Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/reLRvJwrrvQpm_Zb22nWHkBKw_U.roa
File: reLRvJwrrvQpm_Zb22nWHkBKw_U.roa (raw, json)
Hash identifier: PBKOGv6lwFgGVDPmwC8RldYX3f2lysFJxhWAC+wUVeY=
Subject key identifier: AD:E2:D1:BC:9C:2B:AE:F4:29:9B:F6:5B:DB:69:D6:1E:40:4A:C3:F5
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 01942669F18BCD857FABD0271309FBE0E633
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/reLRvJwrrvQpm_Zb22nWHkBKw_U.roa
Signing time: Thu 02 Jan 2025 09:47:44 +0000
ROA not before: Thu 02 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8391
IP address blocks: 185.119.138.0/23 maxlen: 24
194.77.54.0/23 maxlen: 23
195.138.32.0/19 maxlen: 24
195.253.0.0/16 maxlen: 24
195.253.6.0/24 maxlen: 24
195.253.96.0/19 maxlen: 24
2a01:5b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:f1:8b:cd:85:7f:ab:d0:27:13:09:fb:e0:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 2 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ade2d1bc9c2baef4299bf65bdb69d61e404ac3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:5d:15:a2:8d:ea:55:69:99:8e:66:cc:23:
49:ec:1d:ae:a3:9a:47:20:2a:b4:3c:e4:38:c9:9f:
22:62:02:7a:af:86:f2:c7:bb:dd:fe:6c:b2:95:14:
27:60:56:4c:90:c5:84:57:6d:45:6a:68:7c:fa:fb:
f0:5e:35:0c:be:50:11:19:53:a1:e0:5f:7c:35:a7:
7d:d4:f8:e3:9b:d3:bb:42:1e:64:ea:e5:47:a6:84:
67:63:5f:9b:65:a7:09:65:2b:2f:15:8c:91:1c:68:
e3:a5:0f:df:3d:22:01:b2:c8:7d:9c:bf:b1:11:c6:
59:3a:b3:dd:f5:2e:9d:fc:12:59:01:88:06:25:be:
ed:08:9b:20:91:8a:cb:2d:f2:1b:91:15:c2:cb:bf:
c1:5f:68:91:67:87:34:af:3e:2a:74:e9:0e:03:d8:
8e:23:d1:c6:5a:86:f0:65:f6:1e:66:3b:ee:64:be:
e8:2c:15:b7:8f:b1:46:c7:88:4e:6c:34:84:58:99:
46:34:ec:26:21:05:79:b7:26:e7:24:bd:8b:d9:6c:
1d:7c:9f:15:ba:72:a7:d9:de:e3:1a:c9:d7:b3:1d:
d1:38:81:60:eb:8a:eb:23:83:b1:0e:66:7e:17:6a:
58:a3:0e:e9:8f:a0:d4:fe:2b:ab:de:dd:aa:16:e7:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E2:D1:BC:9C:2B:AE:F4:29:9B:F6:5B:DB:69:D6:1E:40:4A:C3:F5
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/reLRvJwrrvQpm_Zb22nWHkBKw_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.138.0/23
194.77.54.0/23
195.138.32.0/19
195.253.0.0/16
IPv6:
2a01:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
68:d7:7c:87:a2:e0:29:eb:c7:36:87:52:bf:c1:f4:1c:71:bb:
63:15:b9:ae:e1:eb:23:18:e1:af:0e:62:a2:81:d6:db:24:2a:
50:c9:41:1f:23:aa:f6:fa:4f:6f:38:06:39:eb:03:d0:fd:bf:
4b:fd:db:12:56:64:ec:15:e8:56:b3:a3:22:69:a0:93:41:07:
b0:e8:59:26:d6:b6:69:3e:81:7a:9a:49:f5:da:e6:97:c3:25:
25:e2:b8:31:e1:e0:c4:df:1d:70:01:23:56:1f:e5:2a:65:c3:
58:48:38:dc:05:90:82:f5:3d:71:36:9c:2c:85:25:9e:ad:c8:
7c:fa:8f:fb:2e:5c:21:11:10:16:6d:48:82:0b:1d:2a:ab:6a:
74:78:0d:ff:c3:12:1a:31:98:10:c0:03:75:6e:6c:7d:54:38:
fc:90:a9:c4:9a:b3:c2:0a:76:70:c1:56:22:e8:de:7d:01:aa:
0e:27:3a:c9:a9:c7:8e:8d:7d:f8:f3:fc:cf:d9:a8:94:0c:73:
e5:1e:00:39:da:77:b6:5a:ac:ca:8a:f8:61:71:30:59:ec:5a:
bd:5f:01:06:39:48:f4:fa:8a:e3:1f:fb:07:f7:86:33:ee:ca:
58:16:e6:62:60:91:43:42:06:5e:0c:96:0a:90:18:61:dd:78:
d5:68:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:54:44 2025 by rpki-client on console.sobornost.net