Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/CuosGZsAQa_atOUfAfS4SUVwI3o.roa
File: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (raw, json)
Hash identifier: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=
Subject key identifier: 0A:EA:2C:19:9B:00:41:AF:DA:B4:E5:1F:01:F4:B8:49:45:70:23:7A
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 01942521B939AB81B7CEFBEDDA9FD91F7428
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/CuosGZsAQa_atOUfAfS4SUVwI3o.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43341
IP address blocks: 88.150.0.0/17 maxlen: 29
185.188.120.0/22 maxlen: 22
194.45.154.0/24 maxlen: 24
213.211.192.0/18 maxlen: 29
2a03:5080::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b9:39:ab:81:b7:ce:fb:ed:da:9f:d9:1f:74:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aea2c199b0041afdab4e51f01f4b8494570237a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:be:ca:12:18:f0:83:2e:da:14:06:ad:3b:
ca:d3:48:fa:42:54:16:81:a8:7a:cb:e8:74:05:c1:
e3:24:c4:97:08:2f:0c:c9:ce:7e:5e:0b:d9:cb:d0:
be:26:30:53:2f:58:9e:66:e0:f3:cf:7e:34:8e:6e:
bf:bf:1b:16:6c:c3:e2:90:07:cf:92:00:27:de:b1:
5c:27:60:7c:fa:54:58:05:5c:41:70:7d:c8:fe:a8:
20:d2:f0:c2:5f:e0:1f:c9:9e:2a:6c:60:59:8d:89:
b5:a0:97:dc:47:e0:c2:93:1f:9e:92:87:eb:90:c3:
5a:1e:86:20:64:5f:d3:8c:ed:05:27:73:cd:90:a7:
c7:be:56:ae:6c:13:64:79:01:f2:b3:92:8e:52:bb:
54:81:e9:e9:2b:6c:b4:55:55:9e:ad:40:3b:f6:ef:
3b:d8:e2:db:93:0a:94:14:69:c5:d8:2d:35:3b:87:
30:83:1b:b1:bb:de:c6:dc:89:15:7e:b3:26:0f:6e:
0a:43:da:77:71:b6:fc:d9:f0:95:eb:e8:4c:9f:35:
8a:cc:38:a7:23:44:9e:b6:f5:dc:d3:18:64:6b:d6:
43:6e:8f:07:24:b0:f5:02:fd:2e:e8:54:5a:89:ca:
b3:e5:ac:1b:51:d2:95:52:c5:d0:4d:bf:4a:71:60:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EA:2C:19:9B:00:41:AF:DA:B4:E5:1F:01:F4:B8:49:45:70:23:7A
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/CuosGZsAQa_atOUfAfS4SUVwI3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.150.0.0/17
185.188.120.0/22
194.45.154.0/24
213.211.192.0/18
IPv6:
2a03:5080::/32
Signature Algorithm: sha256WithRSAEncryption
94:2b:37:85:6a:37:32:55:8f:94:14:17:e5:cb:2e:4d:ad:72:
09:a8:5d:6d:c7:6a:48:f4:c2:f0:86:2c:72:b4:ce:d1:fb:7c:
8a:85:06:4f:9c:cc:d4:d8:97:51:08:d3:7b:12:b4:80:8d:9f:
2e:09:8f:3b:12:b0:97:3b:86:e2:2c:03:37:df:5e:b7:c8:ba:
fc:f9:aa:9e:ad:89:b2:20:16:c5:37:38:ee:07:55:53:0c:08:
26:08:2c:a2:6e:45:41:56:93:a3:d6:35:76:c6:0d:25:9f:7f:
c7:9f:c8:a0:e6:5f:33:4b:00:67:31:20:94:ba:f7:be:5c:2a:
62:52:57:b4:63:df:e6:ee:3a:8f:8f:c6:f6:ca:da:e8:d2:85:
da:7c:bf:fd:b3:33:67:dd:c2:e7:71:aa:58:d6:30:74:31:51:
79:fd:78:c1:7e:c9:71:12:2f:b7:54:04:be:20:6c:05:35:c6:
1b:2d:56:05:12:5a:72:e5:a2:cf:23:c9:08:2f:c8:e1:79:0d:
3e:4c:ac:3b:1e:cb:ee:77:29:dd:f1:37:52:ea:40:59:d4:fc:
09:96:78:ff:84:75:9f:20:7f:3c:90:16:d1:0c:03:17:b5:d3:
e0:43:ce:53:24:ec:3f:ff:04:3b:33:f0:48:40:88:02:26:6a:
4a:26:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net