Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa
File: wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa (raw, json)
Hash identifier: yM84zdMfEYNT7elb1Nq+ZFqPP22ZSrKZWHzVdylcK6U=
Subject key identifier: C0:1C:B7:DC:4F:20:0B:AC:D6:B8:C3:A6:0F:9C:B3:7C:7D:10:C8:84
Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial: 019442CA4246F59F8F3B1B7E7CCD8C80B9B8
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa
Signing time: Tue 07 Jan 2025 22:02:18 +0000
ROA not before: Tue 07 Jan 2025 22:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204253
IP address blocks: 185.109.196.0/22 maxlen: 22
185.109.196.0/24 maxlen: 24
185.109.197.0/24 maxlen: 24
185.109.198.0/24 maxlen: 24
185.109.199.0/24 maxlen: 24
2a06:5240:f0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:42:ca:42:46:f5:9f:8f:3b:1b:7e:7c:cd:8c:80:b9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
Validity
Not Before: Jan 7 22:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c01cb7dc4f200bacd6b8c3a60f9cb37c7d10c884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:21:af:e2:4b:f8:d2:92:27:f2:fa:84:d1:
fe:6e:c3:fe:64:da:6f:68:21:85:b4:60:d8:98:f3:
41:4d:bb:56:23:66:0f:37:cc:18:11:b7:c2:a1:e0:
95:76:fd:1a:57:45:b8:da:b4:5b:6f:88:d8:4d:bc:
17:40:46:51:f1:27:88:4f:b5:1d:66:b6:c8:75:e9:
c9:e2:e6:75:51:b8:d7:ca:c1:03:fa:0d:95:85:b0:
19:b9:8a:60:b5:df:50:37:1c:38:9c:23:4d:ab:1c:
01:2b:9e:57:04:62:ec:ca:36:30:f9:04:3e:44:29:
33:f7:e4:52:9a:3c:cc:61:4b:fe:fe:65:6e:94:8b:
d9:a7:0d:7a:22:f1:13:43:fd:5c:2f:44:13:b6:ab:
c5:3f:e5:45:9e:e8:5b:ca:49:22:eb:35:73:12:34:
b4:db:90:22:3d:e8:9c:1e:c2:03:fc:d2:68:0b:c4:
59:d5:37:21:0d:ae:e8:11:ef:c8:02:7b:9f:9b:46:
4f:46:e2:19:cd:53:1d:aa:b2:b7:e9:1c:18:e9:23:
a4:ac:ff:e9:4d:fc:72:60:7d:b4:b1:1c:9b:aa:47:
a1:41:24:d3:10:4d:87:64:75:00:9d:2f:26:89:7c:
11:38:8e:14:ee:c5:98:7d:15:35:5a:5b:ef:60:32:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1C:B7:DC:4F:20:0B:AC:D6:B8:C3:A6:0F:9C:B3:7C:7D:10:C8:84
X509v3 Authority Key Identifier:
keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.196.0/22
IPv6:
2a06:5240:f0::/44
Signature Algorithm: sha256WithRSAEncryption
11:6a:6b:f5:b5:04:37:de:a5:57:79:e0:59:f4:1d:f2:ca:92:
d6:09:16:4c:fb:10:4f:60:48:fa:b8:cd:87:18:23:24:b4:4f:
72:7b:af:ab:37:7a:72:74:07:8f:3d:c7:40:98:ab:b2:97:11:
a2:74:9d:e7:ab:4b:28:40:75:93:44:3d:09:93:86:d5:44:c2:
c5:29:7a:6e:ab:87:da:60:ec:54:37:9e:42:2c:b4:1c:b1:2a:
45:f4:19:67:43:c3:31:0f:98:16:b2:38:76:29:2c:66:7b:9d:
5e:47:78:cc:8f:37:9b:cf:0a:e3:96:d8:2d:23:6a:a9:52:6d:
0c:a4:d6:30:c8:8d:dc:3f:2a:dd:46:ca:89:a8:8d:61:12:86:
b5:c1:a0:17:9a:31:22:74:73:a1:ec:ab:db:05:0f:19:4d:af:
d5:9e:9d:9d:ea:d5:d5:fb:d0:19:b6:ef:92:07:92:bd:ff:01:
a6:eb:ca:10:9e:5f:9a:b4:c3:91:7b:cb:21:aa:82:3c:1b:18:
ff:41:87:11:e5:88:9c:81:10:71:96:54:a7:27:88:42:93:a1:
2e:c4:3a:f4:de:29:a3:82:0d:97:1f:9c:af:bc:3a:84:69:e7:
1b:df:ec:c9:5e:07:af:d7:9b:58:fd:92:de:db:e9:9e:b2:d8:
75:af:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net