Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/N1uccqN3-_zn_FYLzi8LJhs9zOw.roa
File: N1uccqN3-_zn_FYLzi8LJhs9zOw.roa (raw, json)
Hash identifier: TwkMRZReKJy7+Uan6ZYypmFJ92zOZCsCMH9r5je4FBg=
Subject key identifier: 37:5B:9C:72:A3:77:FB:FC:E7:FC:56:0B:CE:2F:0B:26:1B:3D:CC:EC
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 019425FD6B602C5591C24D5692B390E1B14D
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/N1uccqN3-_zn_FYLzi8LJhs9zOw.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205192
IP address blocks: 185.28.60.0/24 maxlen: 24
185.103.196.0/24 maxlen: 24
185.103.197.0/24 maxlen: 24
185.103.198.0/24 maxlen: 24
185.106.20.0/24 maxlen: 24
185.106.21.0/24 maxlen: 24
185.106.22.0/24 maxlen: 24
185.106.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6b:60:2c:55:91:c2:4d:56:92:b3:90:e1:b1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=375b9c72a377fbfce7fc560bce2f0b261b3dccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fc:79:0a:93:2c:cf:c8:42:a0:a8:95:87:e5:
92:b1:fc:31:ed:6c:d9:64:0c:1d:9e:76:4c:ac:8e:
27:4f:2d:4d:14:91:81:15:6d:30:5c:c1:3b:a0:bf:
66:3c:f7:60:b8:b3:9d:b1:af:8b:60:be:01:10:cc:
b1:eb:16:a3:b4:65:2b:e8:95:e3:ea:a5:9b:4b:27:
ca:1b:54:7e:17:6e:73:2f:4e:d7:40:c6:6a:98:ee:
a8:38:b5:43:b0:75:f4:b7:c1:31:f4:85:90:b7:9c:
6e:64:a4:c9:ea:9d:7d:62:b7:4d:2a:b7:84:38:31:
72:b8:9a:2a:fd:8e:50:cc:31:39:0d:c0:21:1d:2c:
9e:c6:30:69:25:38:19:ed:f3:24:aa:51:b3:2d:05:
27:a5:3a:60:dc:58:0c:de:d0:46:90:3e:b8:c9:48:
0e:44:6e:e7:19:76:19:42:6b:e4:26:ad:07:14:88:
8d:29:67:97:ba:fd:e6:81:4f:c0:3b:3a:43:17:d8:
f1:fd:50:de:cd:7f:79:76:1c:a7:69:4c:f6:ad:d8:
5e:d0:d0:51:33:7b:47:96:81:8f:03:0e:d6:40:e9:
a2:d3:5e:45:f0:6a:23:1a:4f:fa:cb:1c:a7:32:bf:
c7:cd:e0:04:c4:8d:a1:d1:1c:6c:8f:28:a9:18:82:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5B:9C:72:A3:77:FB:FC:E7:FC:56:0B:CE:2F:0B:26:1B:3D:CC:EC
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/N1uccqN3-_zn_FYLzi8LJhs9zOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.60.0/24
185.103.196.0-185.103.198.255
185.106.20.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:a7:31:49:39:9d:6a:b2:a9:18:99:2a:7a:d2:ee:ac:6c:d1:
05:b5:24:e7:59:58:33:93:e7:0b:7c:b4:0e:8a:f6:90:84:97:
62:9a:e8:6b:c0:37:30:fa:55:4e:b3:52:72:e4:41:46:6a:f4:
26:43:44:1a:3c:34:ea:25:a7:9b:e8:73:8f:08:59:a6:79:ec:
33:6c:b3:2a:53:02:99:ad:b8:e1:b1:6e:f9:4f:26:24:7b:b2:
aa:f0:3e:3d:70:15:e4:0f:9d:bc:e0:53:67:e1:42:56:dc:7f:
95:8c:68:ff:86:1b:fd:2e:2f:0f:25:a7:ee:ea:6f:b3:1a:18:
a1:ce:ba:04:2e:a5:0e:62:17:e3:38:fa:2c:3a:6f:4a:b0:87:
4f:06:b5:f4:b4:b3:6f:0c:1d:17:83:1f:2a:89:9a:fb:e9:d7:
23:bf:3e:a1:67:34:c6:00:df:35:93:04:ce:aa:f6:82:9d:1f:
50:f4:62:85:0a:b7:46:3b:02:80:ed:01:38:c2:b2:ea:8d:94:
e6:7f:9c:9e:71:ec:b8:d8:7f:d2:db:bf:41:ff:72:22:0b:e9:
f6:2b:fc:bf:87:2a:73:02:09:f7:5a:3c:75:a5:9b:11:1d:69:
b4:70:13:db:71:7f:cc:64:d6:9b:94:7a:fc:42:45:6c:f7:6f:
ce:7e:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net