Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/0hYdVdTdrSs-d6BXtENWomMQM6A.roa
File: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (raw, json)
Hash identifier: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=
Subject key identifier: D2:16:1D:55:D4:DD:AD:2B:3E:77:A0:57:B4:43:56:A2:63:10:33:A0
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 01942521F4D9F28CEA0E44B2457B2D1B7745
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/0hYdVdTdrSs-d6BXtENWomMQM6A.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50736
IP address blocks: 185.25.152.0/22 maxlen: 22
193.124.48.0/24 maxlen: 24
193.124.54.0/24 maxlen: 24
193.124.116.0/24 maxlen: 24
193.124.134.0/24 maxlen: 24
194.58.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f4:d9:f2:8c:ea:0e:44:b2:45:7b:2d:1b:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2161d55d4ddad2b3e77a057b44356a2631033a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:22:6b:6c:4e:c9:73:99:5e:27:86:1b:73:
13:06:72:89:0f:67:ec:e9:86:cb:0f:75:83:ba:4d:
44:60:96:3f:ee:2d:27:98:48:73:c4:a8:16:ed:89:
60:3d:1f:35:f5:19:fc:3a:b2:1e:f9:0f:9b:90:b2:
6f:88:0b:f4:8d:a5:64:fd:32:5b:4a:47:67:c9:e2:
69:3e:dd:d1:98:26:17:c4:1c:56:7e:51:05:b0:a7:
20:90:ba:0a:9a:e7:e3:ae:b6:ab:0b:f3:f4:8a:49:
55:c1:92:9f:76:a5:00:eb:ca:0c:7c:07:0c:03:a5:
26:3a:d2:fe:bd:b6:7d:20:a2:41:14:33:5e:de:55:
25:9a:7e:cd:76:c3:6f:99:e7:5f:ed:f7:c9:30:a8:
2c:e1:25:50:0d:6a:d1:78:d0:16:64:da:72:1f:ff:
98:d6:b0:76:d0:d1:ae:ba:ab:17:e7:92:2b:29:1d:
27:65:52:47:d1:86:5e:07:2f:5d:b5:43:8f:42:3d:
e0:48:ca:2f:e4:a1:9d:88:47:a2:ed:61:dd:05:e2:
12:32:c9:da:48:6e:fa:37:58:34:72:d9:be:9b:60:
36:99:10:8b:a2:ed:c4:3f:c2:e3:13:12:57:be:d8:
12:50:20:d9:53:ee:2c:ab:d0:3b:9f:28:55:ab:9a:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:1D:55:D4:DD:AD:2B:3E:77:A0:57:B4:43:56:A2:63:10:33:A0
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/0hYdVdTdrSs-d6BXtENWomMQM6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.152.0/22
193.124.48.0/24
193.124.54.0/24
193.124.116.0/24
193.124.134.0/24
194.58.78.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e8:c4:9d:84:ad:ed:b3:c1:a5:ef:83:1e:03:f9:88:a2:b2:
41:92:dd:34:f7:47:79:c8:2c:30:e7:67:3e:70:25:cc:29:02:
93:98:64:b9:46:a7:05:51:7b:00:4d:17:d8:c8:f9:7d:f4:3e:
0e:43:bf:76:cf:f8:69:bf:e7:5e:01:fc:7e:3f:d0:44:8f:9c:
f2:d5:2d:ba:d6:f2:02:93:8e:7d:0e:98:a0:e7:62:0b:1a:62:
d6:70:09:40:ca:99:6f:7c:cf:c8:d5:91:d6:c3:ea:b5:ab:a0:
84:0c:c3:e1:6b:1b:19:77:58:42:0f:8c:cf:26:2b:7d:33:f0:
38:36:8a:92:65:b9:d2:ed:13:1d:d7:1f:7b:0f:55:ed:bf:d0:
5c:59:1d:36:33:13:e8:76:91:7c:d3:a7:d9:aa:49:9d:72:eb:
af:b3:90:7a:c1:f0:01:64:a1:18:3a:f6:11:96:5d:09:48:47:
bb:98:7d:54:58:0a:46:42:d0:6a:0c:55:90:14:9c:6a:c8:88:
75:6d:a5:e9:ab:af:d7:68:ae:d8:19:6a:a4:f7:3d:07:33:37:
42:ce:74:75:26:14:df:de:6d:ae:bf:bc:f2:9a:47:5c:1d:8a:
42:c7:bf:74:89:1b:6a:b9:e7:bc:5a:f3:cb:e1:ed:57:3a:aa:
ac:0f:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net