Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa
File: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (raw, json)
Hash identifier: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=
Subject key identifier: F8:2B:71:D0:E9:59:DD:16:35:37:25:1C:1B:A2:AB:D9:E2:94:12:B6
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 019425FDC932BB70B1A1244B2164F9F5EB36
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa
Signing time: Thu 02 Jan 2025 07:49:36 +0000
ROA not before: Thu 02 Jan 2025 07:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201015
IP address blocks: 185.111.66.0/23 maxlen: 23
185.111.66.0/24 maxlen: 24
185.111.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c9:32:bb:70:b1:a1:24:4b:21:64:f9:f5:eb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f82b71d0e959dd163537251c1ba2abd9e29412b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:aa:bf:5f:a0:40:90:09:43:34:04:2f:d6:
28:70:47:76:5e:50:0f:df:82:a8:2b:f0:80:70:86:
9b:a3:9f:f7:ee:97:eb:21:3c:51:19:bb:a2:44:b5:
d8:ba:46:bf:54:42:50:1f:da:cc:ce:0e:8b:17:bb:
5f:7e:c6:68:82:82:ac:e4:9c:3e:31:bb:e1:c5:29:
a1:9b:92:94:09:88:7b:4f:ee:f0:8f:a8:cd:8a:31:
fd:7f:54:a2:e1:c0:c2:a7:55:f6:87:9e:7b:fa:9f:
a9:19:91:92:07:1c:30:7f:9e:a2:97:f7:1c:c6:1c:
ea:3f:c0:50:6b:88:05:94:06:7b:e7:a5:72:4f:fe:
33:d8:45:f2:63:7f:91:a4:47:40:0f:38:e9:51:9b:
5d:f5:41:16:49:98:b4:e1:1f:a9:5c:68:02:ff:81:
21:ad:46:21:50:21:47:12:ec:80:a3:56:a8:c9:3f:
69:0f:e7:1d:27:91:80:f8:f8:8b:e5:9a:fe:b6:88:
94:a3:55:66:ee:8c:e9:c7:39:b1:35:c9:23:f2:f0:
82:bd:c2:4a:20:c7:e4:10:2f:c9:f3:95:47:56:59:
67:0b:21:67:f3:30:76:66:2d:5e:ad:94:bc:32:6c:
4a:05:20:08:d4:8d:56:22:aa:89:86:dc:4d:72:a1:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2B:71:D0:E9:59:DD:16:35:37:25:1C:1B:A2:AB:D9:E2:94:12:B6
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.66.0/23
Signature Algorithm: sha256WithRSAEncryption
26:02:f7:46:4d:72:37:21:d0:88:20:0c:3f:6b:e6:f6:07:0c:
af:65:56:67:9c:cd:a9:19:0a:ac:81:7c:6b:40:36:25:5d:d5:
71:3a:70:16:fa:be:76:c6:bd:5d:e6:7f:01:22:f1:6a:5c:00:
f9:94:b1:3e:74:41:56:1d:3a:fb:ce:ad:a3:2d:67:8c:bc:b3:
68:79:a9:28:13:c5:95:27:b7:8b:44:60:1e:fb:e4:f5:4d:86:
50:dc:4c:26:08:57:d8:43:3d:f8:5a:05:fa:43:01:7d:85:a3:
d3:19:45:e7:da:8a:8e:df:43:67:f4:f3:f0:92:01:26:c7:7d:
f4:06:af:20:a9:9c:e1:13:55:11:ff:cc:cf:7c:35:b2:84:26:
8e:9e:ba:48:37:2e:d6:94:53:39:15:95:41:e4:51:c1:59:7b:
66:a3:9e:d5:6e:93:db:9d:e5:e5:3c:74:2d:86:18:df:77:74:
25:3b:24:46:4a:f0:fe:94:b8:83:60:11:5b:a9:b9:89:f2:0d:
37:45:69:fd:82:9d:49:98:4f:46:9e:c9:35:2e:a5:56:a9:22:
fd:b7:62:96:10:cd:36:59:7e:5d:0a:02:63:49:f5:50:49:b6:
ef:64:8b:fe:6c:8d:08:b0:8f:f8:c4:9c:0e:d4:4f:80:4d:4b:
b1:c9:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net