Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/8tqsaUcyKZIIKG75KzikfFZDjvk.roa
File: 8tqsaUcyKZIIKG75KzikfFZDjvk.roa (raw, json)
Hash identifier: zktR6lve6abwwBFYbdtbK1pvyhA4oW0U5RIxFZXPtoI=
Subject key identifier: F2:DA:AC:69:47:32:29:92:08:28:6E:F9:2B:38:A4:7C:56:43:8E:F9
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 019420D5BDF46ECCB62315A4E5645C7A3DC6
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/8tqsaUcyKZIIKG75KzikfFZDjvk.roa
Signing time: Wed 01 Jan 2025 07:47:46 +0000
ROA not before: Wed 01 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205894
IP address blocks: 185.232.176.0/22 maxlen: 22
185.232.176.0/24 maxlen: 24
185.232.177.0/24 maxlen: 24
185.232.178.0/24 maxlen: 24
185.232.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:bd:f4:6e:cc:b6:23:15:a4:e5:64:5c:7a:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2daac694732299208286ef92b38a47c56438ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:f0:3c:06:8b:47:9e:0f:0a:7b:2a:fd:e8:
12:61:6d:90:28:8e:63:79:c4:35:9f:18:d2:12:ed:
b7:e9:00:4c:fb:b2:88:b7:1d:69:f0:ba:68:30:4d:
9e:2d:e3:3f:ff:22:7a:db:97:98:ce:a3:be:81:6e:
6c:04:a0:d9:9a:2a:2f:8e:f8:a0:26:94:b4:ce:e5:
67:79:12:8c:4c:02:4e:69:12:15:5a:f8:d9:9d:40:
d1:32:f3:6e:e0:fa:6b:2d:0e:29:bf:11:62:dc:e6:
38:65:9c:24:59:f7:1c:ac:0e:28:9c:bf:a1:23:87:
f1:54:7c:01:a5:0c:74:45:dc:91:4d:9c:e3:61:a6:
e0:41:89:25:7d:fa:c6:fe:50:61:e1:ef:47:e3:6a:
8a:b8:b4:38:4e:ef:55:56:49:0e:0a:bc:0f:f6:c1:
31:dc:0d:88:d7:f5:1c:f6:f7:58:21:d4:7a:ba:a5:
36:2d:67:32:7e:bf:59:a8:b4:dd:93:7c:f4:fa:8e:
b4:1f:63:cb:e5:b6:27:2c:ad:41:0a:4c:8a:00:0b:
af:7e:01:13:0a:58:3d:c1:a5:bf:d7:df:83:36:4a:
06:84:5e:b4:56:7d:4c:0a:9a:64:a6:52:0d:c7:8e:
b3:10:db:bd:4c:8a:a4:1b:c8:72:c1:8c:88:99:cf:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:AC:69:47:32:29:92:08:28:6E:F9:2B:38:A4:7C:56:43:8E:F9
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/8tqsaUcyKZIIKG75KzikfFZDjvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.176.0/22
Signature Algorithm: sha256WithRSAEncryption
be:d0:ac:d0:10:9e:25:eb:a3:2f:2d:b7:46:29:99:42:e8:fd:
09:f8:69:2b:f9:0a:2a:64:30:6c:38:c9:23:ae:ad:51:26:0e:
d2:98:e5:8b:4f:91:cf:5a:b2:2e:a6:7d:32:f0:6a:cb:09:41:
78:8a:c8:d3:13:f2:4d:94:70:87:d3:cd:db:ff:a8:3d:9e:42:
d1:73:de:39:8a:6d:fa:6d:e3:1c:23:81:57:28:95:00:9c:24:
81:5d:b8:26:35:be:b0:b2:11:2e:1e:09:3b:9f:b3:d5:fa:a3:
89:48:fc:e9:08:7d:cf:f5:4a:86:ca:b9:a0:a0:4d:ab:5c:5c:
ea:d0:03:29:af:e6:f0:b1:94:1e:ec:be:71:92:9e:ad:c6:68:
a7:39:7c:45:76:90:24:3c:7c:ae:be:e5:6b:d9:26:71:91:b0:
ec:1b:28:58:69:23:5e:81:35:65:7f:79:cd:ae:0c:1f:d7:f8:
35:08:36:15:c3:e1:15:78:74:36:f3:49:45:24:33:14:91:d8:
27:0b:2d:d2:58:74:88:27:2f:8f:6f:8a:dd:2f:0e:89:c9:04:
07:2c:8e:2d:9d:3d:bb:9a:c5:92:5e:2b:99:60:7c:c8:c5:3e:
90:46:e9:96:e1:54:31:b4:76:dc:53:ca:7d:d0:9c:a5:91:bb:
bc:b1:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net