Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/PyDzr8WmYcRo05FGb5UzcWZdKls.roa
File: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (raw, json)
Hash identifier: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=
Subject key identifier: 3F:20:F3:AF:C5:A6:61:C4:68:D3:91:46:6F:95:33:71:66:5D:2A:5B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 0194266C46B5F8086A3261DE73E121D62F74
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/PyDzr8WmYcRo05FGb5UzcWZdKls.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199727
IP address blocks: 185.37.41.0/24 maxlen: 24
185.37.42.0/24 maxlen: 24
185.37.43.0/24 maxlen: 24
185.189.172.0/24 maxlen: 24
185.189.173.0/24 maxlen: 24
185.189.174.0/24 maxlen: 24
185.189.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:46:b5:f8:08:6a:32:61:de:73:e1:21:d6:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f20f3afc5a661c468d391466f953371665d2a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:b0:30:8c:3e:29:86:31:0e:b3:29:c4:2e:
7a:11:44:2d:39:92:b8:7f:d1:2f:6b:7a:04:1f:fe:
57:6a:f2:fd:c7:61:ce:e0:a1:5c:66:f7:cf:87:17:
12:77:2c:7e:68:65:23:0c:a6:6b:c7:9d:ae:30:10:
a0:10:cb:41:77:15:3e:6e:82:c4:c4:b9:7f:11:4d:
4c:b1:2b:f4:fd:c1:d0:e9:4e:47:00:2f:46:46:35:
c0:75:07:5e:e4:ca:40:e5:d7:7d:85:0b:c8:59:5a:
a9:d3:da:6b:40:b5:c9:94:ff:c2:d7:af:3a:8a:46:
b3:59:5b:5f:ec:89:13:2b:9d:f0:41:17:6b:d9:2f:
e5:90:ce:20:13:33:03:46:fa:b3:32:c9:ec:47:5f:
55:fc:f5:61:e4:72:5a:88:60:04:d6:0f:20:f1:b6:
1f:fc:40:9f:50:b4:d8:51:1f:37:ef:7c:8c:62:7f:
f5:52:98:aa:99:a3:24:9d:1c:8c:0d:81:fd:be:61:
8c:2d:67:63:67:11:4d:29:ad:d1:cd:d4:fc:18:21:
c3:28:2d:4f:89:25:99:f4:38:7f:41:bd:b3:ce:50:
fc:59:d0:eb:e4:29:8d:a1:c3:30:42:3c:d3:49:82:
16:7b:22:a1:a9:22:40:6d:ff:39:43:e4:b4:53:3f:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:F3:AF:C5:A6:61:C4:68:D3:91:46:6F:95:33:71:66:5D:2A:5B
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/PyDzr8WmYcRo05FGb5UzcWZdKls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.41.0-185.37.43.255
185.189.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:71:9e:fc:3f:24:6d:b7:5b:8b:f5:a7:dc:06:fa:56:a8:a8:
b2:a1:9a:9a:2a:b7:e2:c4:4d:eb:24:15:9b:30:2f:dc:aa:5e:
74:d3:31:62:14:6a:44:7e:70:31:67:54:6e:bc:e4:cc:bc:ef:
05:0c:43:3e:f8:17:ae:cb:73:b6:a8:26:b7:8a:8c:33:8f:79:
e4:c8:b6:06:b5:fd:3d:46:a0:e8:5e:b4:ba:ed:1b:02:f1:89:
fe:5e:10:67:18:d1:93:8e:8b:28:a8:71:5b:ae:a4:54:5d:d7:
00:5f:8a:54:90:96:4f:23:8c:8f:92:ad:2a:2a:6d:88:e1:20:
e9:82:d0:22:8e:97:66:be:0b:e7:3a:4f:2a:4b:8e:59:3a:26:
ef:71:81:47:25:4a:c7:36:bd:bd:76:e3:b4:e0:8b:f9:8f:44:
13:b9:bf:90:2d:2a:f9:c3:76:94:c9:ae:de:e8:10:02:41:04:
d5:66:ce:ac:4c:e0:11:ae:c4:61:bb:73:72:e7:35:21:06:42:
f0:14:33:6f:8d:de:33:dd:fe:f6:1f:6a:7d:19:8b:f5:86:c4:
d4:e3:ad:ab:72:b4:d6:c8:70:af:1d:b4:78:af:ca:27:5b:26:
8d:af:5b:85:75:b3:62:2d:96:cb:30:36:c4:fb:31:28:13:c6:
33:1f:a6:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net