Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/pyg6FnNO6EjofLai_-gCoWxwdaQ.roa
File: pyg6FnNO6EjofLai_-gCoWxwdaQ.roa (raw, json)
Hash identifier: FRdxAqXNJ+TUwGlnjmKEcS6gwTPYBa9Kgg6FijyDbNQ=
Subject key identifier: A7:28:3A:16:73:4E:E8:48:E8:7C:B6:A2:FF:E8:02:A1:6C:70:75:A4
Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial: 01953BD84049047B00B37DD109E6EF3E3EDC
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/pyg6FnNO6EjofLai_-gCoWxwdaQ.roa
Signing time: Tue 25 Feb 2025 06:43:02 +0000
ROA not before: Tue 25 Feb 2025 06:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200590
IP address blocks: 185.129.93.0/24 maxlen: 24
185.129.94.0/24 maxlen: 24
185.129.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3b:d8:40:49:04:7b:00:b3:7d:d1:09:e6:ef:3e:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Validity
Not Before: Feb 25 06:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7283a16734ee848e87cb6a2ffe802a16c7075a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:18:38:86:0b:ea:6e:17:f9:42:fa:f2:0d:
88:c0:d0:dc:d9:61:c5:3a:b9:6d:7c:a1:5a:f3:a0:
3c:85:2d:d8:1c:90:df:88:27:af:b9:dd:fe:c4:17:
56:bb:91:06:95:19:76:8c:75:e8:ec:82:b0:25:90:
7a:ad:eb:26:20:29:9a:2d:69:72:47:14:c5:ef:c1:
31:a8:0e:f7:50:9a:25:1c:8c:0f:e1:c9:9d:28:86:
69:43:0e:5b:af:ce:57:b2:27:41:a2:69:fc:d7:58:
5b:8d:a0:00:67:d6:0b:41:f8:96:da:69:10:9d:92:
68:62:f2:a7:cd:f6:94:af:10:13:44:d2:b4:08:68:
73:6e:2f:0e:14:60:2f:d7:13:4c:e1:07:f4:b2:a5:
a8:10:33:2a:98:1e:a5:4e:ea:d2:0e:81:a3:6b:51:
97:44:6e:16:7c:19:a3:ad:1b:43:11:20:f6:d3:e4:
0f:bb:13:cc:96:18:8c:47:35:00:ea:73:cb:ff:7f:
3d:98:4f:fa:31:41:03:cc:9b:75:f1:45:86:70:de:
c3:ae:7c:16:9d:3a:da:fe:e6:c8:3b:39:13:6d:58:
78:09:52:fb:29:ae:c4:5d:a7:06:5b:cf:64:20:f8:
c9:f0:f6:ac:1d:02:e6:b0:df:fd:5c:78:1d:dc:e8:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:3A:16:73:4E:E8:48:E8:7C:B6:A2:FF:E8:02:A1:6C:70:75:A4
X509v3 Authority Key Identifier:
keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/pyg6FnNO6EjofLai_-gCoWxwdaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.93.0-185.129.95.255
Signature Algorithm: sha256WithRSAEncryption
8c:a5:aa:6e:bf:d2:9b:77:9a:27:cd:ba:1d:d0:5b:84:59:2e:
f3:1c:bb:71:1b:ee:ad:d9:3c:d9:ec:6b:27:90:66:5a:8c:ef:
99:25:ab:ad:96:41:41:9c:97:f5:43:f1:93:40:42:86:9d:cb:
b9:32:6b:bb:83:d0:00:d6:92:4a:2f:f2:86:87:b5:84:87:be:
02:1b:a5:26:01:0c:18:fe:bd:4c:d7:70:95:87:04:d9:58:ac:
29:e3:d0:a9:80:4d:f0:9a:3f:18:12:bf:b7:89:2c:5c:35:9e:
63:60:9d:32:40:2d:a6:b3:36:70:29:6c:1e:33:f3:11:1d:09:
1c:f8:ae:ca:dd:a0:fd:db:5f:e8:eb:b7:52:f3:6a:34:d0:37:
bb:5e:29:d9:76:fe:b5:6e:1f:f4:3b:4d:c6:34:fa:be:bc:31:
16:eb:cd:96:28:86:6d:9c:34:56:3a:d5:a0:ac:45:4d:c5:34:
8c:8d:f0:66:40:85:e1:09:f4:55:ef:c6:f4:59:18:09:7b:91:
ae:c6:57:25:e1:3f:a6:4c:f7:88:f8:9c:39:25:e2:ad:13:d9:
0e:85:aa:77:cc:b0:96:1a:b7:d2:25:73:76:04:0f:df:d5:bc:
e2:3e:48:3e:85:6b:bd:b3:69:55:1a:e6:26:ca:3e:f1:9b:fc:
32:1a:35:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:00 2025 by rpki-client on console.sobornost.net