Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/SevLX3l4TAijWhvCzFiJEtxi9zc.roa
File: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (raw, json)
Hash identifier: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=
Subject key identifier: 49:EB:CB:5F:79:78:4C:08:A3:5A:1B:C2:CC:58:89:12:DC:62:F7:37
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 0194221F58972D76A2AB14D0A32B303DC1C1
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/SevLX3l4TAijWhvCzFiJEtxi9zc.roa
Signing time: Wed 01 Jan 2025 13:47:47 +0000
ROA not before: Wed 01 Jan 2025 13:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50749
IP address blocks: 185.134.96.0/22 maxlen: 22
185.202.56.0/22 maxlen: 22
185.202.56.0/24 maxlen: 24
185.202.57.0/24 maxlen: 24
185.202.58.0/24 maxlen: 24
185.202.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:58:97:2d:76:a2:ab:14:d0:a3:2b:30:3d:c1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Jan 1 13:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49ebcb5f79784c08a35a1bc2cc588912dc62f737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:96:2b:4b:01:19:3c:c5:7d:ed:cd:7c:9f:
91:f0:97:14:3c:32:86:ff:a9:f5:38:1e:ac:ae:53:
a1:0e:54:87:ed:a0:ce:c0:ff:6f:bc:9d:62:3a:75:
04:4c:68:a8:05:61:bc:29:07:f9:b3:01:74:1c:11:
19:b8:24:4b:83:df:06:cc:07:ea:a1:1a:f8:d0:6c:
30:01:18:07:3a:38:37:f7:5e:c1:26:e0:e7:e5:bd:
32:5c:2d:40:41:fc:df:47:54:92:87:09:12:48:04:
5b:3c:3b:d9:a9:1b:0f:cd:d8:99:8a:4a:7f:6a:81:
f7:71:60:5f:91:4c:47:02:46:1b:79:bc:69:b8:f3:
95:62:62:04:e6:e5:31:6f:ad:00:ea:f0:bf:52:12:
45:97:33:e7:4a:04:ad:1d:c8:cd:aa:4e:b0:4f:8b:
94:bf:57:9e:d2:d8:e6:ce:c0:28:fc:16:2f:13:2f:
a6:c8:69:af:3c:d5:21:b9:a6:b9:bf:6a:3d:43:01:
63:af:bb:e3:a7:6c:a2:3d:53:48:4f:48:61:b2:7b:
63:a5:b8:11:28:e7:65:0e:f7:c9:f1:98:21:b1:2d:
63:3d:e7:a2:e5:d2:e6:09:0a:4b:f5:29:a5:91:35:
20:c1:3a:36:df:e8:40:ca:a4:a9:55:81:4f:58:67:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:CB:5F:79:78:4C:08:A3:5A:1B:C2:CC:58:89:12:DC:62:F7:37
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/SevLX3l4TAijWhvCzFiJEtxi9zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.96.0/22
185.202.56.0/22
Signature Algorithm: sha256WithRSAEncryption
94:96:9d:89:62:ad:cb:73:0b:b2:ff:b9:60:77:b2:c2:f0:a8:
53:69:41:c9:70:ec:8f:79:95:0f:1e:3a:bb:9b:71:bf:2b:ba:
87:13:78:a5:58:78:6e:f5:6a:c9:89:2f:b2:a2:2a:42:11:90:
1d:4b:be:d1:9e:f2:6f:b8:19:de:40:27:ea:7b:07:f5:d5:3b:
12:68:6e:86:35:72:8b:da:66:b3:96:37:85:57:13:91:74:3d:
c2:7e:20:14:bd:7f:c2:04:57:be:7f:62:ca:5e:ca:f0:34:65:
88:67:a6:ed:63:13:bb:fc:18:e8:11:b3:4c:af:7c:20:c1:36:
e3:da:8d:9e:e3:30:4a:c1:11:7b:77:60:de:0d:d6:38:d0:1d:
11:9a:3e:aa:8e:6f:0b:28:49:ee:53:34:a8:1d:a4:eb:2e:61:
26:68:d7:94:18:1e:6e:12:ae:77:8e:51:1f:4c:92:97:7e:6d:
70:7e:64:d7:5d:cf:1b:40:68:54:05:19:d6:cf:97:05:a7:5f:
2d:b4:49:47:db:d0:d5:84:10:e4:c6:63:36:bb:75:a7:24:12:
6a:da:b5:6b:00:b5:72:20:a8:89:35:02:e7:c3:3b:db:15:66:
f0:29:c2:06:23:b9:40:a7:36:9c:5f:21:f3:ff:eb:35:a5:2d:
33:77:01:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net