Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa
File: i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa (raw, json)
Hash identifier: 6iS4lGatjNwdjx3TWoy83KW0n9N+x6+eWhAvA99wwRM=
Subject key identifier: 8B:5D:50:50:CA:B9:AF:11:C8:B1:2F:D2:BA:39:3B:7C:CD:56:9A:97
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 01951909A284B7B7B420967B6CC709387EDC
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa
Signing time: Tue 18 Feb 2025 12:30:16 +0000
ROA not before: Tue 18 Feb 2025 12:30:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215783
IP address blocks: 185.141.152.0/22 maxlen: 22
185.141.155.0/24 maxlen: 24
2a07:2440::/29 maxlen: 29
2a07:2440::/34 maxlen: 34
2a07:2440:1000::/36 maxlen: 36
2a07:2446:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:09:a2:84:b7:b7:b4:20:96:7b:6c:c7:09:38:7e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Feb 18 12:30:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5d5050cab9af11c8b12fd2ba393b7ccd569a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:3e:ae:4c:dd:9e:08:f5:a0:fb:f7:cf:c8:
6c:19:ef:3f:64:b3:ed:bd:59:4e:6e:6e:5e:32:c1:
3b:1b:5d:74:d2:2a:f8:23:a8:68:54:aa:90:69:9b:
bd:80:70:e6:91:f2:84:07:c2:79:11:13:10:40:18:
18:50:35:eb:8f:c0:72:78:d6:de:04:57:f0:a5:54:
07:04:15:50:88:60:6c:2b:17:0a:58:e3:ee:37:ef:
a7:f8:08:32:79:9c:a2:33:e3:21:ca:36:51:84:9e:
e3:01:10:9e:7a:76:80:9e:4a:a9:1c:6f:c4:73:f5:
26:bb:ed:a3:a0:55:bf:64:06:d1:15:ac:8d:e3:15:
82:dc:2e:dc:69:1d:c3:4e:04:27:c8:e9:20:1d:b6:
55:28:c5:03:0c:cd:aa:bb:f5:ed:97:77:d1:85:45:
31:f5:68:cc:45:0b:0f:0e:50:d4:6e:cc:13:47:c8:
f7:f0:b5:16:8b:b8:a8:ae:bb:ee:ba:f9:f0:a6:a4:
6d:2d:20:3d:81:aa:2d:53:8b:16:68:a8:0a:20:89:
3f:96:58:e2:e1:17:58:68:6c:a7:fa:17:86:19:06:
7a:0a:41:92:79:0b:d9:3d:05:5a:27:2a:8c:a1:0e:
6a:4c:55:67:09:07:13:50:5d:6d:16:05:61:ea:34:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:50:50:CA:B9:AF:11:C8:B1:2F:D2:BA:39:3B:7C:CD:56:9A:97
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.152.0/22
IPv6:
2a07:2440::/29
Signature Algorithm: sha256WithRSAEncryption
36:12:ab:e8:19:36:0b:7e:4b:74:80:27:ab:cd:01:f2:20:01:
42:c4:c0:8e:29:9a:f9:85:61:f2:6a:2f:97:6d:a0:48:13:13:
8c:c7:e5:ea:d7:3b:93:cf:f7:37:c4:4a:6f:bd:74:59:9a:9f:
bb:31:5c:b8:33:5f:ff:4e:ca:c3:70:67:a9:18:48:10:94:9e:
98:3b:5e:bc:37:41:ac:98:97:47:11:58:c7:95:d6:78:2f:58:
d7:97:60:92:65:77:76:0b:25:b2:f4:d6:f7:1c:ed:8e:c4:86:
0d:b2:ee:bf:95:64:0b:69:ea:61:c2:2c:50:b7:33:f3:4d:ba:
7d:58:89:7d:7d:7d:4b:b5:d6:f5:76:5b:22:e9:06:01:26:73:
c5:94:b4:dd:81:61:60:24:e5:2b:0a:8b:32:01:0c:d3:88:bf:
61:47:7e:c1:49:fb:1a:f6:0f:57:51:fe:6c:42:ca:1a:0e:4a:
22:29:5c:37:b7:62:b4:8e:ae:73:81:f1:db:ab:ae:8e:90:e0:
2d:91:a0:2a:03:86:58:6b:38:a3:2c:c7:af:87:17:d8:1f:63:
ea:f3:74:b7:09:3f:97:be:0b:29:b0:cb:98:97:9b:3e:83:2e:
c8:86:6b:cb:3b:59:18:b3:66:7e:20:ff:f7:e5:69:33:ae:4e:
2e:99:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net