Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/ArXM7RJDnDKHHLBE21eoL2lE76c.roa
File: ArXM7RJDnDKHHLBE21eoL2lE76c.roa (raw, json)
Hash identifier: n1+IHvUCKe6KRZXjngvQSrArHwaB9mNvliy4XN3wMhA=
Subject key identifier: 02:B5:CC:ED:12:43:9C:32:87:1C:B0:44:DB:57:A8:2F:69:44:EF:A7
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 019424453C23532930502ADE106CA958435D
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/ArXM7RJDnDKHHLBE21eoL2lE76c.roa
Signing time: Wed 01 Jan 2025 23:48:24 +0000
ROA not before: Wed 01 Jan 2025 23:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202877
IP address blocks: 185.151.252.0/22 maxlen: 22
185.151.252.0/24 maxlen: 24
185.151.253.0/24 maxlen: 24
185.151.254.0/24 maxlen: 24
185.151.255.0/24 maxlen: 24
2a07:7300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3c:23:53:29:30:50:2a:de:10:6c:a9:58:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b5cced12439c32871cb044db57a82f6944efa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:0c:55:6c:ae:97:08:13:de:ba:07:63:26:
3c:2c:bf:f8:79:91:00:d2:f5:a9:77:40:79:49:d4:
93:fe:37:90:df:8c:f4:de:0a:d4:b2:cd:bc:68:27:
af:18:12:1a:41:b3:7f:0c:14:46:c1:10:0c:dd:04:
7b:84:86:cb:1f:c3:00:26:0e:7a:a2:a2:f8:c8:1c:
33:8a:13:81:d7:67:ff:0b:ed:ef:00:aa:22:ea:ad:
a6:a7:27:8a:32:33:66:e1:aa:36:64:69:e9:b6:6f:
3d:a0:12:42:db:04:26:b3:78:09:23:4e:0e:6e:40:
a8:8b:67:dc:2d:b4:ef:db:db:dc:a3:cb:16:a0:70:
26:37:57:59:5a:4f:3a:e3:ba:68:4e:b3:5a:49:e6:
38:a3:2e:d3:63:31:0b:48:99:b3:6e:1b:a6:e4:fb:
e6:eb:40:89:9f:7d:af:91:a5:3a:88:2f:54:b2:58:
14:f4:ff:46:a9:a5:98:58:b2:90:89:78:15:08:95:
af:ea:46:c2:49:14:59:bd:0b:c5:85:0b:50:bc:cd:
b2:06:41:79:29:9e:8d:02:00:d3:c0:d0:a6:c0:d0:
70:7e:c5:e4:e5:20:54:35:f6:8b:91:86:3d:e4:1c:
90:7e:1e:ce:93:c1:36:d8:7e:e8:f8:f8:a3:24:59:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:CC:ED:12:43:9C:32:87:1C:B0:44:DB:57:A8:2F:69:44:EF:A7
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/ArXM7RJDnDKHHLBE21eoL2lE76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.252.0/22
IPv6:
2a07:7300::/29
Signature Algorithm: sha256WithRSAEncryption
ba:03:eb:79:88:29:2b:8e:3d:9b:a9:77:9a:51:9e:25:00:7e:
08:75:9d:23:c9:c3:5e:ca:43:b5:86:3d:2b:3e:b7:a2:75:52:
3f:27:42:66:28:4c:1e:3c:5e:8d:8c:3b:87:c7:e0:be:cd:90:
62:69:6b:6c:1e:81:0c:43:ee:2f:e2:0a:1c:b7:d2:68:78:46:
31:c7:6d:31:1c:86:a3:0c:93:4e:42:28:ff:ea:5e:ec:cd:4c:
d8:1b:b6:5f:a8:10:e2:e0:1c:c6:1d:ab:1e:80:4b:29:18:f3:
33:36:00:10:2d:8b:d8:49:df:ba:8d:61:e2:62:c4:28:01:d9:
ff:9a:26:86:4d:51:9e:06:9e:6c:23:55:0a:0b:4b:61:79:bd:
13:31:59:1c:9b:61:47:d4:b3:9b:50:b2:c9:36:17:63:04:db:
f8:20:a9:14:50:d4:b8:db:5b:9f:d2:61:c3:67:d8:ce:84:3a:
40:66:5c:5d:1d:5a:c4:f5:0b:d0:a7:da:65:59:db:4a:28:e7:
e0:d8:3f:27:5a:e9:52:1e:67:b6:c1:36:d9:f3:88:24:3f:29:
26:02:32:c5:e2:5a:66:8f:59:58:ae:cb:44:84:87:31:fa:28:
94:e8:3a:4b:ff:ea:0f:64:c5:51:1a:20:56:2e:5b:c8:7a:a8:
4e:38:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net