Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/U7m4Gs75d3JRXf0EhW-zh11dv2s.roa
File: U7m4Gs75d3JRXf0EhW-zh11dv2s.roa (raw, json)
Hash identifier: Sm5oLjPUdQpRNHLiGYVW7SM6LirGZO/ZhoEfZrQbxlg=
Subject key identifier: 53:B9:B8:1A:CE:F9:77:72:51:5D:FD:04:85:6F:B3:87:5D:5D:BF:6B
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 019420D5A6ED39A765F3358CCC0E4D0E091C
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/U7m4Gs75d3JRXf0EhW-zh11dv2s.roa
Signing time: Wed 01 Jan 2025 07:47:39 +0000
ROA not before: Wed 01 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202194
IP address blocks: 185.50.188.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a6:ed:39:a7:65:f3:35:8c:cc:0e:4d:0e:09:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53b9b81acef97772515dfd04856fb3875d5dbf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:37:a3:0e:6a:e3:00:35:69:ff:c5:f3:cb:
05:f5:1d:2b:7d:c8:e5:e2:25:b1:d5:40:62:fb:84:
38:bb:09:98:ab:2b:d0:e4:a0:20:15:21:e5:2a:de:
e5:db:81:de:36:06:82:86:f7:b0:48:6f:b7:dc:d1:
7d:a4:c1:6e:7c:5f:5a:2d:67:47:5f:27:d3:f5:8e:
5e:6c:da:c7:88:74:ea:01:5d:80:80:d4:ec:d5:28:
46:c3:47:f9:49:46:74:3d:54:6b:53:34:d4:29:87:
55:03:be:ab:a9:59:4f:d5:b0:f7:b0:fe:7d:75:39:
20:9c:06:2f:b7:bf:f4:73:7e:36:14:19:3d:1a:48:
94:ab:49:d4:cb:02:b4:0d:c9:d8:22:3e:cd:15:d5:
76:43:55:8b:98:80:18:74:fe:b0:cc:fa:25:d7:b1:
35:d0:3f:2a:47:95:cd:57:86:a7:e3:c9:10:b1:6a:
24:7c:92:4e:76:d2:6e:81:fc:e6:bd:68:a8:2e:97:
3d:68:ee:e8:51:bc:ed:e2:37:cd:c0:ea:5b:37:10:
ca:ae:94:e5:91:35:ba:6a:55:d6:f2:67:2f:58:bf:
a1:fd:85:c8:88:9e:79:7d:fc:db:9f:81:fd:b9:42:
ed:bc:6f:a2:cc:7a:f8:3b:7e:bd:73:18:ad:e8:16:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:B8:1A:CE:F9:77:72:51:5D:FD:04:85:6F:B3:87:5D:5D:BF:6B
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/U7m4Gs75d3JRXf0EhW-zh11dv2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.188.0/22
Signature Algorithm: sha256WithRSAEncryption
85:f8:4d:eb:55:ea:40:4e:8a:54:e4:d2:8e:1c:de:6d:9b:bf:
37:4e:4e:3f:76:3a:69:b6:be:13:82:89:31:10:4d:73:9f:01:
27:8d:1f:aa:4c:3c:3b:5b:68:33:78:b8:7f:6a:0f:84:82:b7:
45:a9:61:08:aa:68:2e:24:d4:f7:3c:1a:0f:37:5c:39:29:90:
e5:89:83:51:69:28:06:45:52:e9:85:cb:a5:b6:ca:cd:31:1c:
95:0a:76:0c:c1:b9:2d:01:5a:27:fd:34:9d:f4:f8:49:72:9f:
4b:55:ae:f3:f5:14:2e:95:0d:a6:ec:e8:e5:cb:11:01:d8:8b:
2e:70:82:bc:49:e8:34:34:bb:eb:bd:85:14:3f:45:94:76:89:
ff:42:5a:84:c7:0b:1f:12:db:07:d9:81:c0:fe:a6:b9:b6:93:
bf:cf:ee:cd:9e:e2:bc:2c:35:f6:e5:94:dd:1e:34:c6:ac:f4:
c4:b4:3a:dc:aa:e7:e9:0d:e6:20:f7:6f:94:ad:d3:ec:15:df:
de:84:02:3b:b6:5b:48:78:23:c8:df:91:94:f3:12:37:d7:ac:
ca:28:61:17:71:b8:cf:36:68:89:70:e0:6e:1d:bc:07:47:51:
9f:0d:fe:b7:16:49:a7:64:b3:42:d7:a6:bb:ef:e6:10:71:19:
10:ac:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:26:39 2025 by rpki-client on console.sobornost.net