Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/z45Pl2HIpMthc8mWmMny5O7sL4E.roa
File: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (raw, json)
Hash identifier: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=
Subject key identifier: CF:8E:4F:97:61:C8:A4:CB:61:73:C9:96:98:C9:F2:E4:EE:EC:2F:81
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 01942747AFA40238F86E924547AA3C101686
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/z45Pl2HIpMthc8mWmMny5O7sL4E.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48885
IP address blocks: 185.167.4.0/24 maxlen: 24
185.167.5.0/24 maxlen: 24
185.167.6.0/24 maxlen: 24
185.167.7.0/24 maxlen: 24
185.196.136.0/24 maxlen: 24
185.196.137.0/24 maxlen: 24
2a0a:6d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:af:a4:02:38:f8:6e:92:45:47:aa:3c:10:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8e4f9761c8a4cb6173c99698c9f2e4eeec2f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:97:e9:cb:f2:e9:a0:03:0e:7c:17:ef:ad:
ec:fa:f7:c5:2a:61:3e:d6:8f:0c:89:ab:7e:d5:cb:
b0:d6:42:f3:6f:93:3c:8b:8d:83:fc:7a:0a:ca:b8:
2b:6c:2a:ab:90:16:44:53:9c:d4:30:bc:ca:70:bd:
c7:8c:22:3d:26:f4:84:8e:f7:28:17:34:66:90:03:
53:42:d0:cf:14:f6:6c:cc:7e:46:01:f2:cc:61:1a:
b9:e4:85:83:e1:6a:e7:e6:c8:4b:03:d7:71:31:9d:
a1:7c:70:29:9e:06:3d:94:f3:f2:f7:44:ad:7f:15:
81:ca:e4:2a:2e:fa:48:b4:74:4c:c9:b4:37:b4:e0:
c8:05:39:26:f8:c4:2c:0e:b4:11:21:26:de:d7:bb:
a3:d3:35:98:0b:cf:d8:29:2f:6c:19:5f:f7:ab:5b:
37:9c:39:af:8e:21:4b:e7:8f:63:a6:3a:ec:0f:2f:
da:54:01:fd:b7:87:9c:42:30:68:fe:db:0f:9b:14:
4e:6c:12:97:a3:11:d5:83:0a:ba:47:17:51:a6:d9:
0c:8a:bd:79:99:74:96:53:fe:60:e6:78:b5:f1:34:
e0:23:bd:f3:69:d9:e7:f8:5f:d2:fc:8b:73:f8:a7:
09:8f:f1:5f:06:64:90:98:ba:df:0b:26:0f:d6:55:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:4F:97:61:C8:A4:CB:61:73:C9:96:98:C9:F2:E4:EE:EC:2F:81
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/z45Pl2HIpMthc8mWmMny5O7sL4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.4.0/22
185.196.136.0/23
IPv6:
2a0a:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
40:c4:84:13:76:cf:ef:46:71:30:2d:0b:be:5b:ee:70:e4:ed:
86:8e:a1:46:25:fd:b5:d5:4f:7e:fa:ab:9e:33:00:63:39:55:
f2:3a:20:b8:e1:b1:bb:5d:e9:10:10:17:c5:13:75:a1:60:20:
17:9b:42:32:21:bc:a5:8c:b7:9a:93:ff:62:5b:e7:61:f0:8c:
21:be:ab:7a:95:59:a0:d9:c7:02:65:84:6d:a0:3b:28:83:ba:
8b:e9:7e:99:27:4a:e5:9c:58:ad:e9:0e:88:cd:3b:f4:ce:08:
7e:a6:03:ef:d7:81:6e:e4:59:c6:5c:60:e4:2b:7d:9b:c0:09:
a6:0d:7d:42:c3:6f:38:3b:e1:ad:3e:ca:8b:6a:41:bd:0e:6f:
16:27:6e:85:90:ba:a6:b6:3d:e3:74:e1:f1:eb:a3:d8:ce:8e:
43:f0:58:5e:67:46:2e:e6:9b:4e:90:30:37:d2:32:d3:85:69:
cd:48:cd:70:9a:8a:79:31:9a:95:53:cd:7a:0d:8a:66:50:61:
11:1e:2e:7b:d8:1b:6b:9b:05:b3:05:7b:f3:27:3a:40:79:c2:
c7:cc:43:c7:83:25:18:00:f1:92:45:1c:f8:8b:e4:ae:7b:f1:
4c:db:b0:a5:ab:86:3b:34:df:1a:80:48:ea:65:c6:43:20:e4:
d4:bb:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:41 2025 by rpki-client on console.sobornost.net