Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa
File: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (raw, json)
Hash identifier: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=
Subject key identifier: 4B:3D:A4:3C:C9:5D:D9:2D:0D:85:B5:9E:DD:50:57:51:08:38:13:F8
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 019422FC11FEA00E0FDD42EBBA70EB0EDE81
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208331
IP address blocks: 185.136.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:11:fe:a0:0e:0f:dd:42:eb:ba:70:eb:0e:de:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3da43cc95dd92d0d85b59edd505751083813f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:ec:1b:6f:de:ab:8f:b1:5b:10:ba:bc:ec:
57:e8:b4:d8:77:12:d5:13:1b:6a:f8:84:00:1c:11:
3c:49:e5:8e:34:ad:20:bd:11:02:c0:7d:e7:3d:fb:
d0:12:9a:21:a9:f1:92:fe:53:a5:48:b3:f0:14:b8:
54:55:66:79:02:7c:54:bb:63:d8:fe:11:d8:b7:a8:
38:ef:c1:59:f8:32:f5:f0:04:67:c6:b8:23:b5:f2:
80:94:d2:ac:c8:2a:d5:8d:af:d2:19:df:b5:da:70:
9c:b6:17:c9:5d:b3:c5:fe:2c:c4:fa:94:59:3e:da:
56:1a:56:77:35:98:a7:25:69:c4:4a:46:72:a9:5e:
73:ff:e7:eb:cc:eb:c0:5a:a3:48:7d:03:dd:b1:0e:
e3:de:b2:f8:1f:0a:03:04:56:b2:c8:a1:6d:34:55:
20:d0:a3:bf:35:f0:f3:36:f9:65:f2:80:3d:d9:76:
4e:9a:f3:1a:21:4e:1b:f7:3d:21:a1:ce:8c:42:bc:
0f:e4:12:d8:f6:35:fb:37:bf:bf:aa:f7:a7:62:be:
cf:3a:97:59:d4:bf:60:d8:c7:b8:08:89:a8:9e:cc:
5d:e8:8d:bc:78:61:cb:31:f6:b3:93:72:51:bc:8d:
9f:70:22:bd:b3:f8:3b:d0:fb:be:6e:f1:2a:cb:a6:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:A4:3C:C9:5D:D9:2D:0D:85:B5:9E:DD:50:57:51:08:38:13:F8
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.227.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c0:96:47:98:55:37:6b:0c:1e:c1:62:b4:e9:fd:e1:68:75:
8c:27:1c:6d:19:dc:ea:d3:bb:05:d0:83:5a:50:34:f4:0f:c8:
3b:f1:3f:5b:8c:0d:1c:fd:7a:b4:16:13:dd:c7:cd:17:62:bf:
bd:56:b9:21:a3:bb:fe:a0:9f:2b:0b:18:b4:c8:85:80:cf:54:
15:93:3c:62:54:b5:fd:61:77:45:4d:8c:25:cb:54:cf:4b:34:
10:99:5e:83:5e:3c:74:c0:1f:80:c8:7c:14:2c:f1:db:7c:3e:
d6:12:8d:57:df:53:60:ab:a1:79:ca:35:da:ca:5c:ac:22:24:
ef:44:ce:ab:40:a8:3a:b6:55:23:d7:7e:b1:fa:43:0f:02:7c:
fe:03:60:94:68:5c:90:ad:fa:94:04:e1:e3:29:54:b3:08:e9:
47:51:86:7f:ee:25:e9:98:b6:19:1d:ff:9d:c7:64:dc:f2:4b:
26:60:2d:e8:fe:37:fa:9f:70:43:3c:56:4c:94:44:60:15:ca:
8d:26:f8:7f:97:3d:fd:55:5e:d1:c9:29:2b:88:8f:ba:a6:55:
b4:0c:bc:03:f5:74:50:9e:58:8e:90:16:d7:7c:65:d7:1f:70:
54:10:74:e5:65:77:a9:3f:42:15:49:68:ad:4f:e4:ab:22:72:
a5:c1:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:19 2025 by rpki-client on console.sobornost.net