Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa
File: e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa (raw, json)
Hash identifier: hdEGtzXmNsVqaiQbsKpplmaz4uwwkN9r2YZS335CDho=
Subject key identifier: 7B:DA:E8:D7:84:36:0A:45:56:A3:DB:71:F6:64:BF:0D:18:CA:A0:6D
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 019427B4FE34164C6EFC72FA901F143619C2
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa
Signing time: Thu 02 Jan 2025 15:49:20 +0000
ROA not before: Thu 02 Jan 2025 15:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201453
IP address blocks: 185.160.228.0/24 maxlen: 24
185.160.229.0/24 maxlen: 24
185.160.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:fe:34:16:4c:6e:fc:72:fa:90:1f:14:36:19:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 2 15:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bdae8d784360a4556a3db71f664bf0d18caa06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:91:5a:b0:ca:80:1c:b6:7d:d9:50:05:d6:e0:
70:8a:7a:8e:4a:0a:92:24:13:3a:71:f3:2e:29:e1:
28:2e:90:1a:69:c1:14:c2:2f:ac:a3:63:30:5e:b7:
12:a1:78:dc:ea:05:62:e5:e0:70:18:dd:f4:64:61:
97:0d:3a:15:3b:a2:2b:0c:84:e3:35:c0:fe:80:0c:
ec:31:7a:24:03:32:4a:96:c5:bb:a1:a3:45:a7:99:
c4:1d:34:8d:04:e1:59:60:c9:22:c4:78:bd:5e:29:
88:5c:3d:65:bf:51:af:12:d9:b5:6b:a7:7c:31:f0:
9f:ee:32:7a:d9:a1:aa:db:73:6b:a0:a3:5f:cd:d1:
94:44:1f:19:c2:cb:d4:72:2a:f6:3b:a0:13:09:48:
ad:27:ea:32:7b:c5:20:d7:7c:bf:74:15:67:9c:ec:
e1:16:ef:06:8b:d5:57:8d:6a:2d:47:8d:ec:8c:d1:
79:d2:98:8d:ac:0b:d1:99:7a:13:d6:a4:e2:4e:f2:
08:fc:62:84:2d:61:a7:d6:e1:a8:c9:fa:ea:f5:db:
46:f9:6e:b4:c9:eb:55:3b:83:4b:05:e1:58:99:35:
b7:38:f6:71:f6:96:2c:cd:33:55:98:f6:c5:6d:30:
ef:e5:b9:82:06:4a:80:5e:3f:39:b4:25:7f:c2:3f:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DA:E8:D7:84:36:0A:45:56:A3:DB:71:F6:64:BF:0D:18:CA:A0:6D
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.228.0/23
185.160.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:42:da:16:3d:12:99:c4:02:22:71:8d:0f:10:2b:92:ce:e5:
1a:98:81:7a:ab:de:09:84:9e:9b:a9:8f:4e:82:4e:fd:24:02:
4b:4f:0a:b6:57:cb:3a:e9:ee:5d:07:3a:89:eb:c5:4c:f6:ff:
9d:df:9a:c8:af:39:f9:42:25:f1:19:a1:72:a6:04:bf:d8:97:
85:fd:43:8d:22:b7:c6:d5:58:82:03:7e:6b:f0:c4:c3:bd:f0:
55:80:b8:bd:9e:9f:32:12:3e:f9:07:41:46:56:bc:fd:63:59:
d9:ce:67:a5:3c:71:74:0a:93:5c:57:01:ce:0a:e3:a2:33:a5:
fe:63:da:a9:26:6f:c9:1a:07:93:7a:55:2c:06:d7:42:3f:94:
d9:f7:54:ed:70:b5:37:63:56:dc:99:be:c8:0d:ae:3f:94:51:
42:80:fb:b0:64:de:b8:fc:69:42:bf:ee:85:05:0c:c4:60:b3:
39:a2:65:e6:11:c0:21:68:7e:55:3e:bb:f8:1e:6c:f8:d2:98:
2b:e8:83:c1:af:fd:e6:ac:d5:67:b0:3d:f8:5c:09:b7:29:c6:
79:44:b6:15:ad:b1:3c:b0:6f:8e:72:fe:e3:f4:8e:34:18:52:
78:6b:56:8a:cf:b7:02:4f:09:3c:ed:94:98:96:d7:2a:ed:9c:
cf:8b:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net