Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa
File: ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa (raw, json)
Hash identifier: BaCHQlpNW/709AUvEnmAV++DQu/RFZCpGAAySqc5kGo=
Subject key identifier: 8A:33:3E:33:7A:56:E6:2F:4E:3D:A5:49:F7:3E:E9:75:1D:27:91:FA
Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial: 01942747D533FF3DBD6A754C7973AAD4A04A
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 185.116.62.0/24 maxlen: 24
185.116.62.0/29 maxlen: 29
185.116.62.0/30 maxlen: 30
185.116.62.0/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d5:33:ff:3d:bd:6a:75:4c:79:73:aa:d4:a0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a333e337a56e62f4e3da549f73ee9751d2791fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:1b:78:96:83:cb:94:f7:54:49:62:44:69:
d9:bb:5d:62:58:82:b1:a1:e4:b7:a6:55:aa:21:c4:
c6:2b:98:a6:6b:dc:44:5e:a8:fa:b1:f7:ff:e0:b5:
9b:62:1e:6c:c7:d0:9b:68:5e:80:34:73:0e:21:c4:
97:d7:6f:60:c5:94:89:16:ba:06:aa:6e:6f:e4:2e:
3e:5b:33:b2:f6:40:11:cb:e4:9d:9e:3c:b3:ec:b0:
6a:5a:ee:c3:7f:d7:93:ea:27:fc:43:15:65:ee:6c:
62:6a:1b:4c:ec:97:b2:b7:0e:97:0c:1f:20:2c:9e:
b9:77:0b:0c:b5:f1:af:3d:58:c3:9a:5c:a8:88:22:
1c:13:eb:42:f2:ba:29:cf:ff:8d:1f:d5:ad:51:61:
dc:ab:13:89:b1:ab:63:ae:c9:be:c0:ea:7c:e6:8b:
5b:8f:b3:d6:14:81:9f:f2:18:fe:03:05:42:89:14:
6d:67:9e:bd:bf:26:62:36:ff:6b:e5:85:66:f0:93:
d3:8d:5f:03:aa:26:7c:ee:31:41:a2:78:35:84:61:
5e:e7:20:a9:55:62:ac:53:0d:08:ec:0f:f9:9e:4b:
f0:9b:4c:9e:78:e2:fe:51:20:e1:b3:32:59:37:b5:
35:84:e4:5f:77:39:74:e8:e7:8d:1c:02:3a:01:a0:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:3E:33:7A:56:E6:2F:4E:3D:A5:49:F7:3E:E9:75:1D:27:91:FA
X509v3 Authority Key Identifier:
keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.62.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3e:ad:fd:e4:20:28:5f:19:7e:56:5b:6a:e5:6f:fa:a0:e5:
3b:43:ca:ad:2c:e9:b0:4e:3b:83:7e:63:35:7b:57:3c:bf:91:
b0:b2:c1:3e:78:2c:b7:27:1d:d1:21:6e:e7:c6:51:27:97:d4:
34:7b:57:66:bf:f0:61:e0:7f:e2:f8:59:35:2d:aa:14:6d:a2:
0e:d6:c3:ec:92:0c:08:65:5a:7d:42:fb:dd:52:1d:1b:2a:55:
1e:1a:36:15:cc:f9:e5:e3:f1:9e:21:40:56:b5:fd:60:1c:f8:
33:e3:9c:bd:78:a6:ea:fa:9a:73:4c:84:9b:23:72:6b:b4:43:
ab:7e:5f:81:e2:bc:fd:a8:33:bb:09:83:6f:0e:c9:41:9f:8b:
05:c3:0d:f1:80:28:ce:af:29:81:61:ed:cc:57:e9:67:ec:50:
40:4e:36:49:5c:21:3d:5a:8b:53:b4:c3:98:cc:7f:0d:a3:93:
0e:ee:99:1f:08:9d:f3:28:30:3c:a5:e1:76:62:88:a5:fe:fd:
10:0b:cb:cc:83:00:9e:50:ff:60:e9:56:69:57:05:db:bb:6f:
5d:da:0e:a3:c9:26:6c:02:a5:7a:a9:be:43:b5:e6:74:3f:0a:
ee:ab:10:f1:30:85:ae:0a:b9:04:44:77:c5:a4:c4:8c:b0:64:
cc:a3:85:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net