Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/64PcT-ttV59tp4M6SLzIc1B2y1U.roa
File: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (raw, json)
Hash identifier: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=
Subject key identifier: EB:83:DC:4F:EB:6D:57:9F:6D:A7:83:3A:48:BC:C8:73:50:76:CB:55
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019421441CF3EBFB4BF8FA19B01AA67A31F6
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/64PcT-ttV59tp4M6SLzIc1B2y1U.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41114
IP address blocks: 185.145.72.0/22 maxlen: 24
213.232.108.0/22 maxlen: 24
2a09:5180::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1c:f3:eb:fb:4b:f8:fa:19:b0:1a:a6:7a:31:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb83dc4feb6d579f6da7833a48bcc8735076cb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:36:0f:f3:ed:1a:03:99:98:2d:2a:72:70:
cc:cc:20:b1:91:60:08:fa:12:00:ba:cf:2a:e7:e4:
55:4d:79:81:9c:f8:8d:3e:fb:82:05:86:91:fe:52:
21:8d:3b:92:05:7b:a5:a5:67:f6:bd:21:59:c0:63:
bf:8e:ca:62:b1:67:c2:ba:da:fc:07:06:29:3e:3b:
d6:7a:19:13:e4:8e:18:b9:3a:5e:5d:5d:d6:0d:39:
e7:f3:06:3f:11:76:3b:66:bb:9c:58:2a:78:8d:a6:
3d:a1:4f:a6:52:7a:e3:ba:0b:d5:c9:a1:7e:04:b9:
6c:0d:ef:66:c3:66:79:8a:39:89:db:3b:87:73:82:
e1:5a:3c:22:78:53:fc:68:15:e3:d8:f1:68:a4:20:
6a:0b:74:57:b2:12:86:42:7b:7f:90:e2:7d:3f:84:
57:92:6a:93:13:ca:8a:09:a2:6e:49:45:b1:b6:6c:
5b:88:d4:ee:7f:0a:e3:01:87:02:5b:2e:ce:a2:5d:
53:ed:3c:a6:35:66:b7:9b:0b:49:bf:7d:6c:b9:90:
3a:af:a2:a6:d3:92:68:4c:af:a8:dd:fe:50:a2:83:
d9:11:d7:7f:7f:82:74:1b:8b:6b:ec:ea:cf:0e:d5:
f8:1c:df:fa:c6:a9:ee:95:8b:b0:35:0e:14:ec:9b:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:DC:4F:EB:6D:57:9F:6D:A7:83:3A:48:BC:C8:73:50:76:CB:55
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/64PcT-ttV59tp4M6SLzIc1B2y1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.72.0/22
213.232.108.0/22
IPv6:
2a09:5180::/29
Signature Algorithm: sha256WithRSAEncryption
0b:26:37:4c:82:da:38:5b:00:56:39:d1:ee:d8:a9:31:08:38:
dd:a9:b6:44:f4:be:30:06:b8:aa:16:35:08:5a:8d:2a:7c:98:
b7:11:ef:8b:10:c7:b1:b9:aa:bc:1e:75:c0:0f:89:ba:72:e9:
3c:2d:a5:fa:9e:82:4b:6d:cf:33:22:e1:61:93:33:dc:66:6a:
80:f8:89:62:f4:65:64:02:9b:66:17:2e:c2:99:4b:69:82:e5:
8b:78:cd:8b:84:37:17:5b:05:b8:0b:06:31:0a:95:3f:7c:8c:
11:74:79:f6:61:65:ed:64:9a:88:17:ac:80:01:0b:cb:39:b9:
f7:06:8a:7d:ba:b3:f7:b8:30:59:23:d6:6f:cf:8a:78:01:8b:
d0:0a:70:01:44:83:07:55:34:36:df:c8:77:66:97:7a:a3:cc:
3b:bd:87:8f:8b:36:2e:77:1b:37:1c:b4:66:f8:a2:c0:06:ae:
3c:6a:f4:96:a4:9a:b5:6b:03:21:91:f3:b8:c2:c5:5c:84:1f:
93:44:a1:1a:46:b3:77:dd:cc:75:79:26:ef:0f:d4:8c:ea:ba:
43:33:10:03:d2:49:93:e7:b8:5c:42:c8:82:05:0f:1b:cb:eb:
96:d3:ef:5e:b6:83:b0:a8:02:cc:ff:49:3a:af:4c:4d:15:e4:
32:b8:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net