Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa
File: Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa (raw, json)
Hash identifier: B0/EUa4/ThW3bg+w4c9UI/ZQv1E86GHArXlsrfN6HzQ=
Subject key identifier: 5D:AE:2B:03:BB:3C:2F:2F:54:25:98:15:62:2F:89:BF:9B:72:5D:B1
Certificate issuer: /CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Certificate serial: 0195D72EE5D88F0A6BF68624B43F132DD3E4
Authority key identifier: A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa
Signing time: Thu 27 Mar 2025 10:38:49 +0000
ROA not before: Thu 27 Mar 2025 10:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212892
IP address blocks: 185.117.210.0/24 maxlen: 24
185.117.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:2e:e5:d8:8f:0a:6b:f6:86:24:b4:3f:13:2d:d3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d5c7ae7e45c00734efbcc913a1b1ea3e964b40
Validity
Not Before: Mar 27 10:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dae2b03bb3c2f2f54259815622f89bf9b725db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:ad:a2:4b:f2:15:76:74:3e:56:7e:2c:35:
03:1d:94:e3:4c:31:08:92:94:c5:37:4d:84:79:79:
f5:f8:1e:04:c2:89:31:64:cd:ec:37:29:2c:c0:0c:
8d:a2:37:1b:16:81:f9:77:7f:ee:bd:95:2c:13:8d:
70:48:a0:ba:ee:ac:20:ba:88:40:b5:16:db:b0:e4:
61:ac:91:ef:c7:9f:d3:bc:8f:38:b1:6b:09:f4:c6:
7e:2b:ed:2b:ae:a6:8a:01:01:f7:71:2a:23:c7:e0:
10:37:5b:d1:9c:90:d6:42:b7:83:c9:04:44:52:8e:
bc:ff:f4:17:bd:af:a0:bc:05:4c:8a:90:d6:72:20:
01:e1:48:43:31:57:01:66:0f:d8:0a:43:c1:0a:98:
98:d8:a7:3a:21:0f:14:41:56:c0:5d:14:73:f7:42:
e3:ff:3e:7a:11:d5:a4:69:03:e6:23:8f:3a:b7:e6:
15:b3:3b:2b:62:09:2d:9b:91:4d:67:00:54:0c:b1:
02:64:04:f8:6e:07:01:b2:c5:0a:be:ba:ec:39:41:
62:d7:fa:ae:85:62:66:79:63:15:af:02:88:43:b5:
87:32:1c:95:53:5d:17:88:00:b3:b1:2e:d6:55:c4:
ef:49:e7:55:4a:8c:52:d8:d9:5f:15:2c:44:b2:6c:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AE:2B:03:BB:3C:2F:2F:54:25:98:15:62:2F:89:BF:9B:72:5D:B1
X509v3 Authority Key Identifier:
keyid:A2:D5:C7:AE:7E:45:C0:07:34:EF:BC:C9:13:A1:B1:EA:3E:96:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otXHrn5FwAc077zJE6Gx6j6WS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/Xa4rA7s8Ly9UJZgVYi-Jv5tyXbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/50f34c-338d-4fce-8193-ec16735a3382/1/otXHrn5FwAc077zJE6Gx6j6WS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.210.0/23
Signature Algorithm: sha256WithRSAEncryption
36:40:c3:ba:3d:b0:b3:09:ff:4d:8f:ac:df:f9:de:32:7c:74:
6f:93:40:a6:d1:2b:89:16:18:38:78:48:11:46:24:31:19:c6:
49:07:db:a2:b8:b3:34:4e:68:db:40:c3:3b:74:b3:cb:bc:94:
ef:55:3c:94:b4:d1:5e:f2:13:ff:a0:2c:42:67:b3:04:af:7a:
e4:e4:63:2d:99:01:f3:58:30:d8:db:29:06:65:1f:be:49:a4:
27:37:b0:1a:53:51:9c:ce:1d:f4:25:7c:79:42:6c:44:06:5c:
4c:56:8c:0e:a0:55:3d:6e:48:2c:c7:f9:ae:f7:11:20:95:21:
f3:d0:74:bb:8c:d3:9c:03:bb:d8:84:a4:49:b0:8b:ed:30:95:
31:c8:8c:09:c6:7c:d9:06:05:45:dd:f1:1f:58:1c:7e:15:48:
7b:14:4b:be:57:c4:5a:8d:07:a4:83:94:b5:81:2b:e6:0c:61:
0b:f9:7a:87:e3:8d:4a:81:dd:b3:c6:ef:51:29:e6:08:82:a2:
ab:53:b2:bf:60:eb:01:1b:a7:15:78:1e:ec:45:00:59:bb:28:
c9:3c:4a:32:4f:b1:f2:fc:6e:4d:bb:90:16:ad:2a:5a:d5:33:
55:20:2d:2b:76:22:fd:ab:5d:7b:8b:8f:f5:be:e0:df:e5:e5:
64:ce:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net