Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/rT4QMLbWFUH0Mel-lifTyr0ioFc.roa
File: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (raw, json)
Hash identifier: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=
Subject key identifier: AD:3E:10:30:B6:D6:15:41:F4:31:E9:7E:96:27:D3:CA:BD:22:A0:57
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 0194266A57AE7E40796F44D033DF9345A892
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/rT4QMLbWFUH0Mel-lifTyr0ioFc.roa
Signing time: Thu 02 Jan 2025 09:48:10 +0000
ROA not before: Thu 02 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61211
IP address blocks: 148.163.184.0/22 maxlen: 24
185.15.28.0/22 maxlen: 24
185.62.72.0/22 maxlen: 24
185.203.16.0/22 maxlen: 24
2a03:bb40::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:57:ae:7e:40:79:6f:44:d0:33:df:93:45:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Jan 2 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad3e1030b6d61541f431e97e9627d3cabd22a057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:95:b7:02:a3:cc:35:99:38:70:d3:53:fe:
f8:63:1d:d6:ec:02:d6:01:fa:eb:99:7e:c0:25:c4:
66:4c:59:ce:41:86:06:f6:73:63:c8:9e:d4:8b:26:
0e:8c:90:78:46:cd:99:32:cc:22:11:ee:72:ca:f7:
ef:3c:e6:a6:8a:3d:2b:f7:df:e6:3e:22:5f:cc:79:
04:2e:25:70:ab:66:f4:57:91:7b:a0:fb:29:95:78:
3d:96:be:1e:59:b4:27:09:be:ad:40:e5:08:f7:96:
95:11:ad:07:d7:cc:a0:ba:0b:e1:8a:80:fe:9c:c8:
b2:e1:77:9d:ef:7e:69:58:cb:9d:7f:d4:66:2e:87:
d7:17:63:c1:50:5d:37:23:65:77:56:a1:c3:f7:53:
18:c9:ee:3a:41:78:2f:93:a5:71:b7:26:ab:0c:f4:
e4:9f:e9:1d:34:b1:d2:f8:8f:1f:f1:2e:0b:25:ab:
4b:ce:1b:11:f0:79:10:8b:82:3b:66:00:de:75:41:
ec:98:81:a9:0a:2c:66:6b:24:bf:b2:35:3b:8d:96:
bd:cf:a5:5e:ec:c2:cd:2d:04:ed:c0:fc:5d:74:42:
b2:21:f3:9f:62:84:b4:06:7d:3d:50:22:f0:da:01:
15:d5:c2:1a:64:10:81:f6:8f:ea:b8:49:89:c3:d3:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:10:30:B6:D6:15:41:F4:31:E9:7E:96:27:D3:CA:BD:22:A0:57
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/rT4QMLbWFUH0Mel-lifTyr0ioFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.163.184.0/22
185.15.28.0/22
185.62.72.0/22
185.203.16.0/22
IPv6:
2a03:bb40::/32
Signature Algorithm: sha256WithRSAEncryption
56:80:32:a8:37:da:e9:44:13:f3:0e:e6:29:b7:77:60:a8:aa:
45:b0:4d:63:e6:ae:9b:cb:91:2b:a9:27:44:f2:dc:2e:90:89:
37:3b:48:c8:39:4f:08:ba:af:ab:21:50:19:7b:61:85:09:27:
01:6d:ad:77:53:08:df:c8:fd:14:27:ba:48:8f:8a:7d:8c:41:
2b:49:6a:87:b3:66:a6:f6:85:11:82:7b:29:9e:99:ee:f9:15:
52:4c:af:2a:17:8c:78:77:f6:40:1d:a6:90:cc:32:e8:0a:9e:
1b:fe:97:2e:9b:7e:fd:9e:fa:87:3f:58:2a:bb:f6:c6:ed:c5:
79:5b:a8:63:20:f2:8a:c1:74:1c:f5:2a:b3:96:45:19:fd:2e:
0d:c6:35:86:64:8e:78:65:f6:d7:c0:74:89:5e:e2:ec:19:cc:
f8:a1:ef:2a:c5:60:69:00:cc:3d:4f:65:96:28:7a:93:13:2e:
3f:f9:4d:82:3e:60:55:7f:39:0c:ec:f8:45:64:c8:b8:95:2b:
8b:18:ed:00:84:83:f1:9c:ab:73:e2:25:68:cf:fe:43:38:6e:
74:d5:f4:c3:35:37:4a:5c:df:3a:31:fd:d8:b4:50:3f:e9:7a:
7e:73:f6:36:1a:6b:29:07:12:98:2d:19:af:34:95:56:18:73:
67:47:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net