Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/pz30gP5HXmvVhezEbR2M9x5jpYg.roa
File: pz30gP5HXmvVhezEbR2M9x5jpYg.roa (raw, json)
Hash identifier: zMuCQqFnbVDZWipMHPrJQB2cNPEYXwDyxtFSxkBu5H4=
Subject key identifier: A7:3D:F4:80:FE:47:5E:6B:D5:85:EC:C4:6D:1D:8C:F7:1E:63:A5:88
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 0194228E25BBE9A9115F0D5946BFD5243C99
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/pz30gP5HXmvVhezEbR2M9x5jpYg.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6898
IP address blocks: 185.155.176.0/22 maxlen: 22
185.155.184.0/24 maxlen: 24
185.155.185.0/24 maxlen: 24
2a00:bd00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:25:bb:e9:a9:11:5f:0d:59:46:bf:d5:24:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a73df480fe475e6bd585ecc46d1d8cf71e63a588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:2d:a3:ab:80:69:fb:84:5b:77:da:ff:e3:
c3:5f:06:38:1d:b8:86:2b:31:4e:dc:f6:35:09:96:
f6:a1:df:0c:6a:dc:cb:38:9c:6b:ce:d2:e2:94:14:
47:49:02:f1:39:42:e3:81:06:78:2d:89:4d:29:69:
43:b1:7f:04:3a:4b:8b:d4:aa:fb:56:c1:61:4a:f0:
e6:70:38:74:6d:89:99:f2:46:2b:07:f2:a7:6a:9c:
4c:00:4e:a0:29:ce:bc:cc:fb:fc:75:26:38:95:6c:
66:95:cd:0d:22:6b:e0:56:61:8b:ef:80:ae:e7:8f:
d7:2a:3f:1b:59:4f:db:83:0d:9e:33:da:78:da:38:
e3:64:e8:0f:9d:4e:91:2b:5c:f2:e2:a3:17:ed:23:
2c:ec:26:b3:b9:14:f2:ff:28:12:82:73:b5:82:a2:
33:e6:15:1b:ea:f1:32:7e:20:85:f7:19:86:dc:cf:
87:9e:be:87:eb:44:a8:a8:4f:2f:81:00:e4:7d:83:
cd:8b:9c:ec:7a:17:fb:08:5b:be:17:fb:6e:7a:5c:
c6:49:d4:3f:b2:ad:0b:b6:55:0b:69:24:71:5e:14:
e3:99:9b:16:38:88:ef:ef:35:41:33:b4:97:02:c2:
6c:fa:c1:29:23:d9:04:ce:46:61:ac:7e:e7:1a:30:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3D:F4:80:FE:47:5E:6B:D5:85:EC:C4:6D:1D:8C:F7:1E:63:A5:88
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/pz30gP5HXmvVhezEbR2M9x5jpYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.176.0/22
185.155.184.0/23
IPv6:
2a00:bd00::/32
Signature Algorithm: sha256WithRSAEncryption
5e:cb:32:e4:f6:1f:99:14:15:ed:44:61:d6:f2:75:cf:f5:22:
5f:32:ae:1e:70:bb:b2:95:d1:ff:ea:ea:54:a0:f3:85:6b:92:
a6:aa:70:4e:ac:b0:ac:f3:34:30:93:1a:f1:df:42:88:f2:89:
20:f2:02:26:8f:78:f8:f5:e2:41:91:2e:69:7e:48:6b:a6:51:
1c:6c:6a:53:28:dd:19:1a:52:52:93:77:d8:8e:72:28:24:70:
bc:07:25:66:f5:f3:b7:a0:98:43:50:4f:a0:fc:76:fb:e6:f9:
fa:0a:0f:b2:76:73:f5:65:69:4c:9b:cc:bf:76:58:1e:4e:2c:
3d:b1:ec:ba:30:7d:77:3c:5c:00:65:cd:e2:d7:70:63:5a:f2:
a0:90:14:02:af:b8:7a:a8:15:ee:b4:d7:da:7f:da:73:77:89:
5d:b6:7b:97:b8:cd:7d:5d:ad:54:b1:60:e8:ce:84:10:99:bd:
e8:b9:3a:9a:ee:21:c7:06:a4:b8:49:65:2b:d4:a0:76:9b:3a:
42:74:fd:38:78:0c:95:4c:44:f6:b6:68:00:79:96:71:5c:3f:
09:9c:7e:51:c2:d9:2a:96:24:8d:66:3c:ee:17:fe:62:69:82:
35:f2:0c:5c:2b:18:22:78:61:c9:a8:b5:ff:97:cd:35:bf:d4:
2e:e0:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net