Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa
File: H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa (raw, json)
Hash identifier: ZMCXrj27lV/u3oSg3kl26pqz/wenN/+jeAtwxfISyBE=
Subject key identifier: 1F:D4:29:9C:B9:BC:7D:6D:4D:7D:AB:18:99:2F:99:FB:8C:16:F4:AD
Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial: 0194244506821285ADD7F6A7362F337E2641
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa
Signing time: Wed 01 Jan 2025 23:48:10 +0000
ROA not before: Wed 01 Jan 2025 23:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206602
IP address blocks: 185.181.236.0/22 maxlen: 22
185.181.236.0/24 maxlen: 24
185.181.237.0/24 maxlen: 24
185.181.238.0/24 maxlen: 24
185.181.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:06:82:12:85:ad:d7:f6:a7:36:2f:33:7e:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Validity
Not Before: Jan 1 23:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd4299cb9bc7d6d4d7dab18992f99fb8c16f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:00:0e:54:b7:35:08:97:d1:04:a9:66:c4:
99:3c:1a:8d:82:0c:d3:62:b2:08:4f:5c:5b:97:2a:
e5:91:ff:c1:ce:df:bb:62:c0:02:91:2c:62:3b:76:
c3:83:f4:a3:fa:06:4d:db:79:1c:73:86:ec:91:0d:
fd:b4:cd:c8:89:a1:c9:68:ad:bc:1f:55:e5:1a:5f:
f0:7b:7f:2c:f9:77:f4:36:d8:31:c4:be:ac:4d:1b:
e2:98:58:bf:19:c5:7c:6b:66:2b:cf:cd:22:08:96:
6e:2a:67:f0:aa:75:9b:9a:4a:df:1f:b4:85:91:9a:
e1:a7:a6:c1:b5:0c:78:11:e9:ee:8d:f0:d2:92:d4:
2f:02:dd:55:69:88:10:cb:4b:48:08:b2:c8:99:34:
68:96:26:7b:af:75:a1:a4:0c:5a:e1:49:cb:f6:c7:
46:f8:5d:ca:53:a9:08:d2:77:d6:4a:d5:48:bf:51:
e8:e9:97:bf:4a:60:82:99:11:b5:0a:fe:d2:7a:8a:
ed:6b:3b:da:23:19:ce:ca:e5:45:93:63:65:e7:c5:
fd:a2:a4:8d:f3:c0:e8:bb:d1:7a:f2:33:76:5e:34:
01:14:e4:dc:40:86:4b:71:3d:62:27:95:24:da:4d:
9e:ec:b6:af:fc:ef:6e:61:56:32:09:9e:ef:03:d4:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:29:9C:B9:BC:7D:6D:4D:7D:AB:18:99:2F:99:FB:8C:16:F4:AD
X509v3 Authority Key Identifier:
keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:82:90:88:e7:cd:da:d0:87:20:7a:47:96:27:90:e4:e0:19:
17:25:d3:3d:ca:6e:87:63:22:e2:33:5d:d8:75:8d:c6:07:5d:
8e:41:c2:ca:3c:c1:39:64:86:72:5f:b5:10:98:6e:32:6d:65:
8f:fa:c6:c6:0f:a2:83:3d:da:71:ba:7d:5e:75:b4:40:e9:76:
dd:4a:78:17:1b:51:a9:45:27:8e:5f:f7:47:19:b4:f0:2a:35:
b4:66:7e:29:ba:3b:11:75:57:7c:30:5d:53:98:d3:91:5a:29:
5b:a9:b7:25:5f:2e:b8:ec:86:46:4c:15:65:c0:c7:13:b6:96:
1d:49:5b:03:01:de:23:9a:0e:b6:86:16:62:97:1f:67:5d:be:
a4:89:f5:3a:b6:0e:06:67:07:14:63:a4:23:e6:b0:bf:bb:38:
c9:06:d8:6b:e8:ea:1e:f9:62:ae:ef:58:8d:34:76:5f:19:09:
de:94:76:95:01:0d:90:bc:9a:ed:0e:a6:c6:b7:3d:a5:5b:95:
ac:d1:21:6e:ee:8b:89:0a:36:96:f4:d5:61:32:62:dc:9b:90:
ee:da:3a:64:42:df:59:68:c0:e7:15:d3:06:6c:37:17:79:20:
58:7b:05:c5:91:8c:2a:f1:af:f6:69:d9:7b:eb:89:46:c4:ac:
9d:89:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:00 2025 by rpki-client on console.sobornost.net