Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa
File: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (raw, json)
Hash identifier: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=
Subject key identifier: 11:D2:A9:6B:7D:88:67:D0:E7:77:79:3E:BE:67:87:68:C5:36:DD:3C
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 0194266B27C2945F471EFE91C45780B6FD90
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa
Signing time: Thu 02 Jan 2025 09:49:04 +0000
ROA not before: Thu 02 Jan 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206927
IP address blocks: 185.171.176.0/24 maxlen: 24
185.171.177.0/24 maxlen: 24
185.171.178.0/24 maxlen: 24
185.171.179.0/24 maxlen: 24
2a0a:e100::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:27:c2:94:5f:47:1e:fe:91:c4:57:80:b6:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jan 2 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11d2a96b7d8867d0e777793ebe678768c536dd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:33:65:0f:47:2d:11:4a:e8:64:4a:f5:e4:fd:
e3:72:73:8f:8c:1a:97:7a:a9:ac:ae:03:58:aa:a8:
a6:a8:11:5a:9c:27:c3:3f:04:6f:be:64:67:a7:11:
e9:d7:7c:01:a5:7d:e3:cd:b8:6a:d6:24:b4:95:48:
41:d9:91:5c:f7:fd:b9:47:07:d4:4e:fd:00:9d:8b:
ed:d1:08:8f:a0:fd:e2:23:2b:59:b5:4f:a1:51:34:
36:aa:5f:0b:c6:66:08:88:ac:6a:f4:c2:b7:5b:cb:
c4:dd:84:90:d2:64:0c:e1:bd:e2:d1:a3:e3:62:25:
cc:b7:54:0a:3e:f1:ba:80:e0:69:dd:cb:93:1a:3d:
39:25:68:19:d9:7a:9c:2d:1f:b0:18:c0:64:b5:f3:
a4:df:d5:92:bf:eb:2f:62:25:6d:7e:8f:33:23:9e:
e6:ca:b0:fe:28:0c:0a:72:4d:df:e5:37:20:a0:f0:
b5:8c:ca:02:d8:51:d9:0c:96:e1:1f:d4:4f:2e:6a:
06:dc:27:0f:5e:2a:bf:6e:07:70:b8:f3:66:d6:cf:
89:d5:a9:0e:3b:2f:19:ee:d2:7a:43:ca:12:f6:ee:
49:51:a9:b7:59:87:83:68:0a:14:de:12:36:66:ab:
1f:25:13:cf:b0:e8:d7:16:37:4d:2d:68:ea:b1:b3:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:A9:6B:7D:88:67:D0:E7:77:79:3E:BE:67:87:68:C5:36:DD:3C
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.176.0/22
IPv6:
2a0a:e100::/29
Signature Algorithm: sha256WithRSAEncryption
86:f9:2e:6a:c9:10:c7:38:c0:57:cf:43:20:0f:0a:4b:de:8e:
8c:1f:49:ec:38:c1:eb:5b:1f:f9:3c:81:3f:55:21:ab:eb:74:
23:1d:4b:7e:2a:a1:8d:a9:b0:71:f7:9f:e0:35:0a:38:0b:60:
71:ea:69:82:19:76:5c:1e:24:28:02:63:1e:ad:34:f1:43:62:
a5:8b:45:df:1d:00:21:55:71:d3:9a:86:de:1f:57:ec:df:2f:
db:09:c6:9a:93:aa:81:f3:9e:cf:d4:1c:50:2b:32:2c:ec:25:
81:b2:52:e2:46:f4:c3:57:07:e9:14:b8:60:d3:d3:a9:d5:64:
cb:db:61:10:2f:ff:df:b8:d1:f6:2a:52:0c:3b:94:ce:1f:de:
cc:c6:93:cb:89:df:56:1d:d6:0f:e9:24:09:1f:5e:ba:72:61:
b7:2c:d3:f3:6b:08:f9:76:ee:ce:0e:33:b5:da:9c:34:3d:45:
45:a4:c6:b0:97:b8:37:f5:f5:37:7d:00:50:31:90:7c:15:33:
67:52:07:8c:0a:8b:c8:21:79:03:d1:68:51:a7:23:e4:4a:13:
d5:8e:dc:91:01:36:e7:f7:28:5b:21:bf:95:c3:82:25:ee:f6:
bf:3a:54:06:35:a3:b8:0b:89:d3:f3:5b:ce:3e:88:b0:26:35:
1c:bb:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net