Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/xOgebtB7-JslaYskbHWpkE_rjGk.roa
File: xOgebtB7-JslaYskbHWpkE_rjGk.roa (raw, json)
Hash identifier: WlppSlnMGpM2+YnpOQ+4knYBpRNoouui2tk9UJv6tWA=
Subject key identifier: C4:E8:1E:6E:D0:7B:F8:9B:25:69:8B:24:6C:75:A9:90:4F:EB:8C:69
Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Certificate serial: 01953787355AF920D6BE784429D9D655BBD6
Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/xOgebtB7-JslaYskbHWpkE_rjGk.roa
Signing time: Mon 24 Feb 2025 10:36:02 +0000
ROA not before: Mon 24 Feb 2025 10:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43016
IP address blocks: 185.121.216.0/22 maxlen: 22
195.181.192.0/20 maxlen: 23
195.181.194.0/24 maxlen: 24
2a06:a0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:87:35:5a:f9:20:d6:be:78:44:29:d9:d6:55:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Validity
Not Before: Feb 24 10:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4e81e6ed07bf89b25698b246c75a9904feb8c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:34:3a:64:4d:f9:c2:59:04:94:f4:a1:75:
7d:52:6b:fb:18:36:e1:92:f4:71:e7:fb:5b:cc:65:
d4:99:fb:55:75:9f:6a:67:e1:8f:d0:53:ae:07:f8:
23:49:f4:bb:12:07:19:f1:a0:7d:34:2c:2f:b4:74:
d4:c5:9c:50:e4:32:82:b5:44:d4:d6:c3:be:a8:f2:
75:e8:e9:58:f5:c9:1f:94:c3:5b:50:f0:35:43:f9:
66:12:d3:81:80:81:3d:32:c0:b9:99:66:f2:fc:13:
70:bf:93:af:22:8f:81:ad:11:0d:4e:7e:3e:f3:0c:
d5:55:49:2b:8a:fe:de:6d:1e:47:b1:6a:19:0e:0a:
6d:ab:1a:a1:52:2d:01:45:dc:05:e9:28:8e:47:83:
ca:64:22:b2:a4:da:59:63:f2:12:eb:5c:3e:bf:94:
f9:4b:63:30:ba:20:bb:06:c6:16:eb:62:29:18:a7:
43:b5:a0:96:2f:27:ba:4a:90:02:a5:74:a9:34:39:
ba:ce:78:04:24:c1:18:c0:ae:ee:73:95:7f:f0:58:
1f:bc:d1:fc:17:13:ba:12:49:ff:af:c6:20:2c:0e:
ed:03:eb:ab:76:52:c3:02:53:21:50:8d:8f:ff:31:
8a:5b:2e:c4:c4:eb:19:d6:73:68:c8:2c:ee:6a:1c:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:1E:6E:D0:7B:F8:9B:25:69:8B:24:6C:75:A9:90:4F:EB:8C:69
X509v3 Authority Key Identifier:
keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/xOgebtB7-JslaYskbHWpkE_rjGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.216.0/22
195.181.192.0/20
IPv6:
2a06:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:d1:d4:70:4d:e4:f1:04:2e:6a:23:34:da:40:46:1b:75:49:
8e:a1:b6:d1:27:8b:70:10:7c:3f:64:bf:82:04:15:84:27:23:
99:3c:67:e3:c3:54:d3:23:91:9b:c5:5c:67:4a:65:e0:f4:f7:
69:c4:18:0a:e5:da:ac:2e:2f:51:da:f7:54:ba:6c:4e:0c:83:
da:0a:a2:69:05:88:1e:33:f5:33:c6:4b:8c:0a:1b:02:3e:0e:
36:b4:03:f8:4a:b8:13:e5:94:0a:c0:51:a3:46:2c:e5:c5:63:
08:52:b2:aa:51:77:ce:39:1e:8f:fe:d4:ec:6f:9e:dd:03:0b:
6b:08:e3:ab:e4:da:55:09:97:87:b4:75:17:07:8e:de:40:8a:
aa:7c:81:0a:5b:a4:d2:04:aa:b6:61:3f:c9:55:2e:6b:10:02:
50:db:76:8f:a6:17:f6:46:b1:67:cc:e5:46:fe:56:77:dc:a0:
c8:3f:fa:6a:25:90:67:6e:c4:68:36:17:a4:db:e1:ea:b0:b3:
ae:0c:38:1c:c2:8f:7d:33:da:c4:f4:dd:87:67:37:c8:b8:2d:
e9:05:6a:bf:e5:27:dc:fe:e7:16:45:96:99:c8:d0:91:18:b2:
0b:76:c3:7d:05:ff:90:a3:4f:a7:b1:a1:f2:4d:d7:af:58:7e:
11:44:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net