Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/c4U2evb93678CsrZ2ZQQemAPoFw.roa
File: c4U2evb93678CsrZ2ZQQemAPoFw.roa (raw, json)
Hash identifier: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=
Subject key identifier: 73:85:36:7A:F6:FD:DF:AE:FC:0A:CA:D9:D9:94:10:7A:60:0F:A0:5C
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 019427B619C5C38BB56EFD8D0A591C493995
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/c4U2evb93678CsrZ2ZQQemAPoFw.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204922
IP address blocks: 185.235.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:19:c5:c3:8b:b5:6e:fd:8d:0a:59:1c:49:39:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7385367af6fddfaefc0acad9d994107a600fa05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:b0:69:89:df:d2:85:8f:51:f2:ef:62:13:
a5:ef:04:19:18:5d:35:58:7a:88:20:74:b7:1e:90:
22:ec:96:39:6a:99:87:dc:5b:a3:99:7a:00:ab:6c:
1a:b1:e5:af:5e:00:61:7b:08:66:74:f0:f1:3a:56:
05:8a:74:df:98:ff:f8:36:77:5a:55:b7:c8:f2:de:
e7:5b:ca:a2:06:3c:49:63:84:fe:48:e2:58:00:0b:
73:e0:01:a1:c6:13:7c:52:eb:fe:c9:08:19:7e:16:
ad:1a:f4:d4:66:fb:09:77:56:0c:1e:21:05:e5:2f:
bb:48:84:b0:d6:30:b6:36:ae:17:a6:f3:8d:a9:eb:
5a:6a:f4:f4:8c:06:2e:be:0f:06:53:11:26:f6:35:
b0:21:7f:a6:a5:0b:59:e4:50:5c:26:27:4f:88:7b:
33:83:51:6d:40:a8:c4:b1:e4:91:8d:81:cf:01:75:
ed:a9:b9:35:2e:f5:b7:dd:6d:c1:13:94:c4:b7:93:
76:68:d8:74:9b:6b:a9:71:30:b4:e5:78:77:4e:af:
6b:17:a6:53:19:85:d3:92:2c:8a:6d:8f:c3:e1:d1:
a6:48:9a:f1:43:29:06:42:b0:2b:ad:c2:2e:58:4c:
03:29:54:ee:bf:45:c2:79:11:12:72:6e:84:27:3e:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:85:36:7A:F6:FD:DF:AE:FC:0A:CA:D9:D9:94:10:7A:60:0F:A0:5C
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/c4U2evb93678CsrZ2ZQQemAPoFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.208.0/22
Signature Algorithm: sha256WithRSAEncryption
58:f7:ae:c8:c4:d1:8b:1a:ec:3c:ee:35:50:1d:ab:7d:da:af:
12:0e:d0:9d:c9:91:d7:f0:3a:4d:ae:0d:66:a1:7d:dd:f9:ef:
ad:7e:b3:6e:61:7a:f3:f2:ca:77:94:69:82:89:e0:54:69:45:
08:5e:2e:e9:f0:d9:7b:83:32:e2:00:c0:40:73:6d:e1:e7:d3:
d6:92:f5:4c:28:b1:e7:44:21:7f:29:15:29:4b:2f:22:18:03:
e1:db:9f:a0:32:a8:2e:85:63:42:fa:e0:78:83:57:11:c0:50:
08:d8:87:e1:29:22:d7:56:3c:ff:1e:bd:fc:95:a2:6a:9a:e0:
2a:97:4c:51:05:a7:ca:d0:96:3f:eb:f4:b8:44:57:e7:4d:81:
fa:d7:51:8d:88:42:c4:b1:33:93:fd:95:d6:de:f7:88:40:ac:
46:1b:a4:05:04:17:d1:22:ca:9c:7b:78:07:ef:f6:af:ff:85:
65:ff:e1:fe:db:1c:38:dc:65:d4:69:e9:db:36:28:d8:11:51:
16:01:31:1e:d5:76:f7:da:f0:da:fe:1a:9a:49:b9:7b:dc:d8:
74:a9:47:26:b8:9e:95:ed:a3:bb:3c:9b:7b:62:f5:93:3e:d4:
41:d9:32:a4:52:5a:eb:1a:67:71:29:88:35:c3:78:10:b6:94:
34:2b:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net