Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/A4__EnOrPLl7kNPioZRAoADCUG8.roa
File: A4__EnOrPLl7kNPioZRAoADCUG8.roa (raw, json)
Hash identifier: j1tmGfrA6af9fNUjjjOcwfDjish7mieiLkXoaO5wFfo=
Subject key identifier: 03:8F:FF:12:73:AB:3C:B9:7B:90:D3:E2:A1:94:40:A0:00:C2:50:6F
Certificate issuer: /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial: 0194266C296ADD0FC612B7D537FAB034E9AE
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/A4__EnOrPLl7kNPioZRAoADCUG8.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51001
IP address blocks: 185.158.236.0/24 maxlen: 24
185.158.237.0/24 maxlen: 24
185.158.238.0/24 maxlen: 24
185.158.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:29:6a:dd:0f:c6:12:b7:d5:37:fa:b0:34:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038fff1273ab3cb97b90d3e2a19440a000c2506f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:c4:56:25:9d:a6:30:d2:33:d2:5d:37:98:
13:6f:9d:69:30:0e:08:a8:bc:8e:3b:50:b5:4a:14:
63:07:d9:a9:9e:6b:a1:f0:9f:d7:75:1b:22:3e:b4:
2d:f5:c4:be:64:a0:7c:b9:6f:39:64:60:cf:73:5c:
bb:99:a2:2a:3c:ac:25:b0:fe:d6:b1:1a:ac:b4:9b:
51:df:fd:22:49:2d:d4:e4:c7:f6:af:31:96:3d:bb:
e1:7f:aa:f2:db:ce:36:26:25:1c:96:db:72:f8:07:
e2:48:34:a3:0e:8e:2e:21:dd:f8:8b:ef:f6:64:5d:
57:e1:8a:70:bf:10:bf:97:df:64:c7:5a:ab:bc:37:
31:2d:5c:d9:dc:35:b0:23:73:60:55:7a:93:64:9f:
86:a5:de:54:15:de:05:da:29:0b:6f:c1:83:d3:2d:
a0:68:b5:67:e5:3d:65:70:b4:ac:a5:88:32:a5:16:
33:5a:a6:d6:fc:9f:b6:28:33:66:a7:1f:c0:c8:5d:
8f:b5:79:1b:fc:97:77:8c:4a:85:c6:7c:7b:5b:2d:
94:3e:37:3c:de:24:2b:2f:16:2d:f0:88:b0:ce:df:
77:16:ba:b2:e9:98:c8:ad:ac:ed:ce:ad:0b:1b:49:
53:b1:e4:ad:ee:87:ee:35:0c:57:b8:f7:89:86:8c:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:FF:12:73:AB:3C:B9:7B:90:D3:E2:A1:94:40:A0:00:C2:50:6F
X509v3 Authority Key Identifier:
keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/A4__EnOrPLl7kNPioZRAoADCUG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.236.0/22
Signature Algorithm: sha256WithRSAEncryption
72:39:88:b5:f9:eb:38:79:f7:d2:47:5f:5c:62:71:c8:0f:98:
c8:fa:bd:53:70:f5:9f:77:de:43:b8:16:4e:fb:9b:af:87:fc:
5a:6b:56:2a:28:c2:80:2a:00:10:3c:73:c9:e1:c4:53:20:85:
57:a9:f2:0b:88:e9:04:bc:3a:8c:41:cc:40:f9:77:2a:bb:9b:
fe:8e:a8:1e:6f:da:ee:9a:fa:28:d5:0d:f6:bc:65:ba:b9:75:
87:e0:a7:44:de:3a:5c:c1:6a:3a:af:85:46:38:7a:0d:9c:ce:
28:dd:43:ad:02:7e:39:41:aa:ca:c4:39:75:76:fd:a9:69:53:
da:b6:43:1a:cc:92:14:21:08:52:ae:7c:f0:4d:16:6d:4e:4d:
d9:99:a2:36:92:9c:c8:9c:f2:ae:ab:59:a9:7c:4d:29:a3:9d:
b3:e4:76:1a:10:11:cc:4d:f7:1f:ad:2a:34:1a:1b:00:8a:8e:
2f:57:2d:c7:b0:01:79:1e:0a:d2:69:35:84:b2:da:96:81:da:
9c:0f:dd:66:0f:8e:ac:d6:4b:85:b8:59:29:21:57:73:88:2e:
b7:41:86:4e:61:7c:4d:c4:db:8f:4b:1f:3f:d9:41:e7:f6:9e:
6f:72:6e:81:3d:d0:d3:6d:10:8c:01:50:aa:28:12:30:dd:ab:
b3:ac:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net