Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa
File: Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa (raw, json)
Hash identifier: hUjlBlwFujOIxjIsUbH4qKxEVtqgo5ThvH9AsXM845U=
Subject key identifier: 22:4E:71:E2:CC:55:A4:91:8A:0D:56:65:86:98:33:54:9C:85:71:D1
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 01942067D9F86384E575FD131A7F4703D530
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa
Signing time: Wed 01 Jan 2025 05:47:44 +0000
ROA not before: Wed 01 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47543
IP address blocks: 185.234.96.0/24 maxlen: 24
185.234.97.0/24 maxlen: 24
185.234.98.0/24 maxlen: 24
185.234.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d9:f8:63:84:e5:75:fd:13:1a:7f:47:03:d5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=224e71e2cc55a4918a0d5665869833549c8571d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:6e:21:52:e6:17:f7:0b:87:c2:77:bd:61:
f7:03:0a:05:82:bc:d4:54:81:26:7d:76:6e:80:84:
b0:33:eb:19:19:e7:7f:3e:24:06:96:b4:99:20:fc:
71:d5:6d:f0:ad:2a:c6:12:70:f2:0f:01:af:59:55:
25:c8:b3:68:c8:2e:da:4f:46:ef:83:67:21:1b:ed:
9a:de:14:ca:5d:0f:44:6a:8c:e6:08:c5:31:46:3d:
5e:90:c9:56:af:2f:0a:70:ac:a6:e9:92:9c:7f:96:
25:eb:d8:aa:a4:44:07:ec:91:52:7f:bf:de:f1:1e:
ce:7b:f3:db:7d:54:85:9f:73:31:fe:2d:57:8f:29:
06:42:65:7b:2a:41:68:4e:4c:ac:7f:18:5c:f1:92:
8c:ff:3b:5a:69:64:4a:04:f6:60:d8:44:53:40:ad:
19:31:7a:24:fc:1a:ff:b6:64:da:65:e4:bc:b1:de:
8d:a7:38:2a:bb:4c:2f:3d:4d:20:72:cf:74:93:0a:
9d:b4:15:27:d2:d6:4d:1d:0a:0f:78:1d:fe:2b:0b:
52:e6:24:29:28:eb:3c:dc:99:01:ab:ff:21:30:e8:
65:09:76:49:ff:7b:5e:79:d9:b9:53:69:74:5e:3c:
b1:26:96:6c:b8:04:4b:99:34:0e:b9:31:02:43:29:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:71:E2:CC:55:A4:91:8A:0D:56:65:86:98:33:54:9C:85:71:D1
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/Ik5x4sxVpJGKDVZlhpgzVJyFcdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.96.0/22
Signature Algorithm: sha256WithRSAEncryption
79:e8:f7:13:45:38:a3:64:50:0e:b1:d0:b4:e7:6c:55:00:1d:
df:be:56:45:05:33:c8:88:ff:09:bf:fe:3e:97:12:a8:71:c0:
b6:c3:f7:e5:85:74:f0:03:e2:de:1b:13:fa:10:b8:c6:82:29:
10:85:65:75:66:28:8a:07:74:1f:fe:4d:7f:30:74:d2:8d:51:
84:f7:4d:cb:37:7a:e6:3a:36:81:f1:d3:99:cf:66:56:1f:19:
ff:34:72:24:d4:c1:f1:9e:77:0c:ed:41:88:93:85:77:12:0d:
c1:42:16:3d:6f:89:70:b9:68:7e:2a:39:e5:0f:21:b0:58:3e:
7f:31:e7:81:c1:ce:7f:ec:3b:9b:db:81:5f:f0:5e:64:45:69:
2b:e3:f1:2f:58:a8:5f:b2:ea:cc:15:2e:52:80:d9:b6:e6:97:
70:05:c7:78:31:ad:81:57:c1:be:70:24:d9:f6:3d:97:7d:4f:
a0:57:d6:25:78:1f:68:49:e4:18:ff:34:f2:95:ee:63:d6:0c:
94:df:83:bc:2e:76:8a:c7:42:3d:52:33:b1:fd:76:15:b4:82:
0f:fb:05:b5:a8:97:df:89:ec:6a:6c:40:27:1e:70:31:94:3a:
ed:90:67:e7:7c:89:ab:e1:0b:e8:53:b4:68:2b:f4:cd:b6:7f:
23:45:e6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net