Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa
File: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (raw, json)
Hash identifier: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=
Subject key identifier: B1:63:EE:07:6F:C9:69:0E:48:6D:F5:95:E9:34:63:C3:30:04:B6:6A
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019422FBAAE5620ADFF232D17E7183F80A4B
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201701
IP address blocks: 185.66.192.0/22 maxlen: 22
185.66.193.0/24 maxlen: 24
185.66.194.0/24 maxlen: 24
185.66.195.0/24 maxlen: 24
2a03:2260::/30 maxlen: 30
2a03:2260:1000::/36 maxlen: 36
2a03:2260:2000::/36 maxlen: 36
2a03:2260:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:aa:e5:62:0a:df:f2:32:d1:7e:71:83:f8:0a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b163ee076fc9690e486df595e93463c33004b66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:e6:65:98:9b:32:1b:80:ad:47:02:a7:6e:
28:e9:d2:b4:27:00:62:1c:ec:fa:4c:fb:b8:29:4c:
86:cb:9a:38:0f:61:91:ef:f8:0c:31:06:79:9f:b5:
da:43:1e:5c:a2:ca:ce:bb:c7:e0:69:99:50:3b:1c:
1d:c2:af:84:53:70:f7:db:94:71:59:ce:f8:55:0d:
d7:ec:81:77:22:b3:18:1c:1c:60:bd:38:49:dc:b9:
0d:1f:ed:c5:17:7c:d6:40:64:04:97:14:21:c6:88:
00:ca:f9:86:7b:ab:af:c7:cf:3d:04:2f:f1:1e:3d:
e8:ef:1c:61:8d:89:38:7f:33:05:6b:10:6d:9d:2e:
d7:55:84:8c:1a:1e:1d:af:06:a9:ac:d2:7c:26:b5:
87:d4:cf:f1:85:2e:0a:ea:4d:e1:e4:62:e9:fc:4f:
cf:10:ad:9d:4a:fc:ca:1d:4b:bb:7a:e1:cb:d7:62:
2f:26:f1:ab:0b:ee:7a:9d:d0:ee:42:2c:cf:12:59:
67:b1:e6:7a:41:93:a2:49:cd:59:f6:96:1b:fc:4d:
7a:91:2a:30:07:b0:93:d0:af:af:3c:83:52:f6:e2:
48:2b:4e:62:c7:fa:b3:15:eb:a1:b6:58:41:b6:a0:
87:6a:ac:d0:2f:a0:45:f3:a7:ea:3c:ce:d1:24:bb:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:EE:07:6F:C9:69:0E:48:6D:F5:95:E9:34:63:C3:30:04:B6:6A
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.192.0/22
IPv6:
2a03:2260::/30
Signature Algorithm: sha256WithRSAEncryption
6f:53:c7:35:b5:48:c2:d5:13:bb:19:29:a4:16:00:5e:6b:ad:
f8:e8:f6:3d:d5:90:17:e4:95:a6:46:a5:33:4f:1d:ec:11:12:
13:0b:55:33:0f:e6:fe:7f:8a:ff:4a:8d:40:4a:0f:cd:88:61:
cc:b7:38:7c:a1:e9:59:90:64:b2:53:42:eb:5a:f6:93:4c:45:
95:f5:c2:85:ce:12:32:8f:ad:d5:d7:ee:27:37:0e:64:78:fd:
41:3a:c2:9a:53:3a:33:8f:ce:c2:8a:ee:e3:a2:f5:8a:b2:da:
84:db:42:5a:15:27:64:b8:67:0c:4f:c1:74:c3:a6:35:d6:43:
a4:36:d7:1c:f7:8b:57:4a:dc:57:6e:b6:97:0b:a3:49:18:42:
7d:77:30:85:e1:73:37:d1:2c:68:43:7e:5f:46:9a:20:8c:fa:
d5:c3:4a:33:08:18:3b:21:0b:7e:2a:a0:61:09:bd:f8:42:29:
45:c9:30:cf:c6:55:e4:2f:f2:24:07:19:c8:42:e0:82:a7:56:
bc:48:1b:4b:7a:c8:65:06:6a:9c:e7:48:56:6f:90:8d:7b:9d:
45:8e:66:ee:9a:26:ed:22:4b:a1:7a:11:3a:7c:01:47:5a:3f:
25:cb:79:7c:80:f8:ec:22:76:98:ff:c2:06:b6:90:48:ab:62:
ae:55:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net