Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/82ywaE3JFKydhCtiLwP3kX3cHw4.roa
File: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (raw, json)
Hash identifier: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=
Subject key identifier: F3:6C:B0:68:4D:C9:14:AC:9D:84:2B:62:2F:03:F7:91:7D:DC:1F:0E
Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial: 01961FA42160BC3ACA51C3EDEC868DA2BA2A
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/82ywaE3JFKydhCtiLwP3kX3cHw4.roa
Signing time: Thu 10 Apr 2025 12:19:32 +0000
ROA not before: Thu 10 Apr 2025 12:19:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203937
IP address blocks: 185.119.120.0/22 maxlen: 22
185.131.240.0/23 maxlen: 23
185.131.242.0/24 maxlen: 24
185.131.243.0/24 maxlen: 24
2a06:dec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:a4:21:60:bc:3a:ca:51:c3:ed:ec:86:8d:a2:ba:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Validity
Not Before: Apr 10 12:19:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f36cb0684dc914ac9d842b622f03f7917ddc1f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:f0:e5:98:df:a4:2d:07:7e:85:70:e7:66:
4a:be:67:61:7e:89:f9:45:19:b0:75:b3:3d:c9:1a:
cf:68:a6:1f:d1:26:58:9a:c0:d8:a0:aa:42:bc:f4:
be:af:3f:54:d7:ee:08:31:42:1c:58:6f:45:8e:07:
5a:e5:a1:74:5f:be:60:91:95:98:a0:05:58:17:ae:
e6:9e:4b:5f:0f:3e:21:5d:72:2e:31:a6:05:78:ed:
f2:4e:2c:f0:53:1b:64:8a:75:80:f4:72:0e:e3:28:
3f:a2:fb:4f:9c:65:7b:bb:e6:c2:99:28:46:ab:45:
9e:98:80:47:d8:9b:ed:de:e8:4c:b6:33:c7:f0:9c:
da:ac:77:15:38:0f:94:47:6b:c6:30:3c:38:63:c9:
63:e0:85:ba:03:bc:71:98:15:fc:2d:45:76:59:70:
2d:52:d8:a3:8e:ff:cb:ab:4c:ec:b2:40:51:bf:fa:
61:1e:63:4f:94:94:2d:3f:c0:0b:88:49:15:ba:d6:
17:a9:bd:f4:a1:e8:d8:7d:1d:0c:f3:73:ee:f8:bf:
df:fd:13:46:bb:bc:77:e5:72:0f:7b:be:49:9c:a8:
e7:5f:27:b0:5b:54:ae:20:29:b1:ff:e4:d1:e5:a7:
8f:a6:18:98:14:55:e7:ae:34:75:38:88:8d:86:b8:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:B0:68:4D:C9:14:AC:9D:84:2B:62:2F:03:F7:91:7D:DC:1F:0E
X509v3 Authority Key Identifier:
keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/82ywaE3JFKydhCtiLwP3kX3cHw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.120.0/22
185.131.240.0/22
IPv6:
2a06:dec0::/32
Signature Algorithm: sha256WithRSAEncryption
58:ec:a5:43:9a:8d:76:2f:d2:e9:7b:3e:02:33:51:20:df:ee:
24:ab:e0:63:2c:8c:d8:58:a1:1c:68:f0:c2:87:47:aa:e4:d8:
58:10:de:51:42:8d:42:99:61:02:ea:08:b6:d8:42:c7:d2:e7:
99:19:04:20:0c:0f:22:4c:66:a3:05:17:7f:84:73:75:1b:4d:
44:28:a7:8f:f7:d9:6a:41:1e:41:b5:82:10:9c:37:5c:c5:f9:
c2:8b:1b:5a:4c:fe:3c:dd:df:ed:8b:30:4a:3e:d3:85:3a:9a:
b0:d0:1c:6f:5b:30:fa:fb:5f:2b:e3:47:f3:f6:da:e8:64:dc:
85:7b:f5:2b:3c:aa:76:bb:9a:e9:b8:aa:d1:7f:72:6a:1d:59:
42:5b:b8:1b:ef:b5:f9:01:37:dc:d9:ba:b6:42:f7:99:0e:6b:
66:a3:2c:02:b1:c0:52:24:05:01:43:dc:96:7a:b6:c9:7d:39:
38:65:21:d4:a0:d1:6b:62:56:c5:7f:d7:34:fa:75:af:b7:0f:
29:b5:82:65:9f:bc:6d:0f:21:03:81:13:85:4c:2c:5a:6e:91:
97:1f:16:36:89:0d:6f:77:1d:d8:1f:69:cf:d3:63:40:2f:5d:
32:6d:ec:bb:bd:25:e6:08:5c:b1:3a:ba:1f:8e:bd:45:e9:6f:
96:18:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:58 2025 by rpki-client on console.sobornost.net