Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/M3pMvZBpT3u5kBnyGQHYBxqMzQo.roa
File: M3pMvZBpT3u5kBnyGQHYBxqMzQo.roa (raw, json)
Hash identifier: WSMPtafVuE1q4eZLjtHuEjDkwMsc2zUvlKWrLzCSa/Q=
Subject key identifier: 33:7A:4C:BD:90:69:4F:7B:B9:90:19:F2:19:01:D8:07:1A:8C:CD:0A
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 01944632C16A2E2C0A5D93A1CE3CCDDEADC5
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/M3pMvZBpT3u5kBnyGQHYBxqMzQo.roa
Signing time: Wed 08 Jan 2025 13:55:18 +0000
ROA not before: Wed 08 Jan 2025 13:55:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.25.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
193.105.119.0/24 maxlen: 24
195.85.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:32:c1:6a:2e:2c:0a:5d:93:a1:ce:3c:cd:de:ad:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Jan 8 13:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=337a4cbd90694f7bb99019f21901d8071a8ccd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:2e:97:53:b8:00:2e:03:61:6a:6a:2c:7f:
89:86:79:19:f9:14:f9:9c:09:ec:b0:04:d3:5e:95:
cd:31:27:ca:da:5c:2e:6b:86:47:88:7e:00:d7:2a:
66:0c:0b:2b:cf:a4:a6:13:69:ba:de:77:1e:e2:7e:
0e:5e:36:fe:c4:35:5c:5a:19:40:da:5d:dc:3f:53:
8c:8f:7d:83:34:7f:ee:9b:e2:fe:bc:02:16:12:2a:
34:d4:18:cf:37:65:52:36:89:01:d8:dc:7b:e1:de:
af:38:f1:9a:12:cd:33:64:2c:76:dd:61:03:f6:de:
5e:de:ab:e3:da:1c:b0:4b:ec:6b:0b:ce:10:13:14:
43:d8:8b:ba:73:ee:c4:35:43:c9:60:bb:19:17:53:
5c:f9:48:39:49:17:a5:00:f6:4d:7b:25:89:fe:e7:
a9:f9:c7:a5:c7:ae:e0:bd:5f:59:09:4a:73:52:37:
21:97:ba:59:a0:97:9e:29:e2:2e:bb:49:37:98:cb:
78:ce:6f:66:f9:8f:85:06:eb:e9:1c:68:76:8e:91:
1b:5d:39:29:fa:03:21:b2:da:ab:1f:5f:79:e3:31:
73:1f:2c:0e:f2:0e:f2:88:33:c4:7c:1e:4c:c8:4d:
e8:d2:6c:0b:1b:20:e2:02:0f:8f:3d:53:18:52:2a:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:4C:BD:90:69:4F:7B:B9:90:19:F2:19:01:D8:07:1A:8C:CD:0A
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/M3pMvZBpT3u5kBnyGQHYBxqMzQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
193.105.119.0/24
195.85.224.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:0f:d1:69:8e:8b:03:2d:6e:1d:21:9f:76:c6:c7:f5:7c:38:
15:52:46:91:d3:d7:f8:3e:14:15:bb:c9:ba:c7:1c:1f:3e:5e:
e0:a7:8e:2a:2b:42:63:3d:6a:88:10:89:91:3e:5f:5f:8d:c4:
53:ba:a8:d9:e2:c1:82:ff:c4:d1:db:eb:6c:54:74:1c:18:dd:
cb:b8:7a:a8:7e:fe:38:92:81:c8:be:b5:0f:9f:76:b0:1e:c3:
09:12:cc:b6:06:b9:85:1d:4b:f7:d4:eb:1a:a1:95:c3:be:4d:
fa:00:ee:5d:a9:5a:9a:50:dd:00:04:2f:36:d5:6e:0e:a4:d4:
0d:53:0d:c4:28:52:d3:26:52:98:1d:96:54:18:20:c5:5d:d4:
31:8c:8b:f0:a9:af:01:e8:8c:a0:90:26:39:ea:d2:8a:fe:3d:
38:46:9b:5a:3e:35:4f:33:a4:2a:0b:b7:b3:ab:01:d7:47:64:
c1:eb:28:49:96:8d:25:97:12:f7:81:c4:35:60:4d:a6:d7:b4:
1c:9e:b8:12:5c:1d:10:5d:81:fc:a0:16:67:56:91:46:0c:16:
c6:f0:45:64:92:6d:c8:6c:aa:70:67:c9:50:af:c0:7d:0b:1a:
9b:73:f8:d0:a9:0a:ab:c3:b2:19:bd:55:65:4d:ad:4d:ff:67:
27:7c:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:28 2025 by rpki-client on console.sobornost.net