Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa
File: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (raw, json)
Hash identifier: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=
Subject key identifier: C4:89:E1:9C:44:35:5A:78:F2:69:E8:34:36:CB:44:83:5C:5A:5E:67
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 01961FE520A60AD50C6CB85DF99BD8F93DF9
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa
Signing time: Thu 10 Apr 2025 13:30:31 +0000
ROA not before: Thu 10 Apr 2025 13:30:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212763
IP address blocks: 185.165.0.0/22 maxlen: 24
185.165.0.0/23 maxlen: 23
185.165.0.0/24 maxlen: 24
185.165.1.0/24 maxlen: 24
185.165.2.0/23 maxlen: 23
185.165.2.0/24 maxlen: 24
185.165.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:e5:20:a6:0a:d5:0c:6c:b8:5d:f9:9b:d8:f9:3d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Apr 10 13:30:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c489e19c44355a78f269e83436cb44835c5a5e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:3d:55:7a:2c:34:b4:47:ac:9e:be:f3:83:
e6:ea:68:19:17:aa:2d:10:7c:a3:d0:86:6f:f5:98:
a1:b9:32:42:0f:3c:a9:e9:ca:63:89:0c:be:ac:b0:
10:9c:cf:b8:33:c8:3d:c4:bf:49:fa:06:ca:46:df:
20:8d:a8:36:80:e4:bb:ae:70:6d:41:17:3e:c1:e5:
34:bb:ad:8d:5f:8e:59:b0:8e:a6:5e:ab:14:80:f1:
c8:ee:f9:6d:02:63:5a:4d:f8:83:39:ad:3e:14:1c:
67:f8:2d:91:5c:8b:7c:83:20:d6:e2:81:9d:82:85:
a3:c3:1b:fb:95:ba:e7:a2:fe:97:0e:eb:25:c1:5c:
06:41:9d:5a:fa:ca:a9:a7:e5:1d:67:ac:52:33:f9:
59:30:bc:37:be:37:31:02:6f:b7:5d:a6:fe:c2:77:
cf:1d:30:74:51:02:42:d3:f9:d2:3b:c4:a5:78:e9:
b8:13:83:3d:8e:87:12:90:b6:d7:d4:14:92:28:86:
d9:26:c0:d9:92:3b:04:db:01:ef:2c:4d:a1:1d:d6:
f9:19:9d:01:c3:ef:27:ed:79:8c:2f:46:9e:1f:d1:
59:70:87:cb:c1:c3:ce:13:c5:1d:e9:5a:ef:7d:eb:
da:b6:97:93:01:fa:40:26:69:ef:74:bb:91:1f:42:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:E1:9C:44:35:5A:78:F2:69:E8:34:36:CB:44:83:5C:5A:5E:67
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:3e:f4:00:fe:2d:36:41:4f:57:6b:fb:60:fc:3d:13:87:1a:
e0:95:61:af:df:65:ae:6a:9d:e4:65:be:6e:79:8c:32:6f:67:
09:5c:18:da:d8:33:75:bc:39:e2:4b:d9:86:99:fc:de:c4:50:
3b:83:f6:6f:38:3e:54:50:32:6d:63:6d:0f:1c:4d:19:17:6f:
77:d6:3a:35:ab:40:68:f0:25:4b:14:30:11:2d:55:56:cd:07:
c7:7d:d9:3d:78:dc:ae:9d:64:75:dd:31:08:a8:b7:e0:21:5d:
b9:88:71:23:56:cf:03:db:a3:84:c1:79:1e:e0:c8:7a:5b:cb:
72:c8:94:d5:ee:5b:51:d9:6d:26:cc:96:50:70:3a:e6:c8:82:
ce:7a:17:9a:44:36:1b:48:34:db:25:8d:ee:d9:50:a5:55:0a:
29:65:22:da:f9:8b:aa:80:76:90:b3:c2:39:57:85:8b:51:19:
77:43:7a:6f:ab:b7:7c:02:6f:22:5f:f8:c5:bc:3d:34:ab:b1:
fd:97:b0:f8:ed:c6:a0:a9:91:6e:93:47:ce:af:c5:1e:c1:52:
53:23:59:47:53:da:20:dd:24:8c:05:78:fb:2a:aa:c9:ea:f9:
11:2c:03:e1:ec:14:8f:1f:9a:d3:f3:ab:26:a3:b7:f1:1b:87:
ee:14:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net