Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa
File: 6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa (raw, json)
Hash identifier: bndS1Tzx6VzHh/lOs3pK1BLzPGIXQ0EzQwN4Ak3MXSs=
Subject key identifier: EB:33:98:B7:38:D7:04:3F:83:62:0D:FF:F9:96:F0:15:89:71:CB:E5
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 019428244B554EFF7A64E42BB1240AEA7EF0
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa
Signing time: Thu 02 Jan 2025 17:50:54 +0000
ROA not before: Thu 02 Jan 2025 17:50:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52054
IP address blocks: 185.156.192.0/23 maxlen: 23
185.156.194.0/24 maxlen: 24
185.156.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:4b:55:4e:ff:7a:64:e4:2b:b1:24:0a:ea:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Jan 2 17:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb3398b738d7043f83620dfff996f0158971cbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:45:b8:1a:2d:63:42:3a:5f:cd:13:38:5d:
66:42:bb:87:0c:f8:f7:45:e7:69:e1:4a:45:8c:b0:
60:69:b7:79:3b:6e:d1:ed:94:90:19:39:06:cb:11:
42:e7:d1:93:35:5d:67:1f:77:9c:36:bd:dc:a0:ba:
2c:09:ca:05:93:8c:e9:33:d9:09:e5:61:7a:d6:45:
6c:4b:ad:e0:15:0e:a4:38:36:75:55:f0:15:e6:1e:
57:02:b5:b4:e8:a2:5a:4c:38:25:24:77:c3:af:f2:
0f:43:ee:1a:f4:f8:72:09:e2:00:b2:7d:ed:10:8a:
fd:25:f0:41:1f:09:63:a1:6a:24:d0:c1:34:0f:66:
78:28:91:ce:16:ed:c9:35:73:6c:c8:e3:e0:a2:12:
84:9e:35:fb:81:00:bb:29:84:15:d8:e6:f3:73:17:
a2:4d:ff:78:8a:b8:bc:65:29:e3:52:72:59:df:62:
2b:ff:8c:04:71:39:96:4d:b9:9d:4c:8a:00:a6:c8:
57:8d:97:5b:c3:ba:cd:71:7a:f8:b6:1f:46:a1:0c:
c4:84:fe:b3:de:31:9a:16:d5:ce:9a:9c:8f:a8:81:
a0:82:df:1a:1a:46:22:3a:05:da:cc:81:84:bc:5e:
e6:d2:59:68:62:24:f2:b6:6d:89:4a:86:0f:bd:89:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:98:B7:38:D7:04:3F:83:62:0D:FF:F9:96:F0:15:89:71:CB:E5
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/6zOYtzjXBD-DYg3_-ZbwFYlxy-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.192.0/22
Signature Algorithm: sha256WithRSAEncryption
37:09:c7:85:c0:b2:2c:59:b2:22:06:9b:c0:3d:2b:45:bc:e3:
c3:a4:0e:f7:e0:8e:4f:96:6a:cb:a3:aa:bf:4e:a8:18:15:fd:
52:b5:74:fa:0d:f5:4d:ee:e6:78:01:de:4d:c7:4f:ba:9f:55:
3c:63:1a:6f:0f:2b:7b:96:ed:2d:aa:fb:03:20:cf:ed:a3:58:
31:94:a2:21:46:51:42:b2:f1:db:79:14:7b:cb:9d:bd:53:5f:
bb:cc:de:5d:4e:8e:b8:0c:a8:f6:29:a6:d8:09:85:22:d9:ea:
07:fa:43:2b:c4:65:30:34:e5:db:fd:d9:f8:b2:7c:fb:89:5b:
b8:98:4c:ff:aa:ca:91:61:cf:b0:48:0a:04:54:98:e8:e8:e3:
37:f5:ec:cb:80:16:b2:a8:a4:26:d6:eb:8f:0d:7c:bd:6b:a8:
72:52:77:a4:b8:70:a1:af:ee:ac:f3:8b:77:f1:44:a5:52:23:
31:22:ae:de:24:17:ea:bb:75:fa:0b:3f:98:dd:5d:08:a4:b7:
84:53:77:5e:de:ef:3d:c0:5d:5f:ab:f9:79:0f:51:dd:6a:ce:
29:9c:06:7a:44:d9:0d:18:88:6e:0f:54:5d:08:05:60:06:cd:
b4:7f:09:d4:b0:1b:61:69:ce:67:22:5a:ae:34:47:00:38:17:
48:16:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:10 2025 by rpki-client on console.sobornost.net