Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa
File: 8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa (raw, json)
Hash identifier: oJIUnSFr4nxPfIklC3jgxHnAbm0kguG5fFIKoWMYD0A=
Subject key identifier: F0:4D:2A:19:98:88:DC:7D:5F:ED:6E:A4:4F:81:7B:2A:4A:72:F5:30
Certificate issuer: /CN=db282fd897317c2cadd7b13969f6f015c397e05d
Certificate serial: 019426D989CA3005AAD75E7086470787C3B0
Authority key identifier: DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199608
IP address blocks: 185.9.36.0/24 maxlen: 24
185.9.37.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
2a03:48c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:89:ca:30:05:aa:d7:5e:70:86:47:07:87:c3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db282fd897317c2cadd7b13969f6f015c397e05d
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f04d2a199888dc7d5fed6ea44f817b2a4a72f530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:86:33:15:0c:9c:f5:ff:a6:83:03:84:71:
4a:8c:ed:98:60:6d:c7:0b:11:22:79:c4:eb:d6:f1:
fc:5f:56:eb:53:f8:6d:3d:b8:4d:15:75:03:90:8c:
98:07:f7:a5:47:98:e9:81:66:32:47:2d:72:92:f8:
c4:52:1f:74:78:6a:eb:e4:d6:6f:1f:eb:07:65:05:
df:dc:89:38:6b:0e:5a:32:16:83:c0:29:79:ba:71:
14:c8:63:2f:be:d1:f1:11:34:48:92:2d:4e:37:41:
a5:9d:52:01:37:1e:6f:53:7c:ec:40:c5:5e:f8:de:
2f:54:58:62:c7:4a:06:21:85:d6:9b:b7:8f:10:be:
b0:03:1a:a0:7c:20:58:25:af:98:94:70:3d:0b:27:
86:aa:a2:4c:d5:62:c8:03:20:a8:ea:13:58:01:1d:
81:9b:46:e0:41:af:19:dd:e4:da:82:24:b1:86:95:
f6:e9:1d:ab:b5:b4:f2:de:90:7d:85:78:61:94:0d:
68:aa:b1:86:97:3e:6b:2b:8c:28:d5:d5:16:4c:e9:
46:aa:6d:20:64:d3:5b:ea:51:73:e5:4a:53:bc:06:
f3:df:8f:2e:0e:5f:47:72:a6:4c:e5:24:be:cb:bb:
99:b3:2a:08:8a:7d:63:9c:a6:d3:f2:c9:86:5c:87:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4D:2A:19:98:88:DC:7D:5F:ED:6E:A4:4F:81:7B:2A:4A:72:F5:30
X509v3 Authority Key Identifier:
keyid:DB:28:2F:D8:97:31:7C:2C:AD:D7:B1:39:69:F6:F0:15:C3:97:E0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ygv2JcxfCyt17E5afbwFcOX4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/8E0qGZiI3H1f7W6kT4F7Kkpy9TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7ceb8-4856-4463-b7b8-353bc6266ee6/1/2ygv2JcxfCyt17E5afbwFcOX4F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
IPv6:
2a03:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
85:41:99:ec:02:bc:16:1d:b2:be:b2:59:05:4b:e3:32:26:df:
ca:d4:32:fd:1b:a1:e7:82:b7:63:6f:0c:ca:8c:12:0e:e6:b4:
dc:02:ce:51:34:a6:82:ea:ce:5b:c7:5f:f8:5e:64:9b:2d:c7:
ac:b6:6f:97:b1:de:ef:d9:87:0f:0e:c7:4f:f5:03:38:af:24:
be:07:bb:d3:f5:70:4d:cc:36:ce:c3:94:24:fb:42:df:2c:f4:
91:44:74:97:d0:d2:1f:6a:62:71:24:24:c0:44:24:e4:ec:ad:
69:b4:46:56:4b:4b:a4:07:21:e9:e6:00:ce:ab:11:17:11:99:
52:35:81:bc:8a:c2:83:ba:7e:57:f1:20:b0:6d:c4:e8:73:cb:
93:56:4c:2b:d2:3a:ee:05:90:4c:96:87:ed:5c:8e:03:7f:00:
87:2f:23:24:e9:fc:68:f8:7b:c3:f2:4c:b4:15:85:cf:26:af:
9f:7e:c4:af:e3:b9:43:0c:c9:c2:c4:0d:17:f6:c0:37:66:24:
7a:99:1b:ca:ee:ba:48:06:82:9a:c1:2f:bf:e1:ae:85:4e:81:
59:62:05:ce:51:dd:33:f1:4e:d0:14:09:00:27:e7:3e:cc:d9:
b4:ac:91:b5:69:4d:9f:aa:b2:84:67:aa:4e:66:0f:f9:ec:50:
51:c4:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net