Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/OwG4_h94ip7CzANECDf39dfwNGk.roa
File: OwG4_h94ip7CzANECDf39dfwNGk.roa (raw, json)
Hash identifier: XIXqYD1CZdADAiBPHja+pimegzmDxikS2efUTrBV4t8=
Subject key identifier: 3B:01:B8:FE:1F:78:8A:9E:C2:CC:03:44:08:37:F7:F5:D7:F0:34:69
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 019425FC18B50D6BC6A2DF4619860A34CCF9
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/OwG4_h94ip7CzANECDf39dfwNGk.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200127
IP address blocks: 185.36.236.0/24 maxlen: 24
185.36.237.0/24 maxlen: 24
185.36.238.0/24 maxlen: 24
185.36.239.0/24 maxlen: 24
185.76.244.0/24 maxlen: 24
185.76.245.0/24 maxlen: 24
185.76.246.0/24 maxlen: 24
185.76.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:18:b5:0d:6b:c6:a2:df:46:19:86:0a:34:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b01b8fe1f788a9ec2cc03440837f7f5d7f03469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:25:1a:d7:79:61:6f:71:ca:ab:0a:64:2a:
32:a0:08:c7:02:41:54:4f:0b:49:41:4c:53:b8:59:
4e:36:7a:e6:73:26:35:96:7a:3f:4a:0d:04:af:62:
6f:bc:20:c2:b4:d6:19:fd:11:91:31:69:0f:0c:bc:
59:b0:9b:27:71:9d:46:e1:d2:8a:04:13:68:76:1b:
db:25:aa:29:88:4f:a5:68:64:84:9b:aa:d6:db:be:
05:87:80:b2:28:35:64:35:cf:91:66:12:8c:54:86:
ce:c1:d4:fa:76:03:eb:41:63:b4:69:56:a9:88:40:
9e:1f:0b:7b:35:04:60:7e:40:97:33:f1:1e:bb:20:
6b:34:0d:5e:d7:22:36:cc:6a:86:bc:23:82:2a:3c:
af:41:3e:cf:02:b2:d6:85:fb:c8:cd:31:3b:53:60:
45:30:ba:e9:39:22:66:a5:ae:66:2e:63:28:b6:99:
65:cd:f3:69:da:9e:f9:36:55:c2:89:0c:c7:d9:2f:
e5:3b:47:f8:63:c4:34:aa:fc:f7:ea:ce:64:81:e2:
96:5b:06:20:4a:da:cd:61:2b:4f:bc:6e:d7:09:01:
a6:45:ea:c7:47:9d:e6:9c:32:86:7b:8a:87:51:88:
66:b7:e5:2a:8c:7b:ed:66:29:6a:ff:b9:4e:e1:c5:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:B8:FE:1F:78:8A:9E:C2:CC:03:44:08:37:F7:F5:D7:F0:34:69
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/OwG4_h94ip7CzANECDf39dfwNGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.236.0/22
185.76.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:d6:23:0b:09:3c:02:4a:b0:88:0b:83:4b:14:4b:0f:bb:ef:
c2:f0:09:53:e1:1b:b1:c1:8f:f5:d5:34:0a:85:5f:88:15:d2:
25:54:2b:60:5a:6a:db:ed:6c:cb:c8:a8:93:71:46:28:99:33:
41:cf:69:5c:8a:6d:d6:6b:21:45:c3:75:a8:72:52:75:f3:4c:
2e:8a:5c:56:de:03:fd:bb:dd:d0:db:8e:83:39:59:cd:c3:fe:
c0:66:4a:c5:9b:8a:9e:08:41:39:17:4b:92:f3:a0:21:bb:46:
85:4c:78:b4:47:26:8b:41:10:46:46:ea:f5:8e:23:bf:68:cd:
5a:09:b4:e7:aa:00:16:c9:71:79:00:2a:38:f3:b7:ba:93:e1:
72:d5:43:34:9d:e8:43:25:64:63:e2:a1:0e:9a:cc:82:66:b3:
f7:b5:ba:1b:aa:7d:14:79:0d:13:94:06:a0:28:e4:cf:3d:e2:
ba:13:9b:ba:c4:fc:53:a9:58:3a:6c:ab:11:59:35:0c:14:c5:
d5:31:1d:15:1a:60:ab:31:90:9e:6b:78:29:04:c5:0f:dc:95:
2e:24:1b:8a:ff:e8:fe:8b:14:14:f7:57:8b:05:a7:f4:a2:b7:
5f:f8:46:09:af:44:17:7f:46:af:15:3c:d2:87:9c:b8:3e:ff:
88:4e:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net