Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/t14W6NV1DIvb11EAZ4XUA2ovVHE.roa
File: t14W6NV1DIvb11EAZ4XUA2ovVHE.roa (raw, json)
Hash identifier: zVqRh34b+6mC5A8sW6DvCRtqqP+h65EGfBsPI/G1bUU=
Subject key identifier: B7:5E:16:E8:D5:75:0C:8B:DB:D7:51:00:67:85:D4:03:6A:2F:54:71
Certificate issuer: /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial: 0194221F6991127D7C285FC314E3D0E58F5A
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/t14W6NV1DIvb11EAZ4XUA2ovVHE.roa
Signing time: Wed 01 Jan 2025 13:47:51 +0000
ROA not before: Wed 01 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204209
IP address blocks: 185.249.88.0/24 maxlen: 24
185.249.89.0/24 maxlen: 24
185.249.90.0/24 maxlen: 24
185.249.91.0/24 maxlen: 24
2a07:fb00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:69:91:12:7d:7c:28:5f:c3:14:e3:d0:e5:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
Validity
Not Before: Jan 1 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b75e16e8d5750c8bdbd751006785d4036a2f5471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:f0:e0:e7:1e:1b:72:88:49:22:4d:c0:93:
a0:cc:f0:3d:7a:07:40:e5:6d:11:fe:bc:4c:b8:8d:
c6:cb:b1:37:91:22:5b:18:6c:c4:27:3a:eb:b7:fd:
d4:0e:e8:bf:f5:30:08:d0:51:dd:7f:43:19:4e:44:
cd:86:f2:41:12:f3:6e:b6:2e:43:04:4a:7a:25:a1:
bb:35:e0:69:79:1d:82:13:65:71:ee:89:af:0d:15:
0d:88:35:6e:f9:e2:d3:63:54:ec:7c:7a:e9:38:6c:
7a:76:56:97:d8:e4:ac:fd:7a:c5:55:84:de:c2:44:
0d:be:ef:14:e1:d0:11:b6:c6:cc:8e:37:57:07:1e:
5f:fa:6d:1c:c4:f0:e6:1a:fd:88:5b:e2:1d:b6:cb:
95:de:2b:2a:32:1e:7f:d2:1d:f6:13:76:3b:9c:97:
6b:cc:e2:b3:0a:73:01:24:18:17:e6:6f:9c:28:cd:
74:dc:58:05:e4:98:31:57:27:04:84:b2:b2:ff:99:
a3:44:ef:27:0c:3a:37:93:57:0b:29:f4:35:f6:ef:
05:c0:b0:9c:10:85:26:52:19:8d:13:c8:06:46:4d:
5c:75:7a:1b:df:55:67:62:8b:d7:d9:0c:e8:70:01:
aa:19:65:fb:3a:6c:f6:60:6f:74:b6:6d:8d:e3:7b:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:16:E8:D5:75:0C:8B:DB:D7:51:00:67:85:D4:03:6A:2F:54:71
X509v3 Authority Key Identifier:
keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/t14W6NV1DIvb11EAZ4XUA2ovVHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.88.0/22
IPv6:
2a07:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
8e:ee:3b:70:01:f1:b8:ed:ea:bf:85:09:08:1e:b6:1e:bd:b5:
f8:10:fa:f8:3c:08:b6:35:3e:1e:c7:69:84:5a:ea:5b:5b:61:
bf:1d:2e:f7:66:1d:66:fa:1c:5d:94:cb:2d:39:0f:6a:c9:cf:
f3:6f:a4:68:9c:f8:e4:9b:98:35:38:fd:07:02:9d:29:57:3e:
a5:e8:cb:ec:34:e5:71:62:ad:a5:97:fc:5c:e8:52:dc:81:96:
65:bd:be:61:8d:30:f6:d6:e3:55:e1:1a:7d:c7:1b:4d:28:96:
88:7a:b2:00:d1:af:f4:c5:d1:2a:55:71:6e:9d:f3:f7:be:a2:
82:af:36:62:c4:a5:74:7a:ac:2c:fb:4c:4a:90:c8:93:be:5a:
c7:33:a1:66:96:2d:05:13:97:44:c8:0a:f5:bb:b8:80:51:64:
07:0c:6b:ca:df:e5:e5:94:18:8c:b0:06:cd:06:73:f7:4f:70:
f4:65:af:8f:55:0f:0b:1b:6c:ce:ec:89:5f:3e:dd:d8:0f:a8:
5a:de:13:5d:41:24:c8:bc:5e:b0:e7:4e:76:54:44:76:6e:1c:
18:1b:39:01:b3:91:4c:ca:0b:cc:8b:34:78:6e:d3:08:94:15:
9d:35:2c:67:36:e3:dc:04:57:4f:5e:46:23:03:e3:72:f1:68:
1d:a4:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:59 2025 by rpki-client on console.sobornost.net