Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/6jo1mW4jr6vxQFyb8Lr2xYFki74.roa
File: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (raw, json)
Hash identifier: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=
Subject key identifier: EA:3A:35:99:6E:23:AF:AB:F1:40:5C:9B:F0:BA:F6:C5:81:64:8B:BE
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 01955BCE94735C7DE44957C750ECA39BA276
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/6jo1mW4jr6vxQFyb8Lr2xYFki74.roa
Signing time: Mon 03 Mar 2025 11:40:19 +0000
ROA not before: Mon 03 Mar 2025 11:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60815
IP address blocks: 185.89.88.0/23 maxlen: 23
185.89.88.0/24 maxlen: 24
185.89.89.0/24 maxlen: 24
185.89.90.0/23 maxlen: 23
185.89.90.0/24 maxlen: 24
185.89.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ce:94:73:5c:7d:e4:49:57:c7:50:ec:a3:9b:a2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Mar 3 11:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea3a35996e23afabf1405c9bf0baf6c581648bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:b2:ae:73:8f:d1:c7:65:53:be:5a:21:30:
a8:48:32:48:ac:d6:ec:b4:6d:17:53:2b:f0:6b:91:
32:22:24:bf:bf:5b:ea:08:d8:05:7c:e5:c4:c7:8b:
6f:39:b2:e2:da:b5:c3:24:c1:3d:0c:de:02:5d:28:
81:78:93:4d:50:86:4b:95:13:c9:f6:73:30:fe:4d:
8d:c2:18:cd:b2:25:79:d1:1e:c7:d2:2b:22:df:6e:
c0:86:94:8f:17:d7:7b:da:5e:49:71:88:c5:c3:b3:
e0:de:1f:0a:c1:b5:31:c0:29:f2:15:38:82:12:4c:
62:64:3d:4f:58:e3:ab:fe:e2:c5:b5:20:ba:02:ce:
8f:f5:73:6b:2c:f3:a2:de:26:8a:64:59:a0:5f:11:
b1:6d:71:25:b6:ed:5a:b7:87:14:2c:e9:e7:b5:ad:
0b:d8:be:2c:a1:1b:ae:86:87:48:48:cb:09:4d:a5:
12:b3:37:aa:b9:db:70:3a:fe:50:ac:2c:d2:4a:3d:
70:33:62:34:54:ea:1c:cb:c7:cf:d4:85:61:b0:5b:
5a:1b:cc:3c:c5:39:48:b9:03:a1:72:27:d6:aa:68:
f9:2d:7f:9d:44:77:ad:d9:12:b9:b9:2e:26:03:c2:
1b:2d:a5:8e:0e:0c:fe:d8:1d:39:62:ce:d8:89:e6:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:35:99:6E:23:AF:AB:F1:40:5C:9B:F0:BA:F6:C5:81:64:8B:BE
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/6jo1mW4jr6vxQFyb8Lr2xYFki74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.88.0/22
Signature Algorithm: sha256WithRSAEncryption
84:d6:b0:54:4b:54:be:a1:b0:34:39:49:7e:3a:a0:ca:00:7f:
13:b8:c8:14:d1:69:21:79:29:48:c6:2b:60:40:59:b9:cd:28:
4c:d4:6d:98:66:38:a4:93:9e:c6:45:2e:1b:f8:ab:17:14:52:
36:c3:47:de:b2:5e:a3:ac:48:69:c8:f3:6a:9f:5a:e9:df:2b:
3e:42:e6:85:b9:13:54:69:d5:c8:99:57:ff:a7:af:77:76:fe:
3a:42:6f:77:0c:67:0f:99:41:15:b5:d8:0e:41:f1:38:89:27:
78:78:25:26:38:d3:6a:22:0a:18:df:8a:f5:62:97:00:3c:fc:
32:7c:32:3f:e7:89:23:7d:64:f1:88:0d:c0:83:66:63:f1:4e:
32:74:20:28:a5:0f:e4:4d:04:64:20:01:22:95:30:87:04:b3:
f3:7d:fc:a1:29:0b:ff:7d:c8:ab:6a:29:3a:12:07:6e:cd:ca:
9b:ee:15:37:78:21:d9:5c:a2:4f:91:62:a9:97:43:c3:64:f2:
3f:a8:67:22:16:5f:cc:f0:df:7b:ba:9b:d9:69:a2:0e:e8:8b:
be:d5:18:f6:c8:37:72:e3:d9:7d:4a:68:e5:15:b2:c1:e2:a9:
fd:ab:24:8f:ae:3f:16:f7:c6:5f:3f:77:38:6a:5c:34:8d:a8:
e2:bf:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net