Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/M2-x0b6h_vGkWR8MeQS23lu97CU.roa
File: M2-x0b6h_vGkWR8MeQS23lu97CU.roa (raw, json)
Hash identifier: 3mmEcfVqYQ+5prex0V/rqUj30uad1M5q1mUqvz+8XW8=
Subject key identifier: 33:6F:B1:D1:BE:A1:FE:F1:A4:59:1F:0C:79:04:B6:DE:5B:BD:EC:25
Certificate issuer: /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial: 0195650B6302F10363D65D14A6DEC54BF010
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/M2-x0b6h_vGkWR8MeQS23lu97CU.roa
Signing time: Wed 05 Mar 2025 06:43:19 +0000
ROA not before: Wed 05 Mar 2025 06:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216142
IP address blocks: 185.235.33.0/24 maxlen: 24
188.95.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:0b:63:02:f1:03:63:d6:5d:14:a6:de:c5:4b:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Validity
Not Before: Mar 5 06:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336fb1d1bea1fef1a4591f0c7904b6de5bbdec25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:e5:81:98:34:51:28:db:f0:b1:66:ba:21:
16:ab:8a:e1:95:0f:ed:1a:26:c8:82:39:94:b2:1d:
b6:54:63:e3:48:f5:cb:35:4a:d4:fc:36:18:b3:a9:
9b:f8:51:56:46:07:4b:be:34:1e:cc:24:8d:d6:9c:
45:74:09:4d:22:25:3d:61:69:73:58:46:b9:96:29:
e6:66:97:a4:00:e2:df:52:9c:53:2a:40:4c:70:72:
43:5c:08:a9:1d:4b:28:48:8d:fb:97:a9:ee:95:19:
8f:0d:d5:16:e3:0a:f2:ca:26:0b:fa:8f:7c:3c:1b:
ae:db:9b:d1:f0:6b:94:1d:42:0b:9f:c9:e3:5c:80:
8d:4a:74:7f:1a:4c:6d:7d:eb:1a:b0:88:4e:75:c2:
9e:74:a8:40:56:4e:a9:a9:f0:31:b4:65:ee:34:24:
4c:47:d7:27:fd:90:96:5c:e4:49:1c:30:36:4f:5a:
27:13:0e:a8:a7:ae:ef:f9:7e:63:07:8b:29:ab:92:
78:89:8c:ce:f0:49:90:6a:91:75:fe:88:15:09:5e:
cc:c2:23:62:f8:71:8e:7d:dd:7f:29:2c:87:91:41:
0a:5e:72:8f:5b:5f:2a:f5:e8:f9:7e:c6:5d:9f:b5:
d4:37:86:db:8f:0e:65:8e:0d:6b:ec:8d:5d:0f:43:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6F:B1:D1:BE:A1:FE:F1:A4:59:1F:0C:79:04:B6:DE:5B:BD:EC:25
X509v3 Authority Key Identifier:
keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/M2-x0b6h_vGkWR8MeQS23lu97CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.33.0/24
188.95.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:75:1e:c1:a6:a5:dd:b3:55:e6:c3:66:80:02:43:17:87:1d:
e8:14:22:f5:ac:9e:a4:54:ad:f3:2e:0a:1d:34:f4:61:8c:fc:
ce:f5:01:67:6f:1d:b7:4a:62:1c:2b:6f:5f:54:6b:f3:90:a2:
7e:22:19:1a:c7:e8:89:6c:1b:5f:a6:16:71:b7:64:92:ae:91:
56:78:68:6c:04:7d:9e:07:d5:05:bc:eb:33:ea:f0:ab:38:70:
6f:89:5d:0c:6e:95:3a:99:ec:1a:61:4e:0c:a4:30:be:34:1b:
6c:98:ec:36:89:de:b3:fd:32:67:96:db:65:4f:ac:27:70:54:
68:57:ca:05:e1:ce:02:35:33:e9:f6:9f:0c:11:7f:e5:26:79:
a6:8c:cd:0a:d1:44:68:44:7c:e4:57:f9:3e:5a:58:f8:73:bc:
30:d1:bb:4a:f5:c9:5d:9d:33:6d:2e:26:2e:89:01:b5:89:38:
d5:a0:c6:cf:0e:81:77:76:37:55:c5:20:19:04:b9:d1:6e:a8:
31:c5:1c:6d:d7:be:6c:e7:0f:9a:5b:14:30:a8:42:0b:90:7b:
ef:08:aa:8d:12:d7:bf:11:42:c3:29:7b:d5:18:6e:ea:e3:96:
46:f4:2a:5e:15:1f:96:dc:b0:81:25:b8:f4:27:b0:a6:58:d5:
ae:81:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net