Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa
File: 1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa (raw, json)
Hash identifier: i5ay2vgUuK/RxNcOzQcdamhI5FZ4CZrQepcSEalRxfU=
Subject key identifier: D6:06:CD:A1:4B:0A:3F:E2:32:7F:C0:6E:9C:A5:8B:EA:F9:93:F2:1B
Certificate issuer: /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial: 01941FFA2A8C11BC0FA43106C376F58E0905
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206474
IP address blocks: 185.237.128.0/24 maxlen: 24
185.237.129.0/24 maxlen: 24
185.237.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:8c:11:bc:0f:a4:31:06:c3:76:f5:8e:09:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d606cda14b0a3fe2327fc06e9ca58beaf993f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:88:cf:73:0e:00:0b:02:71:c4:13:20:e8:
cc:ab:35:d7:9c:e0:13:e1:6b:2f:84:fe:9e:34:b9:
b4:cc:dc:d5:22:79:b5:15:fc:60:52:c1:4d:be:6b:
cf:07:05:18:fc:11:cb:2f:18:c0:44:f8:e0:f0:a5:
a5:16:c8:d6:d2:a7:bb:75:bd:a9:d9:ae:7f:1e:cb:
68:f7:fa:6d:bd:c1:a9:58:b6:d7:f0:16:12:e3:27:
b8:51:c8:3b:27:c3:a9:c6:93:70:dd:4d:75:c2:a9:
06:ed:8f:41:ef:e0:4a:b0:4c:06:a3:cd:e2:88:1f:
c1:b9:b2:9a:3e:70:5f:df:5a:23:a2:ca:e3:57:e0:
fd:f8:a2:34:6c:08:8c:35:cd:d6:c5:84:42:74:90:
29:97:28:b1:a8:1a:10:b3:be:d6:00:89:fe:b3:ba:
9b:5c:9e:75:e3:6d:3c:74:e9:9f:b7:4e:c9:cc:84:
42:d3:a8:04:66:18:46:6f:08:2c:6d:e4:96:7c:9f:
f1:93:7a:bc:7a:0d:09:79:d1:16:c3:c2:2d:53:8d:
4e:ea:38:d0:74:88:67:be:8f:09:98:8a:10:10:52:
a7:68:dc:e8:06:a6:90:a5:82:4c:62:9f:6a:37:71:
77:28:f5:8b:2f:33:30:03:c2:79:f8:97:5d:64:93:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:CD:A1:4B:0A:3F:E2:32:7F:C0:6E:9C:A5:8B:EA:F9:93:F2:1B
X509v3 Authority Key Identifier:
keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1gbNoUsKP-Iyf8BunKWL6vmT8hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.128.0/23
185.237.131.0/24
Signature Algorithm: sha256WithRSAEncryption
38:78:ad:1a:4b:e5:64:ed:c0:c2:61:6c:09:82:c2:c9:b1:42:
a1:34:bb:b3:cb:6e:a2:c3:d0:b6:c1:42:b2:2b:17:11:2e:a2:
0e:65:64:45:78:93:c8:1a:0a:74:60:d1:1a:aa:77:7d:50:a4:
6e:07:f9:af:21:ce:77:6e:af:46:6b:3c:61:92:27:fa:4c:70:
bb:5b:bf:30:13:bd:e8:c8:dd:a2:b5:e5:c8:02:05:2a:39:2e:
29:68:5b:c9:90:40:95:64:70:68:98:0f:ff:63:e6:89:fa:26:
4c:43:c3:e6:f1:56:5a:5b:cb:5d:bc:e9:5e:75:51:7b:55:58:
7e:9a:f6:01:85:3e:b2:b2:60:f6:fa:4c:55:96:52:c9:50:19:
0e:92:2f:fb:65:84:bb:6e:2c:36:a8:85:e3:b5:e1:41:e9:2c:
cf:60:50:43:1c:2a:dc:76:ee:af:dc:2d:0c:62:45:04:98:5c:
eb:77:e8:89:87:d2:75:0b:79:f6:8b:ae:5d:e1:0e:04:f0:94:
c6:77:e3:32:a9:4b:9e:22:0d:a2:65:af:48:a7:df:2c:72:dd:
de:6f:ff:e9:ec:eb:03:f8:c6:ed:52:79:15:fc:66:31:58:0a:
01:5d:bb:76:8b:22:b7:5a:34:69:2a:b0:c4:14:5b:d0:51:3c:
46:f2:02:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net