Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa
File: CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa (raw, json)
Hash identifier: SmeUvVuEhfInXhWNJ0VU7sOK6/ghCJAsk+fSAJsrYgk=
Subject key identifier: 09:4F:F6:FF:AC:E2:77:9B:C5:33:3C:DD:09:5D:8C:A7:7C:15:76:3F
Certificate issuer: /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial: 019426D95A7190E31BAB47DCD7A37D2806B5
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207179
IP address blocks: 185.140.224.0/23 maxlen: 23
185.140.226.0/23 maxlen: 23
2a07:2080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:71:90:e3:1b:ab:47:dc:d7:a3:7d:28:06:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=094ff6fface2779bc5333cdd095d8ca77c15763f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:6f:7f:78:bd:c5:39:10:da:6d:aa:cf:07:
d4:2f:05:89:ec:98:d5:ad:bd:01:0b:f1:fc:dc:30:
be:b1:78:09:c0:8d:4d:e9:92:5a:38:7a:55:c1:6d:
34:14:e8:cd:f0:43:b6:7c:9d:0f:a9:8b:1a:fb:6c:
d4:11:90:a0:2c:12:c9:39:7c:7f:e7:54:e0:9c:9b:
0b:bf:21:c8:6e:30:39:8f:39:c8:c0:a9:dd:a1:12:
85:7f:d2:b4:1b:38:f3:a4:f9:1e:ba:7f:41:7e:2d:
e0:d3:a1:9f:93:21:36:1c:0a:82:89:35:73:db:a2:
f9:27:79:22:78:06:5d:09:d6:77:7a:f3:86:25:bc:
2c:c8:ba:fc:93:95:75:55:e0:1c:c2:3e:0d:ee:5c:
20:7e:42:d6:83:8c:0b:a1:e6:40:bc:90:e0:62:6f:
68:cd:ec:e0:b7:a3:13:a5:b5:c8:d8:06:2c:b1:6a:
6f:ae:a5:0e:4f:7c:c4:8c:1e:ab:07:9c:8c:e0:f7:
e3:b2:42:63:a2:19:af:e6:2b:ed:e8:35:ae:d7:8a:
8f:58:51:a0:1d:8a:9a:c1:77:10:58:68:3a:f9:98:
70:a1:4f:32:e6:0f:10:f0:7a:11:54:e9:88:cf:8e:
6a:9c:d8:6a:bc:dc:47:02:70:8f:bb:b5:be:a6:e6:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:F6:FF:AC:E2:77:9B:C5:33:3C:DD:09:5D:8C:A7:7C:15:76:3F
X509v3 Authority Key Identifier:
keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.224.0/22
IPv6:
2a07:2080::/29
Signature Algorithm: sha256WithRSAEncryption
2e:d0:d5:2b:b1:2b:db:a5:34:c9:a2:26:4b:3d:44:1d:7f:81:
56:5f:96:39:b2:38:a4:27:75:a2:6d:23:ab:24:eb:67:bd:a6:
bd:84:4e:ff:c1:d6:93:e6:2e:ab:59:b4:df:86:36:03:f8:af:
a6:44:61:ae:6f:68:4d:fd:6e:c4:a6:8c:c1:69:b2:92:b9:68:
7a:67:19:af:40:fe:a0:84:c5:bb:d2:48:d5:91:76:57:82:1b:
89:f0:ea:06:97:00:da:2d:63:30:e4:f5:ee:12:4b:f9:94:3c:
02:c3:aa:2e:95:45:a1:b5:8b:3b:c8:87:97:16:26:3f:c0:20:
df:83:d8:a9:5a:81:4c:6e:2b:44:a4:88:f8:36:95:4d:0d:82:
68:9a:1a:9e:0e:61:aa:b7:82:e7:bb:9b:fb:5c:18:d4:2e:1a:
64:9a:c6:91:19:16:3d:19:b5:b2:26:f6:e2:05:e9:94:1f:83:
b2:c4:12:d3:f0:cc:86:d1:7a:69:95:be:92:74:d2:84:d9:f2:
fc:67:bd:0b:50:8a:40:36:92:09:ef:d7:19:52:8d:41:d0:3e:
9d:05:90:30:bb:dd:5b:74:ea:f1:5d:9c:15:0d:e4:fb:ab:35:
54:7f:ba:84:65:90:ea:82:4e:16:d3:1f:a8:a4:fd:c6:a9:b1:
74:8c:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net