Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/NsZjsu2WDCD4J07ujcjp4ji-VOU.roa
File: NsZjsu2WDCD4J07ujcjp4ji-VOU.roa (raw, json)
Hash identifier: VU4MSu0eDWsfOu4NUIfDAf48zntyybA1JsYveD+Po8w=
Subject key identifier: 36:C6:63:B2:ED:96:0C:20:F8:27:4E:EE:8D:C8:E9:E2:38:BE:54:E5
Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial: 0194C8CAE0A9FDD3F57DCFB5FFA2964DFFEF
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/NsZjsu2WDCD4J07ujcjp4ji-VOU.roa
Signing time: Sun 02 Feb 2025 22:32:06 +0000
ROA not before: Sun 02 Feb 2025 22:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43395
IP address blocks: 185.66.224.0/24 maxlen: 24
185.66.225.0/24 maxlen: 24
185.66.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c8:ca:e0:a9:fd:d3:f5:7d:cf:b5:ff:a2:96:4d:ff:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Validity
Not Before: Feb 2 22:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36c663b2ed960c20f8274eee8dc8e9e238be54e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:ae:ab:16:dc:65:b1:e0:4e:3e:d0:db:7e:
70:75:a2:6f:52:af:99:17:cf:98:ac:57:f0:54:84:
5e:2c:cf:95:73:5c:1b:1f:7d:3b:d5:8c:8b:a3:8a:
82:d6:e3:0d:ba:6c:74:41:0f:48:c4:dc:94:eb:6c:
a7:73:ee:8e:a9:09:7b:61:ea:5b:2a:22:a0:52:c4:
48:a0:7e:81:62:49:2e:62:03:29:38:e8:88:c9:70:
f2:25:44:08:be:88:86:bf:ae:4e:38:67:05:7c:87:
a3:64:12:9f:1d:2f:d2:77:2e:d4:70:d6:14:d8:70:
54:30:12:95:aa:1b:6c:f4:b2:d1:a7:bb:83:fc:d6:
ee:56:9d:d9:12:35:09:f7:b3:65:17:f0:e7:93:ea:
9d:f3:23:8b:f9:21:52:bb:4d:ce:39:27:c6:c3:09:
95:5a:04:5a:09:19:d6:a5:1f:f8:3a:07:cf:47:e2:
1a:1a:41:de:a6:af:22:7c:e9:c7:bd:89:e9:71:ca:
ab:cf:af:d8:97:9b:cc:24:02:74:af:35:b2:39:2a:
78:72:71:24:a8:64:b5:cb:8c:58:2c:32:bf:ee:9e:
0f:4a:80:94:7b:67:eb:83:dd:0b:82:f7:0b:fd:ae:
40:61:d4:3d:7c:39:e9:aa:58:cb:00:c9:b6:9c:0c:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:63:B2:ED:96:0C:20:F8:27:4E:EE:8D:C8:E9:E2:38:BE:54:E5
X509v3 Authority Key Identifier:
keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/NsZjsu2WDCD4J07ujcjp4ji-VOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.224.0-185.66.226.255
Signature Algorithm: sha256WithRSAEncryption
93:59:90:26:06:03:e0:ca:d8:0c:b8:53:cc:5f:88:14:72:9f:
21:4f:ac:33:f8:ac:a9:2e:5a:4d:4c:f4:57:c5:0e:05:40:96:
d3:41:db:ac:b1:ed:33:6f:c0:27:45:4d:c1:4f:ae:0e:cb:a1:
a9:57:18:d2:6b:17:4b:ca:2f:77:22:7e:4f:70:3e:b4:db:92:
2a:28:ec:58:82:e4:17:45:b7:0f:65:d3:c1:47:3e:9d:f7:94:
28:d4:f9:be:12:25:e1:2d:da:01:84:f9:93:75:e4:2f:97:de:
29:54:0d:f4:c9:a4:c8:bb:d3:05:2b:ad:23:78:da:f9:e3:c7:
72:92:0f:3a:7d:d6:73:16:04:0c:b3:9f:4f:95:4a:6f:2f:ab:
39:f7:f3:e1:95:81:7e:48:81:6c:4f:c0:12:db:bb:e4:d2:7b:
cd:96:a7:ec:cb:64:c2:a4:36:6a:ec:17:be:30:07:4c:e4:11:
7d:fa:6b:46:db:e3:df:4b:53:6a:ab:65:d5:23:d6:44:b5:b9:
db:92:53:06:3e:41:c6:72:5f:4e:14:55:2c:14:f1:47:6f:7d:
c4:8f:2d:bc:44:30:2f:3b:c6:a5:00:01:61:8b:e5:f2:f1:5d:
9d:5a:f7:2d:67:62:7d:0b:35:3d:e0:e8:81:45:aa:e9:75:57:
5a:55:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net