Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa
File: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (raw, json)
Hash identifier: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=
Subject key identifier: 73:49:E6:9F:5C:FF:09:E5:25:FC:30:96:FE:F5:B0:63:59:1D:40:93
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 01941FFA9638B006EDFC058091AE787F2F64
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60595
IP address blocks: 185.15.52.0/22 maxlen: 22
185.15.52.0/24 maxlen: 24
185.15.53.0/24 maxlen: 24
185.15.54.0/24 maxlen: 24
185.15.55.0/24 maxlen: 24
194.2.77.0/24 maxlen: 24
194.26.133.0/24 maxlen: 24
2a03:a2c0::/29 maxlen: 48
2a03:a2c0::/32 maxlen: 32
2a03:a2c0::/48 maxlen: 48
2a03:a2c0:2::/48 maxlen: 48
2a03:a2c2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:96:38:b0:06:ed:fc:05:80:91:ae:78:7f:2f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7349e69f5cff09e525fc3096fef5b063591d4093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:e5:87:05:68:5c:9c:ba:85:e3:4c:70:03:
e8:23:8a:2a:a9:d7:ef:93:de:75:be:44:bf:ad:1c:
45:59:75:72:1e:28:d7:9f:bf:3e:ff:c4:b6:aa:9d:
04:79:db:60:af:6d:3f:af:4f:f8:8f:53:ae:ec:89:
d4:fe:9d:c6:78:6b:de:41:ef:8c:e6:a9:73:ba:25:
6b:57:90:58:c4:1f:50:00:d4:92:5b:14:f1:ea:cb:
07:1a:ae:48:0a:b0:df:04:84:fc:9b:5b:79:36:57:
ae:ae:4f:51:e4:ac:d2:55:07:a6:f7:57:89:c5:52:
dc:02:d6:7f:ab:3c:03:d7:6f:5e:24:b1:37:98:10:
f2:07:38:5f:75:88:87:2d:ba:d9:7a:71:ef:4e:4d:
d9:7a:52:1d:2b:50:00:79:af:38:4e:78:97:90:5d:
46:73:12:72:74:f1:58:67:d6:36:58:f9:78:b3:30:
14:5c:90:58:63:47:c6:41:1a:09:d7:bb:50:12:ff:
0a:53:80:a7:a7:c9:ba:02:48:fd:b4:94:65:60:3d:
49:32:cc:69:9a:a3:32:c0:e4:a8:ae:ea:2c:df:da:
2f:6a:41:2c:2b:32:62:62:0f:f0:d3:28:a8:5b:f1:
91:d2:02:41:e7:b1:6c:49:44:5d:7c:83:f1:cf:bd:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:E6:9F:5C:FF:09:E5:25:FC:30:96:FE:F5:B0:63:59:1D:40:93
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.52.0/22
194.2.77.0/24
194.26.133.0/24
IPv6:
2a03:a2c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:c9:f0:7f:ef:e9:b9:5f:4c:d2:c7:56:6e:4c:9f:84:c9:57:
ed:06:ec:38:f2:ae:69:d5:5b:35:17:03:12:e7:25:81:1f:c7:
e5:bf:d6:43:93:4b:e3:58:d3:e2:17:d9:17:f6:75:b8:e9:f7:
1c:02:ff:8f:82:99:63:fa:70:20:f8:70:4b:d3:aa:95:95:75:
54:00:c3:11:70:82:73:64:88:f4:dc:f1:df:30:cd:fb:8b:9a:
b6:ec:95:0e:a3:7a:0e:c9:42:c1:16:e8:a7:bd:c9:60:93:83:
46:77:6a:bb:a3:f3:32:1c:55:d5:1d:86:d9:32:59:b5:33:79:
60:d2:42:26:c8:ce:52:6d:22:49:00:91:fc:4f:ef:fe:a0:4e:
11:a8:8e:ff:2f:f6:1c:73:c7:d6:73:94:d7:cd:50:13:6f:2d:
af:8a:72:c5:c5:a2:91:c5:2f:19:38:df:9c:06:77:ea:b6:4c:
d1:90:3f:e9:9a:aa:f4:06:ab:54:1d:54:05:86:08:30:38:91:
6b:9f:44:88:95:a9:25:c7:b2:5a:38:23:b2:5f:f6:6f:b7:ca:
fc:fe:20:b7:97:cb:b4:93:6e:e3:a0:c7:02:f5:6e:67:d6:a1:
db:71:67:23:ec:e6:09:e6:b7:ef:f6:e3:46:ed:84:4c:6c:78:
bc:52:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net