCTafmsCOhD-uI-_PP_ksU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.172.0/22
IPv6:
2a05:33c0::/48
Signature Algorithm: sha256WithRSAEncryption
68:82:5d:6c:fa:7c:1c:f7:c7:8b:a2:e7:9e:90:cd:24:44:29:
21:2d:b1:f3:86:93:0f:c5:53:71:33:c4:ee:8b:c4:f5:47:60:
83:39:b1:10:23:3e:02:21:7a:d9:8c:fd:5c:18:df:cc:e4:e4:
81:1e:6f:0a:c4:ab:b2:c3:ae:32:8f:92:dd:f3:41:1a:f4:80:
9a:10:a4:41:b3:be:2c:88:a4:cc:00:34:cb:23:cb:9e:0a:59:
77:bc:ec:ca:cd:90:b3:1b:f1:c8:a3:b2:b8:b3:eb:63:bd:95:
10:fb:8c:fe:a1:ac:17:8e:3e:8a:86:c7:c8:04:8d:d1:2f:3d:
43:82:e4:e4:93:29:fb:ca:66:d4:6e:40:28:62:57:84:d7:b9:
c9:16:ee:92:7c:5f:b7:37:59:bb:98:a1:22:ff:73:c4:a1:ba:
b7:b1:58:04:5c:dd:47:fd:0a:a0:ba:00:3a:38:ab:ee:eb:6f:
7a:75:ba:da:2f:7c:7d:f8:f6:9e:7a:cd:5d:f0:79:4d:3d:44:
88:10:c3:34:31:8c:77:f9:aa:43:75:48:98:1c:5e:49:b4:37:
98:55:6b:d1:26:8a:f4:76:ba:70:84:1f:c3:9e:92:84:79:9b:
6f:ec:48:87:f6:ca:b8:dc:e2:68:af:15:44:cf:1e:b6:fe:09:
35:3a:77:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:03 2025 by rpki-client on console.sobornost.net