Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/ejchce-hV6tRVRay48MMQu7AoMY.roa
File: ejchce-hV6tRVRay48MMQu7AoMY.roa (raw, json)
Hash identifier: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=
Subject key identifier: 7A:37:21:71:EF:A1:57:AB:51:55:16:B2:E3:C3:0C:42:EE:C0:A0:C6
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01954CB0A56032FFFFDF51EE5698FBAF7241
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/ejchce-hV6tRVRay48MMQu7AoMY.roa
Signing time: Fri 28 Feb 2025 13:13:19 +0000
ROA not before: Fri 28 Feb 2025 13:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207545
IP address blocks: 185.13.164.0/22 maxlen: 22
185.146.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:b0:a5:60:32:ff:ff:df:51:ee:56:98:fb:af:72:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Feb 28 13:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a372171efa157ab515516b2e3c30c42eec0a0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:78:90:12:41:a1:ef:0c:2a:42:92:4c:72:
7d:67:6b:62:02:58:e2:a6:62:d5:21:5e:d7:10:c0:
b6:3b:6d:1a:90:8e:a5:38:94:fe:d9:58:f3:a0:a6:
57:1d:85:55:c7:15:fd:f5:02:c3:34:61:1e:75:13:
cf:d3:77:a2:d6:34:ac:1f:0d:05:97:c1:0b:3f:32:
67:36:ff:3b:a2:77:a6:14:c9:ce:e9:f5:a5:c3:66:
40:52:95:92:ac:40:c8:47:4f:c5:91:ed:6d:d2:01:
d3:8c:a7:55:ce:36:3c:4a:76:2f:ee:70:a0:d0:57:
d7:e7:0c:6f:48:54:e1:29:43:32:d1:dd:ed:df:b6:
f0:e1:45:55:db:4c:14:49:f1:bd:ad:b0:96:3d:b2:
9d:a1:0e:68:92:61:f0:7b:15:5a:36:d6:ca:67:d4:
21:90:e8:4c:61:08:93:44:89:6a:ab:c5:0e:7b:31:
47:18:27:e6:20:59:f1:6d:d2:ad:59:e4:f1:84:4c:
73:3a:21:ce:16:5d:c3:68:a1:4a:d0:34:3e:6d:3f:
0f:37:0f:18:98:00:ff:c5:db:0c:ba:c4:4e:05:85:
2b:3c:7e:b3:46:dc:a5:53:72:b4:e4:32:7c:6e:41:
09:a4:d1:d6:bf:b1:8b:4c:4f:47:7b:a4:70:82:77:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:21:71:EF:A1:57:AB:51:55:16:B2:E3:C3:0C:42:EE:C0:A0:C6
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/ejchce-hV6tRVRay48MMQu7AoMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.164.0/22
185.146.132.0/22
Signature Algorithm: sha256WithRSAEncryption
60:84:11:dc:9c:6e:cc:92:4c:28:67:8c:81:e7:13:63:0f:bd:
dc:aa:80:d1:64:75:1e:1e:bf:fd:c1:00:89:e8:28:12:2f:50:
5f:50:f9:af:b5:3f:80:a9:3d:b3:64:d0:07:b1:8e:d3:bf:f7:
2c:51:27:dd:52:3e:d9:9e:94:3d:1f:99:fb:ac:38:1c:44:11:
fb:8e:4a:38:5a:dd:9d:7d:43:3a:bf:96:31:da:82:57:75:84:
48:4e:cb:84:16:9b:37:b1:92:ce:8f:3c:ba:54:f7:a7:15:11:
b6:ae:e7:5e:8e:85:48:4a:d0:da:60:0d:6a:71:5d:a2:99:06:
4c:19:9d:57:11:00:57:c8:84:2b:a0:74:eb:63:2d:b0:a1:13:
19:00:cc:f0:cf:e8:59:7f:fc:bb:71:03:2c:f4:21:d5:c9:47:
48:01:b8:09:33:cb:8a:64:83:f7:1b:d1:dd:a3:a5:a9:bc:4b:
9e:98:dd:5e:b4:d8:ec:83:69:f0:0c:7d:fa:dd:1c:a7:b2:3a:
6b:f9:c9:d2:03:95:0c:74:f8:0c:a1:ff:fd:16:a1:c8:f0:89:
1a:c8:72:2f:17:b3:31:6e:7d:a8:38:0c:34:b3:0c:3d:0f:1d:
97:ea:9c:61:95:d4:72:0c:f0:d7:30:29:1a:e1:8b:6e:b6:38:
69:ee:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net