Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/f2eeaIi_NtiLs6nRUcClmpkBy5k.roa
File: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (raw, json)
Hash identifier: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=
Subject key identifier: 7F:67:9E:68:88:BF:36:D8:8B:B3:A9:D1:51:C0:A5:9A:99:01:CB:99
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 019427B5CB45D698F474F740414184458809
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/f2eeaIi_NtiLs6nRUcClmpkBy5k.roa
Signing time: Thu 02 Jan 2025 15:50:12 +0000
ROA not before: Thu 02 Jan 2025 15:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208703
IP address blocks: 185.41.220.0/24 maxlen: 24
185.41.221.0/24 maxlen: 24
185.41.222.0/24 maxlen: 24
185.41.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cb:45:d6:98:f4:74:f7:40:41:41:84:45:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Jan 2 15:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f679e6888bf36d88bb3a9d151c0a59a9901cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:68:c2:62:0a:84:fe:e3:ed:a3:4c:95:86:
7c:46:e6:a1:57:e8:92:3a:b8:d9:91:b9:4b:56:9c:
c8:18:b4:ae:d2:2b:aa:71:de:71:1d:51:ad:04:b1:
8d:41:e0:fb:0e:c1:1d:e1:de:3e:93:f8:32:61:04:
ae:b3:ea:4d:8f:f1:30:33:2d:51:39:fa:1c:9e:77:
c2:80:10:99:07:cd:5b:69:f5:2c:25:d7:21:73:df:
a5:c6:a0:53:5c:ac:d6:e0:43:ba:03:95:f9:af:b2:
9c:f4:d2:24:0e:0a:64:ae:3f:37:1a:fb:fc:b1:30:
c6:e3:f1:4b:78:7d:ff:52:b6:3f:db:c6:e3:b6:48:
3a:45:d2:fb:c6:c5:2d:94:6d:c0:c0:b6:a3:a0:cc:
95:42:40:a1:84:0e:38:95:26:9e:81:14:8a:0a:e3:
65:b8:14:3f:6e:54:e8:69:3a:60:a8:2b:1c:01:dc:
37:4d:a0:bd:7b:6c:f2:ec:94:96:b8:fb:c7:42:40:
f8:b0:66:a1:75:f1:c0:f2:42:3f:e6:e7:41:7b:f6:
af:ca:ac:75:f5:29:44:e6:bd:44:26:6f:10:a8:2f:
6a:25:3c:1f:35:82:91:77:d3:ec:9b:ff:a0:ae:f8:
92:4f:ab:92:8e:79:50:42:96:1b:8a:79:56:8f:a3:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:9E:68:88:BF:36:D8:8B:B3:A9:D1:51:C0:A5:9A:99:01:CB:99
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/f2eeaIi_NtiLs6nRUcClmpkBy5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:df:1a:1a:47:0a:a9:e9:5e:74:a1:71:99:dd:03:5c:aa:04:
31:68:c6:40:b6:33:a0:90:d7:fa:78:06:12:a7:12:70:50:06:
37:10:c1:f1:70:62:d5:9d:ab:85:b8:7e:1c:bd:91:88:04:04:
a2:55:99:e8:66:64:76:17:65:cf:75:26:de:74:49:ac:6a:7b:
b6:ad:1c:4e:a5:77:b4:50:30:08:dc:97:bf:48:3b:3d:ac:49:
bd:9c:b2:e1:2a:e1:33:72:ca:6c:77:83:2d:f0:63:40:64:d4:
8d:c9:cc:3d:d2:f7:68:46:6c:28:ce:4e:36:cb:98:2a:d9:90:
5d:02:11:75:0c:7d:41:ea:c3:99:e3:bb:bd:57:de:1f:82:d2:
10:61:cf:7c:ed:6a:bd:9f:3e:af:6e:c4:e0:4a:8b:d8:69:e9:
a9:02:6c:21:71:13:c9:87:ec:f1:bb:01:bb:7e:dc:e6:9d:a9:
db:8d:9a:f4:b7:9a:54:6d:bd:6f:b5:12:e8:d8:5d:6f:81:1e:
48:0b:ff:01:f1:be:3c:8f:53:aa:c1:f4:15:c6:e0:3b:b7:a9:
ac:0e:24:fd:6b:e0:1c:fe:fc:af:c1:87:8b:d6:b4:ac:e9:91:
4e:50:bb:2c:4f:80:b8:80:01:fe:44:ac:90:6e:78:3f:e3:ee:
b8:15:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net