Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/cssion0g3PJ3Xd3t2jaSsbUDiLU.roa
File: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (raw, json)
Hash identifier: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=
Subject key identifier: 72:CB:22:A2:7D:20:DC:F2:77:5D:DD:ED:DA:36:92:B1:B5:03:88:B5
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 01941FFA08450F0A4BD5093CEBF1EBF0672E
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/cssion0g3PJ3Xd3t2jaSsbUDiLU.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200129
IP address blocks: 185.36.180.0/24 maxlen: 24
185.36.181.0/24 maxlen: 24
185.36.182.0/24 maxlen: 24
185.36.183.0/24 maxlen: 24
2a00:e860:180::/48 maxlen: 48
2a00:e860:181::/48 maxlen: 48
2a00:e860:182::/48 maxlen: 48
2a00:e860:183::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:08:45:0f:0a:4b:d5:09:3c:eb:f1:eb:f0:67:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72cb22a27d20dcf2775dddedda3692b1b50388b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:e1:a8:f9:6d:95:7f:f2:59:c1:ce:e7:93:
e5:e7:da:e3:15:73:06:c1:5d:4e:ac:bf:12:d6:13:
ff:a8:03:ae:a5:3e:1f:9e:22:0e:be:6d:80:48:21:
4b:40:4b:62:02:30:be:81:3a:cc:a7:29:26:74:bf:
ea:3c:49:b0:ff:f5:69:eb:80:24:84:99:29:67:bb:
a8:d8:ff:85:22:d2:75:1a:78:df:ec:0a:9d:eb:b7:
90:c6:1f:e1:63:82:c3:48:07:55:ef:60:f7:f0:0a:
af:c9:47:bd:e0:99:a3:98:ae:5e:55:9d:ec:4b:5f:
57:12:84:35:db:a3:08:85:75:b4:00:7b:06:4c:cb:
93:31:67:28:5c:06:ad:8c:e4:30:78:ef:7d:8f:f5:
76:1f:20:13:2d:1d:95:a2:83:44:16:cc:1b:0f:5a:
f2:13:46:8e:36:0e:ad:2b:7e:ce:74:4d:c4:0e:81:
8b:ce:a9:f5:ae:54:59:69:6d:38:6c:9c:c7:fc:3e:
47:93:85:7e:31:07:07:ba:68:d6:d5:b1:3c:ed:30:
94:03:af:b4:29:8c:e6:0c:3e:b0:55:21:93:3e:97:
49:2d:ec:45:71:e8:39:cd:ae:35:2d:b8:b3:4a:e2:
ff:1a:b2:94:5a:2f:db:78:67:47:bb:07:13:7f:01:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CB:22:A2:7D:20:DC:F2:77:5D:DD:ED:DA:36:92:B1:B5:03:88:B5
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/cssion0g3PJ3Xd3t2jaSsbUDiLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.180.0/22
IPv6:
2a00:e860:180::/46
Signature Algorithm: sha256WithRSAEncryption
02:b5:89:b8:49:2b:76:15:46:36:21:a8:b2:4f:a7:e7:07:bb:
fd:0e:d5:6a:9e:f4:b1:3e:24:78:c1:e3:38:82:5f:96:a9:fc:
08:65:65:4e:f3:85:6b:25:49:b0:91:e1:80:f2:e6:e3:71:2f:
ab:94:e8:f4:fb:f8:aa:5b:c9:cb:af:6f:dd:33:b3:0f:63:23:
84:fc:a2:6c:06:a0:50:d6:56:10:69:75:3e:16:1b:a2:0f:48:
e8:88:b6:f7:7a:c7:bf:27:8f:8e:73:43:d1:95:cf:ff:9f:28:
6e:de:db:0a:05:aa:c6:a7:72:ff:9d:4a:5b:74:45:86:16:f4:
32:1b:56:7f:2e:70:04:08:92:42:70:60:03:cf:87:09:4a:ee:
0d:5e:48:32:33:b1:b1:14:6b:aa:5f:10:6a:04:c0:66:15:d2:
76:79:5e:01:c9:ff:45:d1:12:45:0d:f0:c9:21:57:47:e8:e6:
3e:df:af:b6:ce:64:95:3c:e6:dd:7f:0f:b6:fb:84:f0:79:e2:
16:33:4a:6d:00:e6:8f:90:3d:73:00:d4:39:8f:eb:63:98:13:
99:80:3a:81:74:40:27:0a:2a:01:8b:c0:76:26:d3:3a:a3:91:
86:ce:d9:f4:b1:49:68:49:e8:b0:f8:6c:1b:9d:3e:0f:b4:a6:
64:d8:5d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net