Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/wL6tLZZKC26B362dOxei9VMeWYo.roa
File: wL6tLZZKC26B362dOxei9VMeWYo.roa (raw, json)
Hash identifier: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=
Subject key identifier: C0:BE:AD:2D:96:4A:0B:6E:81:DF:AD:9D:3B:17:A2:F5:53:1E:59:8A
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 019427482FC84E290EBEB462FA2F282B4EE4
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/wL6tLZZKC26B362dOxei9VMeWYo.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42207
IP address blocks: 185.206.184.0/22 maxlen: 22
185.206.184.0/23 maxlen: 23
185.206.186.0/23 maxlen: 23
2a0b:15c0::/29 maxlen: 29
2a0b:15c0::/30 maxlen: 30
2a0b:15c4::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2f:c8:4e:29:0e:be:b4:62:fa:2f:28:2b:4e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0bead2d964a0b6e81dfad9d3b17a2f5531e598a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:c5:df:5c:9b:d9:be:ee:bf:e3:50:53:77:
34:f2:bf:9a:1a:aa:a4:53:b7:0e:16:26:a9:be:ad:
40:ff:b9:2d:01:a7:c3:23:fd:e7:4b:1c:b6:9b:0e:
f1:d2:c3:30:07:81:cd:01:38:72:24:e9:1b:14:74:
aa:62:c4:ba:c4:c6:94:cf:45:f4:b0:4c:75:ce:ef:
59:1e:6d:b7:14:b0:8f:f3:f3:54:ce:a0:b4:99:37:
17:c5:78:a1:89:1a:bd:4a:bf:5d:3d:0f:cb:8c:e5:
af:5d:37:5b:a5:28:86:bf:5a:d3:d6:7f:c1:ec:f3:
c4:9d:63:ec:6f:58:cc:64:8a:9f:4f:2f:01:c1:28:
9e:0d:2e:85:0d:19:96:0e:ef:6a:80:42:c9:d9:9d:
7c:d5:b9:c3:bf:9c:22:c8:91:3d:05:9c:99:ea:84:
7f:8b:4a:23:15:92:43:a8:22:00:45:da:8d:46:fb:
c2:62:86:4b:e9:0e:19:5e:e8:fe:d0:f3:32:61:8f:
ad:1e:93:62:23:11:76:92:1f:07:33:74:74:77:7f:
54:d9:e0:b1:85:c4:87:a9:aa:91:4f:2a:e2:94:06:
f3:db:50:9a:e3:ca:7f:e6:ae:7a:bb:34:34:b7:cf:
d8:b5:91:9b:0b:06:f3:14:61:e2:b3:c6:12:21:a5:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:AD:2D:96:4A:0B:6E:81:DF:AD:9D:3B:17:A2:F5:53:1E:59:8A
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/wL6tLZZKC26B362dOxei9VMeWYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.184.0/22
IPv6:
2a0b:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:db:71:72:fc:f8:d0:42:ef:8b:66:34:28:58:d9:e5:4c:8b:
57:42:ff:8b:b1:c9:bd:16:16:fe:88:42:4c:b1:cc:d5:a1:ed:
37:e5:2b:2d:33:c9:3f:1b:ad:ba:2c:66:75:60:46:dc:91:0c:
f2:0e:7d:15:9a:be:e9:f4:32:4b:56:84:2b:f8:29:63:f5:e7:
1a:0e:d9:97:ab:0a:6c:61:c4:46:0e:43:cb:a5:47:0d:c8:4b:
b3:a7:18:38:3f:09:ac:24:4e:e0:2c:a4:7f:81:0b:fe:80:39:
48:30:b4:71:b7:a9:07:6b:1f:fe:31:2a:69:af:37:c6:d2:9d:
b5:12:f5:37:32:2b:b9:6a:64:19:39:b5:af:3b:8a:d6:8c:33:
61:91:d7:14:1b:7e:28:2a:1e:18:8f:7d:30:c9:7f:b5:09:7b:
9a:17:fd:fb:e4:e5:77:ba:51:8a:ea:b3:4a:58:79:32:cc:42:
9f:9b:21:c6:65:4a:31:ff:ae:c8:5f:16:50:40:8f:63:54:98:
6c:c6:7b:89:6d:8f:00:a3:ea:7b:9f:4a:ef:77:e3:74:41:ce:
e7:04:b6:d3:6a:9d:24:87:1b:86:0f:b4:5d:8b:8a:26:ea:85:
4e:77:dd:3c:fc:d3:11:32:7e:05:bf:de:ef:2e:04:05:33:68:
42:36:c6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net