Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/nEiHjn_F-XrvWdj08zpSYXVEd3U.roa
File: nEiHjn_F-XrvWdj08zpSYXVEd3U.roa (raw, json)
Hash identifier: s4goZLuZesm9QyLqawzQJwGxTngbjGpeypIp6TlSPIk=
Subject key identifier: 9C:48:87:8E:7F:C5:F9:7A:EF:59:D8:F4:F3:3A:52:61:75:44:77:75
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 01961990CB1F0838645009F005A81A12E175
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/nEiHjn_F-XrvWdj08zpSYXVEd3U.roa
Signing time: Wed 09 Apr 2025 08:00:41 +0000
ROA not before: Wed 09 Apr 2025 08:00:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201453
IP address blocks: 185.74.192.0/24 maxlen: 24
185.112.76.0/24 maxlen: 24
185.112.78.0/24 maxlen: 24
185.163.166.0/24 maxlen: 24
185.163.167.0/24 maxlen: 24
185.178.80.0/22 maxlen: 22
185.178.80.0/24 maxlen: 24
185.178.81.0/24 maxlen: 24
185.178.82.0/24 maxlen: 24
185.178.83.0/24 maxlen: 24
185.183.16.0/24 maxlen: 24
185.183.17.0/24 maxlen: 24
185.183.18.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.219.216.0/22 maxlen: 22
185.221.188.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
185.225.148.0/24 maxlen: 24
2a05:4ac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:90:cb:1f:08:38:64:50:09:f0:05:a8:1a:12:e1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Apr 9 08:00:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c48878e7fc5f97aef59d8f4f33a526175447775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:47:fc:73:0e:d3:e0:4c:72:47:ae:ce:b2:
d9:8f:a4:39:1a:08:c9:ba:e0:3d:b8:b2:83:3e:22:
77:f5:c3:2e:5a:a8:d3:e7:66:5d:11:be:ba:ba:bc:
38:ad:55:5b:45:8e:b3:dd:83:93:d8:00:27:ea:0b:
3d:dc:b6:41:83:98:f5:af:01:53:8a:88:a5:95:f1:
86:45:5c:d1:40:0f:1f:85:27:38:8b:d0:72:db:3b:
e9:3f:4d:25:91:ea:47:38:a4:aa:91:f4:9a:96:25:
d0:0a:64:b0:7e:64:6f:98:b1:52:bd:b6:a2:05:7c:
09:dc:d1:2b:b7:e8:69:4e:69:ec:b6:76:7e:75:09:
b4:1e:e1:41:a6:d2:05:33:bc:e7:89:4c:65:01:4d:
8b:d3:33:ec:a6:8a:cd:1a:95:02:d7:70:00:b1:5b:
e0:66:88:70:fc:a0:25:be:c1:3f:90:e0:57:b4:e8:
46:91:71:ce:08:27:96:f5:af:05:93:29:cf:07:5f:
af:61:fa:8f:31:37:e6:4c:48:e3:dd:64:17:7b:e1:
a6:91:0e:0a:9a:e4:26:d3:5a:79:d2:09:53:50:c3:
5f:42:23:0f:db:c5:39:93:d2:56:02:da:7b:9f:9f:
76:d0:dc:c9:df:8a:49:55:5f:41:66:94:a0:bd:24:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:87:8E:7F:C5:F9:7A:EF:59:D8:F4:F3:3A:52:61:75:44:77:75
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/nEiHjn_F-XrvWdj08zpSYXVEd3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.192.0/24
185.112.76.0/24
185.112.78.0/24
185.163.166.0/23
185.178.80.0/22
185.183.16.0-185.183.18.255
185.194.24.0/24
185.194.26.0/23
185.219.216.0/22
185.221.188.0/23
185.225.148.0/24
IPv6:
2a05:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
af:2c:2e:ee:f1:4c:69:73:b0:1b:29:c7:2c:3e:cd:84:65:40:
16:a3:42:e0:d0:e5:b4:59:ff:ad:ba:e1:3f:87:6a:85:bb:48:
a7:2d:bf:68:95:ac:b3:89:be:15:fe:e0:bb:ab:37:c7:f8:c4:
29:3f:68:fe:f8:71:c9:71:d8:64:4c:5b:b1:cd:ca:2e:a1:d7:
ca:ce:0d:c4:b5:d6:91:a3:63:c5:e5:2a:9a:e5:12:f6:03:70:
3a:63:0f:4d:61:5e:8b:cf:c2:0a:61:f7:7b:48:e7:7b:e0:0c:
37:7a:0a:d8:20:2b:1d:cd:c4:e3:27:ea:3c:25:76:7c:1d:69:
2f:28:6b:e1:c8:89:31:28:0b:eb:02:3c:df:5c:1a:24:14:53:
d1:7d:dd:ce:9b:48:34:20:9e:1d:9d:b8:b9:19:8d:f2:0e:a2:
79:ba:f3:42:0c:6e:27:3a:45:de:36:cf:de:d2:b4:a5:eb:ff:
17:d3:83:f7:e3:96:ce:c4:bd:22:67:a1:4c:45:97:5b:5b:97:
c4:5c:c3:d1:bb:b4:f4:82:e3:45:e0:4e:21:92:4d:fc:80:b2:
ac:cb:41:de:3f:20:e1:c8:16:5a:5d:3d:02:64:89:97:8a:54:
e9:80:ac:9d:83:01:51:e9:bc:eb:ba:ce:9b:86:2f:ae:b3:b4:
df:00:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net