Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/eQBFv7lAPEwDFMIhf4M6orVjXWY.roa
File: eQBFv7lAPEwDFMIhf4M6orVjXWY.roa (raw, json)
Hash identifier: C5S9wVh8SkZ4xVzErIy7UKem7Vv0JZ4fOHj6nlUXYkE=
Subject key identifier: 79:00:45:BF:B9:40:3C:4C:03:14:C2:21:7F:83:3A:A2:B5:63:5D:66
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 019426D97338B60DAAFD8E9719F28A40E284
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/eQBFv7lAPEwDFMIhf4M6orVjXWY.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24631
IP address blocks: 185.137.24.0/24 maxlen: 24
185.137.25.0/24 maxlen: 24
185.137.26.0/24 maxlen: 24
185.137.27.0/24 maxlen: 24
185.191.76.0/24 maxlen: 24
185.191.77.0/24 maxlen: 24
185.191.78.0/24 maxlen: 24
185.191.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:73:38:b6:0d:aa:fd:8e:97:19:f2:8a:40:e2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=790045bfb9403c4c0314c2217f833aa2b5635d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:7a:ba:ed:d4:19:78:9f:82:9e:31:01:87:
05:53:cc:d9:25:fa:83:f5:7e:a0:8a:e4:ce:4c:eb:
53:b4:9a:59:45:1c:2a:7b:11:12:a3:f6:f3:9a:ac:
02:1e:e8:87:a6:a1:f0:4a:2f:c9:8c:e8:63:6e:fb:
b9:31:01:ba:18:c9:33:2c:a4:35:34:b9:ee:17:ca:
36:28:4e:c9:b5:10:68:9c:c7:f1:54:c4:7b:74:f2:
36:a1:ab:85:80:c3:04:0d:3f:a3:92:90:e3:d9:03:
89:d3:4b:46:dc:1c:d8:b6:52:55:91:0b:43:45:8a:
e1:bf:bf:16:40:46:0f:91:67:8d:4c:dd:b0:0e:b3:
75:e3:39:dc:f3:ad:bb:2b:35:41:7d:e0:b2:91:4c:
9b:34:18:e8:b9:8f:2d:0d:d3:80:31:bc:d1:f7:73:
81:17:8d:5c:ca:d4:5e:ed:db:13:c6:ff:66:a7:24:
52:68:49:aa:11:11:22:43:95:72:80:a5:44:cb:cc:
72:af:85:37:1e:de:3e:95:95:25:8f:6a:c7:b5:0f:
1b:61:16:b4:09:e0:b2:d3:e9:ac:8c:33:ba:c5:69:
93:6d:16:24:c5:21:4b:7b:ce:93:f7:df:d4:fd:b7:
c2:1b:ce:5b:0f:01:cc:96:ee:7a:30:86:c8:4b:f4:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:45:BF:B9:40:3C:4C:03:14:C2:21:7F:83:3A:A2:B5:63:5D:66
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/eQBFv7lAPEwDFMIhf4M6orVjXWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.24.0/22
185.191.76.0/22
Signature Algorithm: sha256WithRSAEncryption
66:dd:20:cf:48:1d:ee:bc:c2:c2:ed:f3:22:51:3a:a6:31:f3:
8a:48:88:cf:cd:d3:d5:d3:d7:10:14:15:a7:42:86:05:11:ca:
42:fd:6a:41:35:df:4f:7d:42:d2:1d:71:a6:84:fa:9f:5d:61:
6c:d6:81:57:ad:f0:bb:bd:c9:23:b0:49:c1:e6:f1:76:26:93:
5a:a2:26:f2:94:d3:13:91:ad:70:c9:b2:80:9c:a8:ac:32:a0:
e8:da:c9:75:4b:50:12:42:fa:f0:35:fa:39:a3:57:56:66:17:
51:65:52:1e:ef:a5:0c:cc:63:0e:6b:fa:a6:c5:4e:b3:d6:41:
3a:8d:b3:0c:37:14:22:2a:c0:e8:4f:ca:7e:35:d2:88:95:d0:
5e:4c:77:72:03:f8:14:77:4b:f1:7c:fa:55:43:5a:f7:fc:2a:
af:05:dc:06:c1:c9:71:10:0f:0b:bb:01:8a:21:9d:59:d6:d2:
ec:6a:a9:c2:df:24:9f:68:95:3e:2e:57:09:d6:15:8b:c0:bc:
e9:b0:88:f8:c4:c6:5b:6b:8a:96:61:41:4d:12:1d:96:73:4a:
99:31:6e:72:26:81:2e:0a:b6:33:6d:1e:18:38:17:ed:38:26:
8c:f1:44:1e:1e:9b:f8:0a:fb:f9:64:9c:a6:9d:21:01:9f:04:
50:30:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net