Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa
File: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (raw, json)
Hash identifier: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=
Subject key identifier: 7C:E7:87:58:B4:AF:A6:2B:F9:2A:09:94:88:AD:B1:95:6A:66:46:6E
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 019422FBE1805CA220CF7C501E0C99EAC600
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206862
IP address blocks: 185.173.168.0/22 maxlen: 22
185.173.168.0/24 maxlen: 24
185.173.169.0/24 maxlen: 24
185.173.170.0/24 maxlen: 24
185.173.171.0/24 maxlen: 24
194.53.118.0/23 maxlen: 23
194.53.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e1:80:5c:a2:20:cf:7c:50:1e:0c:99:ea:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ce78758b4afa62bf92a099488adb1956a66466e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:32:70:b4:65:cd:e2:4b:cd:dc:8b:dc:75:
4a:3d:05:c0:b4:99:db:cd:32:77:63:11:a1:bf:f5:
dd:2e:d4:6e:33:7a:8b:e2:18:75:b0:a8:c8:2f:f8:
fe:bc:b0:dc:c4:61:16:d3:a2:d1:f3:6f:e8:13:d4:
65:8b:34:0d:5b:aa:9c:cb:52:94:ed:d6:90:28:9a:
6b:00:34:e2:3c:3f:68:5b:59:23:be:fa:7b:82:1b:
31:c2:a0:74:47:bf:e2:dd:64:87:15:0f:45:c7:7a:
c8:6d:04:7f:ed:88:21:a3:a1:73:f3:78:60:c2:fe:
f5:b3:ae:08:2d:b4:81:30:30:32:63:40:8a:b1:f6:
5b:15:2c:31:17:5a:0a:9a:54:12:dd:56:13:6d:5d:
a7:a6:c6:55:e8:a0:f8:73:a2:28:87:a1:36:4d:94:
40:f9:f1:28:00:0d:9b:cd:07:3d:75:4f:97:64:19:
02:6e:10:d1:dd:58:f2:bf:3c:b9:4d:82:c1:c9:41:
08:84:c4:7c:b7:a8:4d:00:37:0f:92:51:4f:25:02:
f4:4a:80:23:f6:28:28:42:91:8d:59:e4:2b:ab:7f:
bb:ce:fe:34:87:dd:83:fe:fc:ab:bd:c0:4c:3a:c1:
6a:41:ff:6a:1d:04:b9:4f:cf:24:ce:30:74:30:bc:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E7:87:58:B4:AF:A6:2B:F9:2A:09:94:88:AD:B1:95:6A:66:46:6E
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.168.0/22
194.53.118.0/23
194.53.122.0/23
Signature Algorithm: sha256WithRSAEncryption
70:b1:18:bf:95:21:d4:4b:40:71:29:48:8a:ac:7e:f4:43:71:
5f:01:0c:42:c1:8c:70:ab:c5:e2:46:f5:7e:1c:9f:0f:06:5b:
a2:97:10:75:ac:a8:20:d8:b5:c4:cc:07:38:38:d7:5b:26:2b:
b8:a4:05:f6:63:2e:8a:30:3f:9e:ac:9a:da:31:2b:4e:eb:5a:
e1:11:e6:47:0d:ad:6c:54:13:1b:33:a5:09:aa:82:9b:9e:27:
ba:a3:66:d0:2f:d7:3c:d5:22:ed:e7:09:90:99:3e:5e:d6:4f:
94:cc:58:b8:6a:36:a9:1a:46:ca:aa:31:92:5a:0f:c0:60:96:
11:8d:39:d7:29:05:97:60:0b:49:9e:ea:1b:3b:84:6a:60:e1:
c3:9d:55:2d:53:87:fa:44:ec:d4:a6:38:d9:b4:4a:f5:3f:58:
72:21:7f:79:bf:f4:ea:8d:ed:d2:00:f0:a9:17:99:72:54:0c:
f5:8d:06:4b:fa:5a:76:4f:fb:25:7f:81:a3:68:52:3b:99:d5:
b8:fe:37:c1:0d:58:9f:2a:82:50:d1:38:a1:c9:8a:27:93:32:
89:78:14:52:e8:c5:05:6e:a4:4c:39:ae:37:aa:4d:69:95:31:
59:72:3f:34:78:5a:7e:4a:08:8c:e3:bc:f5:b7:a5:a7:d8:3b:
ae:a3:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net