Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa
File: EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa (raw, json)
Hash identifier: t2UDAq4DzGmTsnjWgogyVQ3r8Ls90WheZWHhRn0w6Ws=
Subject key identifier: 10:42:36:74:D4:A3:71:5C:36:89:9B:3B:1A:7E:F8:CA:1B:40:A3:10
Certificate issuer: /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial: 0194206821B86229969DF02CF3190F40447A
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9036
IP address blocks: 185.140.128.0/22 maxlen: 24
212.85.128.0/20 maxlen: 24
2001:4b30::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:21:b8:62:29:96:9d:f0:2c:f3:19:0f:40:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10423674d4a3715c36899b3b1a7ef8ca1b40a310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:3d:b0:4f:bc:14:af:7d:5c:8a:f0:f3:d2:
1c:9f:4e:21:c7:8d:ef:47:83:80:2f:50:b0:f9:c6:
0c:fb:53:49:f0:0b:68:83:2b:b6:f7:6e:6a:88:d5:
f7:89:8e:e8:99:00:f1:17:49:cc:c1:32:bd:60:f8:
34:47:92:fb:9a:ea:f7:b3:ff:a7:a1:2e:26:63:8b:
5e:b1:aa:cd:c8:18:09:b9:70:ac:20:17:dc:35:df:
7c:f5:a3:6a:ee:af:c6:0c:ff:2f:a4:27:c5:41:1a:
12:d9:f9:dc:29:d6:8a:79:35:5c:a7:33:29:51:39:
35:2a:23:8d:f7:fb:e8:d5:2f:cb:6b:c1:13:60:dd:
33:f9:73:69:38:c8:71:c2:44:1f:eb:fe:f8:bc:65:
86:35:14:5b:0f:a6:20:04:f8:08:80:ac:8c:40:4c:
2e:a6:9d:82:d1:7d:b6:66:e2:23:16:7e:f1:5a:2a:
97:41:d8:9c:85:0a:9f:bd:e1:28:7b:d3:75:6f:b0:
6d:59:29:d2:1a:33:29:f4:ab:3e:34:97:a2:4d:79:
5a:e2:83:e9:69:7b:64:a2:f0:9e:5b:b5:9f:35:ef:
90:7f:fa:94:21:13:98:d9:0b:de:12:8f:f0:41:2c:
3c:1e:9d:5c:02:00:b3:ba:17:66:35:e7:74:e7:c8:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:36:74:D4:A3:71:5C:36:89:9B:3B:1A:7E:F8:CA:1B:40:A3:10
X509v3 Authority Key Identifier:
keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.128.0/22
212.85.128.0/20
IPv6:
2001:4b30::/29
Signature Algorithm: sha256WithRSAEncryption
05:c7:5d:fc:d4:5e:c2:dc:93:8d:dc:79:ad:3b:2f:44:88:47:
f7:5e:7a:a7:c2:b1:f0:79:c5:fd:0a:97:99:15:50:51:09:f5:
ed:5b:08:01:4b:4c:54:a3:a8:6a:37:a1:94:ed:5b:e4:f9:f3:
f9:34:56:3d:4e:ca:7e:e2:ca:18:7b:3d:ad:35:80:0e:8b:93:
40:b8:56:29:b4:00:b4:24:c6:0d:60:1a:66:17:d5:8d:f5:33:
3b:1e:8d:0b:26:48:51:1d:0d:a8:51:32:03:c3:02:38:a8:44:
d0:1f:a8:ca:d8:7f:aa:71:03:58:a2:10:c4:74:c0:33:b1:63:
d6:43:a6:5b:f4:e5:01:b6:ce:fe:fb:de:a4:a4:8d:19:c0:16:
f7:6d:57:d1:bd:54:5a:2d:7e:bf:46:2d:82:25:f3:e8:7c:b6:
75:0b:69:e3:75:98:86:2f:09:8e:c4:0e:f2:a9:61:49:60:cf:
0f:8e:89:f1:98:f9:6f:58:5e:ac:15:c4:15:c1:67:6b:49:23:
5f:3b:f8:0a:93:1b:70:78:f8:db:36:73:05:94:90:78:83:b5:
d7:75:15:b8:0a:b1:26:c0:f3:83:69:f7:c7:cf:66:77:e1:89:
2e:3a:f8:ea:62:a7:42:89:ac:b6:6e:fe:eb:e6:59:a3:70:03:
73:91:2d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net