Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa
File: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (raw, json)
Hash identifier: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=
Subject key identifier: 00:2E:42:CE:AA:6F:8E:1D:0D:D9:46:B9:D9:18:67:C1:CD:1C:46:B8
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019425217033343B3F63531002980778325D
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205179
IP address blocks: 185.226.232.0/22 maxlen: 22
185.226.232.0/24 maxlen: 24
185.226.233.0/24 maxlen: 24
185.226.234.0/24 maxlen: 24
185.226.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:70:33:34:3b:3f:63:53:10:02:98:07:78:32:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=002e42ceaa6f8e1d0dd946b9d91867c1cd1c46b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:fa:5a:56:f5:c8:5e:ca:b8:1e:99:e7:a6:
c8:51:34:dd:01:54:ef:6b:22:1c:99:43:d5:bb:ad:
a6:f0:5c:d2:6a:0a:54:18:b3:13:e4:ee:9f:cd:94:
ee:21:a7:7a:c9:f1:13:ee:f3:e7:3c:c7:43:68:cc:
b0:94:fc:3d:d6:9d:45:34:74:2f:b2:a7:2e:85:9a:
49:f4:c3:20:3e:66:32:d5:6d:ec:d4:d8:99:6b:7f:
ff:90:53:b6:96:ba:0b:e4:e0:cf:cb:76:b8:17:e0:
8b:ca:5b:ab:5b:9d:b5:26:1f:78:8a:93:64:d0:d0:
63:dd:65:ca:11:65:1a:68:10:07:2b:34:f0:03:06:
d5:cb:0f:a2:fd:45:7a:fe:a3:b2:8b:b7:dc:08:5d:
f9:23:1f:9a:1c:08:7c:f8:3e:e8:b4:34:28:9a:f1:
13:5d:04:ef:e8:b2:28:3b:39:f7:9b:be:00:c9:29:
98:ac:81:05:17:dc:f2:ac:a8:81:3d:59:cb:d2:3a:
b7:a5:f6:7d:a8:bc:2e:ba:9e:30:00:69:af:d9:d1:
b8:00:14:b0:5f:b0:d3:cb:a1:ca:d1:e5:f8:b8:54:
9e:ae:1e:60:4e:6e:4c:26:db:4e:82:05:38:18:67:
e4:1e:ec:26:d8:0a:39:13:3f:91:c3:03:c0:24:35:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:42:CE:AA:6F:8E:1D:0D:D9:46:B9:D9:18:67:C1:CD:1C:46:B8
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:13:1a:c8:fa:df:ec:3d:b9:ff:8e:c2:90:48:06:a9:ed:d6:
a6:d4:7d:a9:55:cd:cf:f1:eb:80:2c:a9:90:86:1d:60:3e:aa:
7e:99:64:12:dd:81:36:a7:16:1a:f6:96:d4:6c:60:c6:0f:48:
19:fa:88:90:a0:1e:fa:66:84:03:5a:f8:1c:11:43:36:5b:d4:
11:84:56:1e:92:d3:57:76:a0:39:ba:d5:ea:1a:a4:36:ba:85:
81:cb:7d:93:d1:d3:ce:fd:ab:87:a6:a6:e7:e9:e9:ca:9d:03:
8f:9b:49:12:52:4f:c5:c1:4c:bd:a3:e0:ce:9d:42:7c:6e:6e:
c1:72:cb:12:58:7c:82:3e:31:72:8b:70:dd:0f:3e:a3:ed:fa:
d3:08:65:49:04:97:5e:17:b1:12:dd:5b:92:bc:87:c7:0d:e0:
ad:e2:2e:00:69:e8:1a:d0:e3:b4:0b:d9:25:ce:13:23:7b:90:
2e:cf:bc:bf:67:d0:6e:08:ba:12:a5:b9:53:9b:29:98:09:f9:
be:5c:c8:a8:75:7d:9c:37:a8:88:02:26:0b:d7:2e:cf:cd:f3:
20:bf:98:4a:fa:8f:f2:b8:d9:0c:df:c2:d7:c5:c2:09:7a:31:
47:9d:e6:b1:94:40:fd:a5:fa:5b:5b:c7:4c:b2:11:a5:30:f2:
0a:04:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net