Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa
File: Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa (raw, json)
Hash identifier: eCDXIzZ6GNkDsE5pKWtLTpQOHtXp3kwhFOB/b7z9Xfs=
Subject key identifier: 11:DF:0D:8A:5C:69:23:11:8B:27:FF:43:7C:F6:70:DB:A8:41:55:F1
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01951D2F6F94659BF32D64E719A459677C8F
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa
Signing time: Wed 19 Feb 2025 07:50:02 +0000
ROA not before: Wed 19 Feb 2025 07:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42820
IP address blocks: 5.183.184.0/22 maxlen: 22
5.183.184.0/24 maxlen: 24
5.183.185.0/24 maxlen: 24
5.183.186.0/24 maxlen: 24
5.183.187.0/24 maxlen: 24
185.74.240.0/22 maxlen: 22
185.74.240.0/24 maxlen: 24
185.74.241.0/24 maxlen: 24
185.74.242.0/24 maxlen: 24
185.74.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:2f:6f:94:65:9b:f3:2d:64:e7:19:a4:59:67:7c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 19 07:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11df0d8a5c6923118b27ff437cf670dba84155f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:97:a3:b7:59:d3:d1:2a:dd:c7:36:d5:c5:
b8:a6:b1:1f:b8:69:02:5d:26:ff:be:f1:8b:8b:75:
ba:8a:70:a4:bf:fe:55:99:98:12:e4:dc:61:bb:d3:
04:c3:6b:33:d8:89:4a:d4:4c:4f:96:ae:e6:5f:81:
0e:74:b1:53:47:35:2c:0c:1a:bf:32:55:05:07:b4:
72:88:16:5e:d0:25:60:b0:94:e4:a0:8e:c3:7f:27:
9e:65:0f:f8:50:06:42:b0:eb:2d:2b:78:b2:4f:18:
e4:38:63:53:3b:54:ca:e3:42:ba:b2:21:df:46:38:
2b:1d:8b:d3:56:1b:8d:92:51:91:61:12:8c:d3:bd:
de:73:49:b1:65:77:64:15:63:ed:b3:cb:76:05:70:
8e:59:a6:5b:c8:69:26:c2:90:62:5f:40:c3:e0:97:
91:b5:a1:c0:d4:42:ff:d7:28:13:60:3c:50:03:84:
7f:f8:0a:26:00:92:53:78:cc:4e:20:60:fd:60:30:
02:79:65:ac:7c:9b:b4:05:0a:a8:28:3b:21:d7:80:
0b:84:27:75:c2:0a:05:b6:5e:e1:29:08:fe:b8:e7:
e3:46:61:fd:49:62:ba:b5:85:51:37:46:6b:7e:96:
57:2b:e9:f4:be:99:8e:68:86:47:80:fa:bd:ff:36:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:0D:8A:5C:69:23:11:8B:27:FF:43:7C:F6:70:DB:A8:41:55:F1
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/Ed8NilxpIxGLJ_9DfPZw26hBVfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.184.0/22
185.74.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:75:36:94:a4:eb:b4:fd:72:71:c3:b4:95:0a:62:20:bb:b4:
b7:2d:19:df:38:52:5d:84:16:1c:0d:7d:1b:86:7f:29:ae:fb:
b3:ab:2b:5e:79:f3:ca:0b:66:c2:30:09:24:33:65:fd:34:5e:
ff:64:cd:1b:d0:93:c8:64:82:58:cd:72:46:c8:e2:f4:0d:17:
5d:5b:e7:62:6a:1e:11:39:a9:b6:1b:31:b9:33:61:ec:02:3a:
0f:18:f9:0e:ba:b8:b0:f5:a9:e4:d5:79:55:53:d9:11:3d:05:
d6:a2:72:4c:37:0f:85:6d:28:ad:51:69:0c:72:c1:22:c2:4a:
e0:fc:ad:cd:18:45:8e:de:d5:f1:e4:e9:f4:c7:ce:95:e7:2e:
b0:de:19:c1:78:82:33:d8:26:81:0e:a3:87:45:59:dd:05:22:
98:86:92:47:bb:37:f0:ec:66:a4:58:75:bf:9e:ed:b4:08:45:
67:5b:a3:b3:a0:43:ee:d9:5d:94:bf:ee:22:aa:65:3d:9b:f9:
95:f7:19:89:69:84:f0:ad:e7:7c:3f:46:a8:7f:3c:0a:9f:98:
08:7e:de:6f:f9:e6:e1:c6:53:e8:0f:5c:6e:ef:07:a8:a8:6d:
b3:6d:ca:8f:52:3f:8a:68:eb:45:4c:94:b2:35:77:02:81:62:
3b:e5:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net