Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/CA1FNHSnELY2j7gmDHjDS2dsoX8.roa
File: CA1FNHSnELY2j7gmDHjDS2dsoX8.roa (raw, json)
Hash identifier: cFZtRXhk5SHYLVuLELTuEuyCvo+k9H5qi+XN9Dm3gEY=
Subject key identifier: 08:0D:45:34:74:A7:10:B6:36:8F:B8:26:0C:78:C3:4B:67:6C:A1:7F
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019424B3A31AF247E94C7191849666492DB4
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/CA1FNHSnELY2j7gmDHjDS2dsoX8.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60917
IP address blocks: 185.23.36.0/22 maxlen: 22
185.23.36.0/24 maxlen: 24
185.23.37.0/24 maxlen: 24
185.23.38.0/24 maxlen: 24
185.23.39.0/24 maxlen: 24
2a00:6860::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a3:1a:f2:47:e9:4c:71:91:84:96:66:49:2d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=080d453474a710b6368fb8260c78c34b676ca17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:a6:72:fd:d0:cc:48:e0:3d:2b:29:35:c9:
31:f8:1d:50:29:82:f0:d7:42:09:8a:28:c1:cb:b7:
7b:7f:ad:9f:4e:61:76:4c:9b:3c:6f:d5:4e:bb:be:
b2:0a:f7:56:08:26:bf:72:6d:22:82:ce:8d:96:22:
35:29:7a:e5:49:fd:00:f5:74:05:7e:f5:a7:41:c6:
63:3d:c6:75:f1:ef:c2:03:59:90:13:96:98:ec:d9:
f0:a3:61:34:a9:f3:72:9e:36:8a:28:d3:e6:e0:75:
36:16:78:64:37:e8:90:38:77:6b:2b:31:11:2c:1f:
2f:fe:ec:be:9e:0f:de:e4:c8:65:83:41:12:2b:0c:
6b:52:3f:bc:3c:15:f7:ed:31:52:58:5c:f8:56:3f:
95:9f:55:c1:f4:a4:d3:e3:dd:24:03:71:ee:91:94:
f8:26:b9:d2:0b:74:b2:ca:b9:93:6b:c4:a9:b4:01:
c7:12:c5:ce:14:83:6f:ad:27:0a:86:40:e3:a8:a8:
98:a0:0c:ba:4f:61:19:b7:38:ab:90:ac:a2:2b:64:
d2:1f:c3:1c:ce:0b:36:c8:98:7d:76:8d:23:69:d2:
f0:6a:a5:7c:1c:da:a9:67:79:e5:08:cf:d2:21:a4:
9b:fd:ef:ec:08:42:26:6e:64:4c:30:12:84:54:de:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0D:45:34:74:A7:10:B6:36:8F:B8:26:0C:78:C3:4B:67:6C:A1:7F
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/CA1FNHSnELY2j7gmDHjDS2dsoX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.36.0/22
IPv6:
2a00:6860::/32
Signature Algorithm: sha256WithRSAEncryption
26:4b:99:fa:da:a2:a0:46:3b:a4:0c:9d:0e:1d:5b:46:dd:f7:
70:8b:e3:f7:a3:54:59:bb:9b:9a:ad:d0:09:15:82:44:c6:42:
e7:20:ff:c0:bc:b7:87:f6:a2:5e:c4:9f:af:48:6e:49:6c:fa:
29:42:95:47:9b:b4:81:5d:79:cc:cf:ef:81:75:bd:80:ff:af:
25:65:58:75:41:17:61:31:f6:51:20:15:fb:f2:48:fe:33:d3:
e7:07:ee:7c:9e:15:aa:da:c4:f9:a6:b7:c6:79:e5:31:2e:42:
a1:dd:15:9a:bf:c1:13:ae:99:75:cd:8b:32:49:3d:40:4e:f0:
96:1d:f2:74:b5:e1:f2:c6:42:de:67:70:fa:58:2d:7e:e0:bb:
da:1e:4b:75:bf:d0:2f:0d:76:54:de:50:2d:80:49:ad:f5:0c:
00:b2:75:bc:7e:14:37:a4:dd:1c:3c:17:53:1e:17:92:3a:f4:
3f:8a:97:31:df:cb:90:77:26:55:23:f8:00:ca:0f:7e:e6:c5:
0d:fd:de:af:9a:c8:71:c9:ec:68:d7:70:d0:43:79:f6:ba:f1:
f8:3e:1d:6d:93:04:6a:e9:1f:4f:7b:4e:7c:91:ac:19:0e:5c:
75:fd:b3:df:bf:2c:ae:44:0e:75:2d:13:4a:35:c6:36:c9:d5:
a0:87:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:10 2025 by rpki-client on console.sobornost.net