Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/U0noiLh-k1UXMkIIKBzlJl8anFA.roa
File: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (raw, json)
Hash identifier: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=
Subject key identifier: 53:49:E8:88:B8:7E:93:55:17:32:42:08:28:1C:E5:26:5F:1A:9C:50
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 01942143A82931621C9C1AD1CC8DB229A1C7
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/U0noiLh-k1UXMkIIKBzlJl8anFA.roa
Signing time: Wed 01 Jan 2025 09:47:49 +0000
ROA not before: Wed 01 Jan 2025 09:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44531
IP address blocks: 185.150.108.0/24 maxlen: 24
185.150.109.0/24 maxlen: 24
185.150.110.0/24 maxlen: 24
185.150.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a8:29:31:62:1c:9c:1a:d1:cc:8d:b2:29:a1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Jan 1 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5349e888b87e935517324208281ce5265f1a9c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:75:b0:50:16:1c:61:2c:03:ee:96:35:74:
ec:18:90:cf:b7:9e:0b:35:c4:80:8f:f8:27:8a:a8:
4c:08:c5:99:57:56:f6:4c:07:52:5a:a6:4e:8a:ec:
71:96:c7:09:ce:cb:cf:50:0a:a3:4f:36:c7:8b:cc:
56:fd:22:8e:ff:31:00:95:f9:1d:d7:bb:ec:28:1a:
d9:c4:97:bc:e4:3c:6a:bf:5b:c2:d2:3b:9e:43:5e:
63:96:f4:8b:1d:7f:af:4b:ce:70:d2:e6:13:7c:2f:
1c:7a:26:f3:da:e8:9f:9c:25:2f:e3:7c:9f:11:d5:
fe:a2:cb:d6:f2:e8:88:6d:56:55:45:1c:c6:83:86:
38:cf:61:6c:94:b9:67:cb:2e:93:00:d4:6a:56:52:
59:80:93:09:76:0e:bf:5b:56:3b:92:ac:a0:e9:7f:
1a:bd:bf:0c:e9:ab:aa:9d:16:c1:7a:96:2e:4d:f8:
5a:d0:a9:3d:d6:ec:52:0c:7c:4b:06:91:ef:1f:52:
97:76:cd:25:33:73:49:e1:80:79:06:cd:1d:70:fe:
42:c1:85:b6:82:52:8d:57:59:60:3d:ba:5e:d4:1e:
1d:1f:eb:1f:92:ba:6f:13:a8:96:dd:5d:1a:9d:72:
9b:c4:f1:7d:ca:e4:02:64:c6:7b:1b:af:e2:6c:21:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:E8:88:B8:7E:93:55:17:32:42:08:28:1C:E5:26:5F:1A:9C:50
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/U0noiLh-k1UXMkIIKBzlJl8anFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.108.0/22
Signature Algorithm: sha256WithRSAEncryption
63:30:2a:ca:3f:e7:7a:97:5f:48:0d:61:3f:5f:b0:12:e6:b1:
04:de:df:01:4c:a3:3c:13:a4:38:9b:b4:15:70:ba:eb:01:4f:
91:1b:6e:57:83:a9:bc:cf:74:ab:28:be:5f:0a:d3:11:f6:09:
da:d1:a2:a2:63:d1:3f:d7:ad:87:14:49:cf:95:11:fa:34:5b:
7c:4f:49:69:c6:e5:81:a4:89:25:63:cd:63:17:4f:84:d6:df:
10:c1:d2:03:ac:ba:92:ed:86:60:df:98:50:c4:e4:5b:d9:88:
81:1d:5e:68:0a:c2:31:e1:b8:f3:13:7e:c3:d6:02:ca:d3:57:
6d:02:51:49:c3:93:fd:de:7a:b7:35:cc:0b:84:d2:f0:b5:91:
e9:2b:81:fe:1f:96:b9:66:3e:f4:d1:3a:9a:d5:f3:35:1f:97:
2a:8f:11:38:8e:14:d1:c2:96:7c:6a:92:06:d2:09:c0:94:55:
84:5c:c4:75:8b:0f:ce:e0:1c:9b:22:f0:5b:2d:c3:ab:46:13:
38:e7:f3:4c:20:1a:72:f8:37:31:6a:8c:41:d0:95:4e:a1:2a:
c8:aa:c0:ff:56:e8:73:64:a5:31:f3:df:2d:1f:db:24:bf:1e:
c2:69:06:68:1b:bc:f8:c1:21:78:e1:67:32:6d:76:30:99:d6:
49:15:b1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net