Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zHS7uPNoDk4lBQ2_nUFo7iSwEZQ.roa
File: zHS7uPNoDk4lBQ2_nUFo7iSwEZQ.roa (raw, json)
Hash identifier: W/hB9jwnKfCtCkK5Mv5cp9z9ffMU+sbeVxoZOtQ0F1Y=
Subject key identifier: CC:74:BB:B8:F3:68:0E:4E:25:05:0D:BF:9D:41:68:EE:24:B0:11:94
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019626173EB868E1CAB0C7066B659BDF863A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zHS7uPNoDk4lBQ2_nUFo7iSwEZQ.roa
Signing time: Fri 11 Apr 2025 18:22:59 +0000
ROA not before: Fri 11 Apr 2025 18:22:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.208.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:26:17:3e:b8:68:e1:ca:b0:c7:06:6b:65:9b:df:86:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 11 18:22:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc74bbb8f3680e4e25050dbf9d4168ee24b01194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4c:f9:45:0b:8c:5c:63:3b:aa:31:29:3e:74:
53:e2:ba:fd:bc:be:c0:10:c6:e0:73:d3:fd:ff:a8:
bc:07:a7:aa:43:85:35:8b:9a:9b:5e:5e:a0:cd:d0:
e6:ae:bf:ca:cd:b2:bd:93:59:4c:59:0d:06:91:08:
91:2e:f2:9e:cb:13:0f:fc:83:e8:fa:ae:2b:13:e3:
fa:05:6e:a2:0b:92:93:6b:63:b9:b0:dd:e9:28:ba:
c5:cd:75:a1:89:da:53:dd:94:e6:e8:c7:68:96:9f:
d7:5e:f4:d2:d0:ee:06:c7:aa:70:5f:4c:be:61:27:
28:7e:0a:8d:e7:84:2a:54:53:f3:7f:ea:ea:79:5c:
86:a5:41:c1:0d:4a:f4:2d:f6:d2:1e:3f:9f:e3:f1:
44:04:04:b2:1c:a9:66:5d:87:bf:da:70:b5:4f:57:
d9:38:a4:38:3b:c6:09:51:7c:74:dd:b9:89:df:f8:
66:96:03:61:a7:99:4d:13:78:be:38:ad:74:1a:2e:
ec:ed:fc:e9:86:2d:b9:79:39:9c:e1:0f:53:cf:d6:
08:ac:0c:8b:0b:e2:95:cb:67:34:f7:96:4a:d1:18:
56:87:fa:5e:e0:5a:72:1a:cb:f9:0e:28:4a:37:21:
66:f6:5c:55:46:cf:d3:14:20:33:7e:77:28:bb:66:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:BB:B8:F3:68:0E:4E:25:05:0D:BF:9D:41:68:EE:24:B0:11:94
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zHS7uPNoDk4lBQ2_nUFo7iSwEZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.208.0/24
185.199.151.0/24
185.199.213.0/24
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dc:88:c5:11:82:39:4d:f5:19:b9:c8:38:fd:96:1c:eb:09:
12:e4:de:8d:d1:93:a2:11:8f:a6:1a:ff:07:48:f6:8f:f5:18:
52:f0:ef:a7:22:5a:fb:4f:3f:5a:e6:df:02:7b:d8:02:14:3c:
d9:b4:75:87:4f:eb:52:b7:23:af:93:6c:5d:a1:75:0c:9a:1c:
44:00:a5:ce:5a:50:0a:00:91:b5:03:29:56:ec:c4:73:9f:0a:
a2:6f:04:88:99:5a:87:4a:2a:61:32:c9:84:a7:14:c8:b2:96:
3c:6d:e0:07:a5:13:9e:29:22:20:4f:8c:63:ff:ea:70:d6:98:
cd:45:0b:4e:f3:2f:d3:60:aa:f7:b2:06:f1:f9:a8:12:6b:11:
af:64:c1:72:8d:ec:94:24:dc:cd:62:e0:df:5f:86:81:db:43:
06:69:c2:ee:00:ed:ba:b1:b0:99:1c:08:c2:65:1b:9c:11:40:
9f:79:89:69:16:07:fe:13:a6:9e:d0:a7:86:56:b8:ce:df:af:
88:a8:00:a5:9f:65:c6:6e:00:45:77:29:e6:83:ce:66:bd:75:
78:c1:b5:fd:b5:76:5e:ea:f1:0e:8f:c4:17:99:22:64:d2:e3:
28:a0:f6:07:a7:93:f2:30:5c:55:16:03:82:ec:c5:42:57:e4:
40:1f:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:37 2025 by rpki-client on console.sobornost.net