Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa
File: mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa (raw, json)
Hash identifier: eEF1vwGGqfylK4nRHvE5xtss/22xA/yBRdsBu2iNecU=
Subject key identifier: 99:18:41:4F:E3:65:98:3E:3E:77:BB:B4:29:CE:61:8C:3C:F5:4B:68
Certificate issuer: /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial: 01945565A1A4C360A932D4F06F18982CD142
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa
Signing time: Sat 11 Jan 2025 12:45:11 +0000
ROA not before: Sat 11 Jan 2025 12:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62173
IP address blocks: 185.75.196.0/23 maxlen: 23
185.75.196.0/24 maxlen: 24
185.75.197.0/24 maxlen: 24
185.75.198.0/23 maxlen: 23
185.75.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:55:65:a1:a4:c3:60:a9:32:d4:f0:6f:18:98:2c:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Validity
Not Before: Jan 11 12:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9918414fe365983e3e77bbb429ce618c3cf54b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:7e:fc:49:bb:4d:e7:2e:b4:cb:13:72:8c:
79:03:5d:3f:4d:61:84:76:0e:82:f5:46:65:bd:11:
32:06:cb:9f:b5:28:ba:26:04:03:8b:cd:06:5e:37:
95:eb:4f:d6:a3:b5:03:bb:32:6f:98:fc:3f:6e:c4:
f4:d0:e4:11:df:c9:fa:55:5c:ab:bd:af:b8:f9:03:
08:1b:15:ba:ea:f2:f7:98:b9:06:31:14:a6:9e:95:
07:90:35:46:e5:5d:e8:75:ad:86:6e:5a:6a:0f:e8:
54:95:52:5e:fd:b1:5f:ca:b4:fc:b6:9a:18:ee:29:
86:d4:7b:4a:d6:fb:76:c0:72:89:e3:c4:e5:c3:a8:
d3:bb:7a:91:6e:19:72:b3:9c:16:1d:88:3d:33:9d:
a0:92:c4:02:8f:86:6b:7c:47:c8:3a:fa:08:80:b0:
f2:35:66:a7:02:95:06:c3:0f:5b:21:fc:44:f4:4b:
b8:92:b5:f3:e3:84:62:9a:82:c6:d9:62:3b:01:8d:
e9:bb:57:7d:de:b0:33:2f:40:fa:6d:3a:3f:44:92:
87:62:90:41:2b:51:cf:aa:1f:4a:de:ea:be:06:11:
de:c9:ec:e2:8f:ea:72:bb:99:df:5a:a3:b3:ab:90:
78:b6:89:6e:4e:f9:75:d9:33:7c:93:4f:4a:ea:81:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:18:41:4F:E3:65:98:3E:3E:77:BB:B4:29:CE:61:8C:3C:F5:4B:68
X509v3 Authority Key Identifier:
keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.196.0/22
Signature Algorithm: sha256WithRSAEncryption
78:e1:69:2b:41:a3:a4:05:0d:d7:32:56:04:8b:55:f3:8b:e3:
44:2f:10:1a:07:38:5e:89:a7:03:2d:72:94:82:e3:f5:47:1d:
d4:1d:64:ce:60:9e:d4:ec:78:19:35:07:c8:46:63:1d:8c:4b:
5e:3f:3d:e5:5f:0c:eb:10:2b:f4:6b:71:a6:62:80:18:2b:64:
c9:01:cf:5a:1a:40:f7:e6:c4:f8:85:76:0b:29:ef:ac:1b:c4:
6d:e9:0f:6f:96:11:39:65:9c:27:14:30:26:fd:62:39:ea:72:
95:0c:47:50:35:7d:fc:13:f7:3a:3a:65:1c:0d:37:25:f6:ae:
60:86:82:59:da:ec:b6:4c:bc:38:fb:56:9d:1e:2e:5f:ee:67:
57:ed:f0:e6:32:f6:0c:18:26:61:73:ee:2b:82:07:ef:4f:6f:
31:9c:b9:65:d4:15:bf:92:a7:04:23:db:4f:7c:07:b5:e6:0b:
98:7b:c3:ae:2d:a0:0b:bc:85:4c:53:48:a4:01:58:f6:2f:a5:
c7:1c:a5:39:20:c0:4c:a0:01:5c:f5:02:45:c9:39:52:f3:d7:
88:db:a2:e3:4f:e5:ff:67:b6:3d:f3:fd:ec:62:39:35:2d:55:
ce:7a:b1:01:14:9a:2a:25:59:a7:b5:a9:82:b7:22:9e:c9:a1:
68:62:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net