Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/6aNeTA5AWlbR4K0Be9a6lB7llkg.roa
File: 6aNeTA5AWlbR4K0Be9a6lB7llkg.roa (raw, json)
Hash identifier: pgW6et/1IzAuhXH8bkhY/6wmV9q7QWSHFhTD0FkFq1M=
Subject key identifier: E9:A3:5E:4C:0E:40:5A:56:D1:E0:AD:01:7B:D6:BA:94:1E:E5:96:48
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 0194206842E82C2BB4AE7C8AAD9775B30233
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/6aNeTA5AWlbR4K0Be9a6lB7llkg.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21034
IP address blocks: 185.2.146.0/23 maxlen: 23
185.179.103.0/24 maxlen: 24
212.43.96.0/19 maxlen: 19
2a00:1be0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:42:e8:2c:2b:b4:ae:7c:8a:ad:97:75:b3:02:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9a35e4c0e405a56d1e0ad017bd6ba941ee59648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:a9:12:c9:14:29:69:47:35:0c:0f:99:50:
c0:98:a1:f7:00:6f:de:d0:fe:fe:93:1d:99:f6:9d:
fc:9a:ca:b1:30:35:b6:1f:12:e9:67:28:52:d5:71:
92:9e:8f:f0:ad:d3:3e:6d:88:c3:ce:0f:f5:0b:2f:
d2:c5:b2:de:eb:80:1c:a6:8f:18:06:83:6f:42:97:
08:e8:19:1d:ae:94:4f:b8:6c:ac:a5:16:b4:8d:40:
ee:5d:00:9b:71:d7:00:6e:3b:c1:9c:bf:e8:02:92:
ef:c3:fc:2e:17:fb:a3:2c:63:c8:a7:ce:08:fe:57:
33:b3:d9:c5:1b:cd:9d:c8:ad:e1:95:75:dc:ee:ba:
91:c0:82:7a:f2:af:bf:47:37:c0:9d:06:86:33:bb:
20:d8:e6:7b:03:be:05:47:8e:40:25:ff:bc:c5:23:
ad:64:50:03:b9:52:f6:07:c0:c2:25:0e:0f:4e:80:
ae:6a:1c:e9:0a:60:d0:0d:14:c8:de:01:7f:0e:44:
31:ee:05:34:44:04:6b:d5:17:c1:61:57:0a:86:9b:
d3:43:d8:1a:fc:be:fb:70:cc:e8:48:82:c8:40:42:
a0:8f:41:af:77:9f:1e:e9:1b:05:d0:22:e4:0a:1e:
15:b8:fc:bf:94:a3:95:ee:0e:cd:70:23:b2:35:29:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:5E:4C:0E:40:5A:56:D1:E0:AD:01:7B:D6:BA:94:1E:E5:96:48
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/6aNeTA5AWlbR4K0Be9a6lB7llkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.146.0/23
185.179.103.0/24
212.43.96.0/19
IPv6:
2a00:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
48:2a:69:9d:a2:b4:ad:ba:53:3c:81:c7:2e:29:19:76:d2:e4:
ec:2d:5d:bc:4c:30:3d:ff:5d:82:87:64:32:f2:c1:cd:59:24:
fa:06:5f:b2:1d:84:fd:f6:24:77:fc:57:0b:90:77:c9:ce:18:
18:0b:bf:77:cf:ce:c8:39:94:61:4e:d1:0f:7d:c0:ed:aa:b5:
3e:08:45:59:c7:e5:94:f1:21:4c:a8:95:45:13:24:87:4c:f2:
e5:d7:30:83:a2:f5:66:ca:fd:b8:3c:dc:3e:f0:c0:37:31:e0:
f0:b9:4c:5b:9e:8e:62:be:97:42:d8:8c:f9:3f:8d:99:68:5d:
1f:7a:f4:c5:d0:c2:3d:a5:b5:72:02:7d:66:af:d3:04:78:c4:
a7:a6:c8:91:e3:b5:88:30:5b:37:b5:d1:aa:b3:50:e4:67:64:
50:13:56:b0:fc:06:2b:25:d8:af:73:90:c7:35:76:ef:75:43:
e6:93:a7:9d:23:88:d6:d2:20:0e:86:df:30:1e:63:b5:8c:e6:
b8:d6:3b:1c:fd:62:51:ae:41:ab:6d:87:f4:dd:6d:1f:38:59:
d7:7d:36:a3:9d:fa:99:6b:03:26:40:cf:b8:61:aa:46:f9:6b:
e7:99:28:68:97:b2:7f:68:11:79:9e:da:4c:32:65:50:84:d2:
c5:6e:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net