Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa
File: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (raw, json)
Hash identifier: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=
Subject key identifier: 12:90:72:E6:51:05:D4:10:CB:55:15:92:43:B4:16:A0:DE:73:6D:45
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 01942444F229E3FFBFE72389E3A663A3DFC6
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201031
IP address blocks: 185.88.24.0/22 maxlen: 22
185.88.24.0/23 maxlen: 23
185.88.24.0/24 maxlen: 24
185.88.25.0/24 maxlen: 24
185.88.26.0/23 maxlen: 23
185.88.26.0/24 maxlen: 24
185.88.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f2:29:e3:ff:bf:e7:23:89:e3:a6:63:a3:df:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=129072e65105d410cb55159243b416a0de736d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:58:65:81:fd:1d:73:57:94:8e:26:67:2f:
86:4e:2f:6e:fd:05:0f:69:21:35:7c:82:a9:20:93:
11:ad:84:3b:98:e4:4e:9e:7b:ec:89:6a:98:ad:e4:
3e:49:f3:4c:49:42:ca:3e:02:99:ac:d7:c3:3b:f1:
05:ae:2f:6f:dd:53:7b:c7:04:ce:64:09:e9:06:00:
96:31:9b:96:2c:e2:78:58:a4:ee:a0:41:0e:eb:f0:
ad:15:2c:22:73:ee:33:d6:ee:5d:bd:e8:5b:25:6b:
07:46:8e:80:35:49:23:22:1a:b5:46:80:03:1e:c6:
9e:58:d3:d7:62:b9:7f:50:5c:43:94:75:96:19:c1:
30:cc:0e:c9:8e:86:24:d2:da:bd:09:e0:c7:08:e7:
80:f0:a0:ae:bd:10:af:be:92:30:82:57:cf:04:2c:
58:57:28:4d:b4:65:a1:7a:88:52:6e:d9:96:d8:9b:
23:60:89:b6:c9:46:fd:69:27:da:2d:d3:72:eb:e5:
a1:2a:ed:7b:b2:a9:7a:44:02:11:da:8e:2d:b6:1d:
1c:3c:c3:5c:ec:63:d5:a7:6b:b0:8f:32:e6:7e:9a:
06:38:b4:d2:16:49:ce:34:ff:bc:fd:3c:c6:ca:de:
8d:ba:94:36:9a:65:51:e2:6a:ad:ee:d4:fc:18:3b:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:72:E6:51:05:D4:10:CB:55:15:92:43:B4:16:A0:DE:73:6D:45
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:f4:8c:9d:74:83:54:7b:ba:c6:b6:00:2f:85:d7:f7:33:7b:
29:47:5d:74:e6:8e:49:b0:35:20:d2:58:d2:76:a4:01:2f:95:
2d:b8:83:63:d4:36:32:39:98:22:72:aa:1b:72:d3:dc:2b:9b:
89:18:93:4d:5a:fc:ee:e3:4e:95:b0:04:7d:9c:e9:3b:d0:e2:
7e:d9:bb:30:0f:4e:2d:dd:36:84:cf:b2:52:74:b2:56:2e:0b:
5e:09:d9:32:dd:54:19:e0:c2:39:08:96:c4:05:91:bb:c9:de:
1c:13:da:be:d7:61:12:3f:87:4a:20:90:91:09:78:8f:d2:f3:
3c:57:49:ed:f3:7b:72:d8:2e:95:c0:78:c9:70:a0:2c:1e:31:
0b:b7:d6:14:71:f2:3b:74:dc:7a:bd:32:f3:af:85:72:83:4b:
9f:3b:d5:cc:18:fb:66:ca:e7:67:48:aa:b2:19:7f:43:7b:4d:
43:d9:d8:d6:53:72:c2:cb:45:85:99:99:3a:81:ae:10:22:d4:
20:25:f4:16:1b:51:33:1c:5e:18:ad:f9:c6:34:de:7c:0b:55:
89:ff:a8:75:89:f9:7f:c3:a6:18:5a:b2:18:c0:7d:32:72:fb:
f3:85:5a:89:44:17:c4:53:65:26:fb:f7:f5:d8:87:ee:03:65:
5a:1a:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net