Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa
File: h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa (raw, json)
Hash identifier: SWkmFiL0pM+fIwknjB1oWTVUsg4SQOvXw9O+NxZEonA=
Subject key identifier: 87:E4:94:51:C4:4F:04:C9:44:5E:0F:6F:8E:90:98:B9:0D:D4:0E:82
Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial: 0194274834FBDD5A9DBA36958916AD8EDC96
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62537
IP address blocks: 185.94.24.0/22 maxlen: 22
185.94.24.0/23 maxlen: 23
185.94.24.0/24 maxlen: 24
185.94.26.0/23 maxlen: 23
185.94.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:34:fb:dd:5a:9d:ba:36:95:89:16:ad:8e:dc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87e49451c44f04c9445e0f6f8e9098b90dd40e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:f4:d1:72:61:58:cd:5b:00:47:5c:26:c9:
7e:13:ee:c0:dc:33:19:e2:dd:19:66:e6:f8:5d:fa:
dc:d8:11:ab:17:b9:44:ea:cd:2c:73:c6:41:74:2b:
b9:be:a4:dc:c5:40:f2:d3:50:f1:fc:1a:ca:b8:be:
5b:47:d5:ee:f6:e4:a2:17:9b:33:66:0e:8a:07:f1:
fd:49:f5:7b:09:fe:58:4f:66:78:4f:2f:fa:e4:13:
d4:d3:7d:ca:50:46:6b:5e:c8:6c:9f:4f:98:1b:a3:
7f:2e:59:8f:6e:90:a7:05:67:2c:3f:88:38:ba:b1:
cd:7f:7d:ba:ef:1f:62:56:c3:be:24:03:b2:0a:c7:
46:e5:7c:41:80:86:b9:4e:6d:54:8b:90:8f:fa:1b:
b6:6f:8c:47:89:6c:12:5d:d6:55:cb:a0:36:1a:81:
72:4f:b3:79:fe:05:80:2f:cb:de:62:50:7d:6c:a0:
e0:af:80:e7:ce:0e:72:13:d2:c6:b0:2e:30:54:da:
98:e0:d1:54:15:ec:b3:e0:79:1f:0a:8b:9d:0e:c1:
d3:2a:7d:d4:aa:8e:27:81:0b:d9:b6:79:56:e7:9b:
0b:c0:6e:54:86:83:4a:a2:44:d3:1c:db:3d:00:a6:
6a:31:29:0b:41:2a:2d:0f:d4:61:fe:26:03:bf:33:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:94:51:C4:4F:04:C9:44:5E:0F:6F:8E:90:98:B9:0D:D4:0E:82
X509v3 Authority Key Identifier:
keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:33:f0:29:de:b2:7b:fa:b2:47:40:03:90:f2:fe:54:8e:01:
ef:f2:22:59:51:ad:1c:35:dd:0a:63:2d:cd:93:f4:5b:ab:79:
73:0b:e2:88:f8:cf:46:ce:32:01:f4:84:2c:03:d8:42:3d:28:
e1:27:cd:1c:17:c4:e1:5c:76:a3:23:67:b4:40:71:ad:09:43:
82:eb:23:1a:7a:b7:b8:30:dd:34:d2:54:2b:4e:66:df:49:fe:
91:55:1d:71:85:ff:25:9c:ec:83:dd:c9:26:69:21:e2:c8:fa:
00:74:2b:7f:a9:2f:9d:57:62:71:53:1b:4b:31:c2:d6:58:6a:
f7:2f:9d:bd:1f:65:b9:e8:34:48:0f:a9:40:67:78:1d:44:d1:
1e:8e:d2:56:91:ff:0e:8c:3c:d5:b2:c4:12:71:14:e2:28:9d:
a3:78:57:3f:51:e9:ef:40:05:da:dc:6d:5b:6f:8f:d4:e6:32:
d8:f2:dd:69:ae:18:3d:c7:88:17:2e:af:d6:6c:a4:a2:62:e3:
83:74:4a:3c:18:32:60:79:67:63:13:ee:1f:28:db:48:b4:88:
ed:e4:09:18:09:31:ed:ed:78:f7:13:1b:63:fb:0e:fa:75:1a:
e8:c6:4e:f7:cb:f5:4c:c4:7f:5b:4b:0f:86:7d:62:da:4e:27:
fa:1e:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:33 2025 by rpki-client on console.sobornost.net