Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa
File: 2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa (raw, json)
Hash identifier: 9iVp3ax6SoInGkRmccCgwLuza4oa5BeDphs/tDw0ZLo=
Subject key identifier: D9:1D:54:14:26:7A:2C:F9:B7:48:94:07:33:BA:C9:7F:98:9A:E4:71
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 01942067F908562F27820A2E910266B575AD
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201595
IP address blocks: 185.58.212.0/24 maxlen: 24
185.58.213.0/24 maxlen: 24
185.58.214.0/24 maxlen: 24
185.58.215.0/24 maxlen: 24
185.130.160.0/24 maxlen: 24
185.130.161.0/24 maxlen: 24
185.130.162.0/24 maxlen: 24
185.130.163.0/24 maxlen: 24
2a04:e200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f9:08:56:2f:27:82:0a:2e:91:02:66:b5:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d91d5414267a2cf9b748940733bac97f989ae471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:88:c9:97:13:62:9f:c4:c2:61:0e:34:07:
18:4a:79:06:57:2a:ee:7d:fd:c9:4b:6e:e8:76:9c:
0a:a6:db:1c:bb:f2:d6:63:32:61:91:77:cd:b3:fa:
d5:f8:86:ef:b4:3e:cc:5e:2b:8c:a0:c6:d6:81:21:
17:3b:01:56:4e:cb:b0:1c:d6:c6:1d:c9:9d:4f:d6:
bf:6d:15:37:0c:bd:a9:6c:c5:a9:3f:29:f3:95:68:
ed:c1:c7:e5:51:ab:6e:5e:5c:08:54:01:d8:31:f6:
e6:22:ba:8d:5f:e2:8a:9d:f7:08:98:a9:6e:32:71:
28:7c:22:22:aa:91:f8:32:ec:98:32:53:76:d1:9c:
5b:ae:e0:5f:a3:9f:b4:69:e0:92:24:07:b1:5c:0b:
b1:b6:d9:be:10:fb:25:12:24:d5:5a:1b:71:de:37:
63:fd:7e:66:cc:b0:71:ff:6e:fa:6d:5a:2e:45:81:
0a:36:15:51:ef:f4:0c:7f:fb:3c:87:1e:c6:ac:f6:
34:e4:45:4d:a2:2c:4d:92:7b:98:68:e6:d3:01:df:
bf:3a:d6:be:fd:55:5a:eb:4b:23:54:09:25:64:aa:
5f:a0:e9:d0:c1:02:7a:6b:c4:fe:36:fe:82:e0:92:
76:84:d0:d3:52:e3:6a:c2:36:01:e5:ce:e8:9a:9a:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:54:14:26:7A:2C:F9:B7:48:94:07:33:BA:C9:7F:98:9A:E4:71
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/2R1UFCZ6LPm3SJQHM7rJf5ia5HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.212.0/22
185.130.160.0/22
IPv6:
2a04:e200::/29
Signature Algorithm: sha256WithRSAEncryption
4e:2e:a1:1b:fa:f2:82:f4:75:67:a3:1d:9c:9a:31:92:ce:11:
4e:35:11:a3:09:f4:42:94:47:c4:d8:d5:9d:d1:5a:88:7b:74:
39:30:41:f2:58:02:85:9f:a4:0a:47:bf:71:ce:b0:29:04:5f:
06:e5:be:fb:75:c0:43:6d:22:f8:3b:de:81:f9:ac:dc:25:a2:
c2:45:fe:77:bc:43:ff:77:f9:ab:32:e7:7d:e9:e6:36:e3:3c:
fb:06:69:f1:f2:42:3b:0b:98:7d:2d:56:44:f7:cd:a1:9b:28:
f5:3e:1c:51:c1:bc:70:0d:4e:86:44:b3:75:fe:91:86:1b:89:
1a:49:68:12:f9:a2:28:75:72:db:e4:c3:ef:31:75:d4:71:95:
ba:c7:cf:7b:9a:e6:46:56:55:d4:63:cc:43:54:c0:af:2d:2c:
fb:df:f7:09:c0:1f:74:55:c6:c2:b8:35:cf:0a:e1:a2:68:b1:
6a:12:29:e9:8d:18:3a:c7:9b:44:cb:0d:bf:f8:f7:a1:29:68:
2f:d6:fa:fd:39:d0:b2:22:5e:94:00:53:12:af:85:64:33:33:
71:88:c8:da:a8:d3:1b:ee:52:6c:f2:ee:a9:af:95:5d:25:bf:
fa:c9:c3:c4:f7:6d:28:1a:5c:2b:19:ef:5e:79:af:f3:4d:fa:
06:18:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net