Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa
File: 5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa (raw, json)
Hash identifier: y0iyxyMR7FjHlxAFSdTCsP19Zpu9WbwfJlDLERXkCss=
Subject key identifier: E6:B8:6B:B7:63:DB:CD:DA:37:48:1D:07:55:A4:C3:EB:6F:ED:E1:38
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 01942521A344A7AC792C62100D1E23055DBF
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50257
IP address blocks: 185.10.172.0/22 maxlen: 22
185.10.172.0/23 maxlen: 23
185.10.172.0/24 maxlen: 24
185.10.173.0/24 maxlen: 24
185.10.174.0/23 maxlen: 23
185.10.174.0/24 maxlen: 24
185.10.175.0/24 maxlen: 24
185.99.4.0/23 maxlen: 23
185.99.4.0/24 maxlen: 24
185.99.5.0/24 maxlen: 24
185.99.6.0/24 maxlen: 24
195.191.4.0/23 maxlen: 23
195.191.4.0/24 maxlen: 24
195.191.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a3:44:a7:ac:79:2c:62:10:0d:1e:23:05:5d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6b86bb763dbcdda37481d0755a4c3eb6fede138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:31:2d:0a:9a:5a:47:e5:c2:ed:5d:1e:f6:
71:2e:d0:ea:01:a3:10:9f:b2:f9:cb:53:34:1a:26:
57:97:e1:06:bc:40:e4:70:3a:ba:a7:22:47:43:92:
f4:55:61:7e:3c:1f:22:21:1c:9d:65:a4:a7:7a:18:
41:79:b0:60:ab:f5:93:87:1e:9a:89:ab:2a:ca:62:
d3:d0:14:00:92:fb:3d:f4:a4:6c:35:29:49:33:15:
e3:1d:eb:b7:0f:0d:d4:d9:b9:1a:54:53:3c:bd:34:
a8:d8:8a:f5:f0:fb:65:f4:5f:a0:66:b6:df:67:83:
91:f4:bf:60:ec:28:ac:70:cc:17:75:98:c4:9f:d1:
3c:76:08:07:78:6e:40:36:49:e8:bf:24:83:30:44:
bb:4e:9d:49:d5:a1:1a:cc:52:82:5c:a3:c9:de:a6:
9f:43:8e:42:3a:fe:b2:60:70:d1:97:dd:c9:18:5b:
62:67:2a:f7:ea:6d:66:b2:11:6c:bf:08:1e:49:1f:
14:5d:f5:d3:c7:66:71:3c:0c:e2:3f:30:c8:e7:a8:
98:0e:76:72:db:1f:eb:d3:59:8c:8d:fb:72:59:6f:
dd:ee:77:65:f3:f6:ae:df:ae:f3:4c:04:3c:20:b6:
94:2d:4a:10:d0:2c:77:0f:72:44:0b:2c:48:c0:2b:
27:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B8:6B:B7:63:DB:CD:DA:37:48:1D:07:55:A4:C3:EB:6F:ED:E1:38
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.172.0/22
185.99.4.0-185.99.6.255
195.191.4.0/23
Signature Algorithm: sha256WithRSAEncryption
39:b7:5d:49:81:0b:53:81:4d:06:b9:e2:d3:1c:4b:25:98:86:
4e:a2:02:80:0b:73:a5:e6:41:de:d0:8c:62:30:6f:fd:d1:3b:
47:9c:75:1a:e4:a8:04:c4:0a:f3:c3:6f:59:c6:51:ce:e9:62:
c3:65:5b:2a:e4:7b:0e:19:bc:93:d5:aa:2d:7a:69:65:19:50:
53:ef:00:2b:64:53:73:83:3f:52:02:ed:c1:c8:be:c1:9e:03:
f3:0d:27:86:85:42:12:b3:fc:4a:51:2f:e2:18:d8:32:37:75:
5c:41:95:39:76:03:4a:d5:33:eb:63:16:07:31:06:ec:c9:f4:
63:51:17:2f:5e:42:0f:bb:48:58:10:7d:17:96:36:d5:63:5a:
ac:6b:c6:e3:05:b7:29:11:ca:9b:20:93:00:f0:ed:c3:02:54:
7f:8e:c1:50:0e:76:79:40:ed:cb:32:4f:08:b2:5a:5b:ba:0e:
27:0f:80:6a:88:c6:5b:4a:06:bf:1f:e4:df:3b:47:9f:47:b7:
e4:81:62:f2:5e:8f:ff:c9:63:25:92:4e:a1:66:08:e5:72:c5:
c2:74:ad:0f:65:d7:4b:79:1e:79:c4:d5:f7:f7:7b:3a:93:03:
31:9b:91:d7:65:2d:11:de:49:55:bb:1f:d1:20:7b:e1:20:ca:
1b:0c:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net