Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/ey2THT3vxYZt7oPHCFWCPLFWheU.roa
File: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (raw, json)
Hash identifier: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=
Subject key identifier: 7B:2D:93:1D:3D:EF:C5:86:6D:EE:83:C7:08:55:82:3C:B1:56:85:E5
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0195EB3804C2DD5B630A564486DA2CE4729C
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/ey2THT3vxYZt7oPHCFWCPLFWheU.roa
Signing time: Mon 31 Mar 2025 08:01:11 +0000
ROA not before: Mon 31 Mar 2025 08:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50313
IP address blocks: 185.33.172.0/22 maxlen: 22
212.42.32.0/19 maxlen: 19
212.42.43.0/24 maxlen: 24
2a0d:9480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:38:04:c2:dd:5b:63:0a:56:44:86:da:2c:e4:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Mar 31 08:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2d931d3defc5866dee83c70855823cb15685e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:c1:94:cb:3d:a0:33:54:aa:98:5e:3a:27:
54:44:f3:02:50:1e:df:6c:e2:96:36:78:0c:54:ef:
96:58:cc:28:6d:b6:d2:aa:b5:2d:f9:4e:f5:5c:c6:
31:22:00:77:f7:8d:5b:98:4a:61:45:f2:e0:23:18:
27:e0:94:53:7b:29:94:54:15:af:96:1c:65:e4:c5:
99:4e:d1:0a:58:c5:56:f8:cf:ae:17:84:01:75:a9:
2a:fa:ba:2d:50:7d:02:8e:5b:36:7a:ba:69:1d:bb:
b9:9e:c5:98:75:83:8c:80:7e:f8:c6:35:bb:23:85:
7d:2b:6c:a0:f0:aa:cd:3d:cf:78:54:e8:f3:ef:ec:
cd:8a:8c:df:13:53:f6:fa:72:38:c2:4f:e5:d6:18:
03:61:06:f5:cf:6f:a1:88:29:0b:50:43:22:0e:61:
63:4e:41:5d:ca:8d:03:c1:a6:14:34:36:37:24:90:
ee:a4:bf:2a:ea:a1:50:36:2f:23:83:56:cb:71:48:
5c:26:a9:60:e8:9c:36:dd:37:28:15:37:6b:c9:fe:
e7:4c:14:72:a7:1a:46:93:5e:70:dc:ce:2c:f6:c2:
7d:cc:ba:ca:3d:b6:42:9a:07:98:26:c4:05:47:a2:
86:67:a3:71:e0:7d:3a:24:14:87:7e:ac:40:c9:e7:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:93:1D:3D:EF:C5:86:6D:EE:83:C7:08:55:82:3C:B1:56:85:E5
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/ey2THT3vxYZt7oPHCFWCPLFWheU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.172.0/22
212.42.32.0/19
IPv6:
2a0d:9480::/29
Signature Algorithm: sha256WithRSAEncryption
56:0e:db:66:80:0e:e5:f8:d6:69:d9:90:a5:dc:0f:ab:e4:6a:
c5:36:93:b0:f6:8b:d5:26:eb:cc:f6:3e:c0:8a:be:9e:6b:a6:
6e:43:27:86:ad:a7:a8:01:fa:5e:eb:d2:b7:d3:7e:a5:fc:ac:
f6:4a:cb:3a:dd:40:bf:2d:69:4b:79:16:4e:27:9a:da:cc:01:
5e:64:6d:35:43:2c:90:fe:5e:01:e5:75:7e:66:40:72:ae:95:
9a:ac:49:71:82:05:03:10:65:42:6e:3d:a0:8c:bb:3b:05:1f:
a5:f4:bc:0c:bf:fe:09:6d:11:8d:63:c5:e3:df:22:50:90:e7:
e7:ad:e5:4e:86:7e:bc:ad:ed:2c:98:64:d9:9e:c2:8e:45:99:
e4:fe:a1:0d:e2:2d:bb:1c:70:65:2a:d5:84:f4:89:3a:a7:58:
e7:97:11:4d:64:12:5e:c9:d8:f2:f9:92:aa:39:f3:29:31:14:
16:87:f4:1a:ce:0b:4a:81:d1:3d:b8:32:e2:16:5c:d9:e4:93:
56:4c:6b:ba:8f:32:4d:55:67:d8:3e:24:3f:9c:02:c5:5f:7d:
e6:36:cd:b9:bf:0d:40:df:d1:b5:31:0e:d3:66:fd:f6:de:db:
33:e5:30:07:84:52:9c:9e:d5:f4:30:13:07:34:11:50:99:1c:
60:78:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net