Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CvXAOaZy3GARc1EfRvMj5KGqFwU.roa
File: CvXAOaZy3GARc1EfRvMj5KGqFwU.roa (raw, json)
Hash identifier: 8bQHE6sKKYHp62PMXqjX8eOZHDjy0+HH0+Vj8JBdjlk=
Subject key identifier: 0A:F5:C0:39:A6:72:DC:60:11:73:51:1F:46:F3:23:E4:A1:AA:17:05
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01962E86FA2403E3F05860F2925ABEAA67E2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CvXAOaZy3GARc1EfRvMj5KGqFwU.roa
Signing time: Sun 13 Apr 2025 09:41:59 +0000
ROA not before: Sun 13 Apr 2025 09:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 185.126.82.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.222.28.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.3.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:86:fa:24:03:e3:f0:58:60:f2:92:5a:be:aa:67:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 13 09:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af5c039a672dc601173511f46f323e4a1aa1705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:6b:ac:be:fe:08:eb:56:07:96:51:28:f6:
8f:e7:0f:ff:e5:2b:49:49:9e:cc:47:fd:ee:55:37:
07:40:f1:9a:1c:3f:c5:12:47:e2:f1:67:38:4e:19:
51:0d:44:f0:69:09:26:17:25:10:45:a0:95:81:05:
e0:be:e2:db:8b:62:27:13:d6:6b:ee:a0:a3:cb:67:
66:f5:f0:79:cb:9b:6b:c5:31:89:d4:85:22:94:b1:
f8:bd:8b:a9:c0:81:b5:7e:50:ed:ed:48:b3:af:c6:
6d:ba:ec:27:2a:d7:67:fa:d4:1c:e1:16:6d:68:63:
f8:57:ef:6e:4f:ab:af:ed:0e:aa:6a:7c:1c:dd:19:
40:b4:61:29:f8:de:51:64:ef:e4:a9:8f:6f:db:f4:
af:0d:cd:58:fa:2e:a2:37:9f:c7:78:1c:92:b6:45:
3c:7d:a7:01:0b:92:4d:37:75:a4:3f:8e:cd:b2:63:
1b:22:4c:ae:b7:8a:09:f4:d8:fa:54:e4:7f:39:a4:
96:89:35:02:0c:58:1a:7c:de:9e:18:e4:24:9a:87:
27:6b:2a:ba:04:d4:9d:d5:13:20:eb:6a:0a:3e:56:
c7:9d:75:81:8a:50:29:4c:b7:d4:b6:21:a2:69:89:
3c:e5:53:15:f2:0d:f4:10:89:f1:50:f0:36:9c:ad:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:C0:39:A6:72:DC:60:11:73:51:1F:46:F3:23:E4:A1:AA:17:05
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CvXAOaZy3GARc1EfRvMj5KGqFwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.82.0/24
185.209.38.0/24
185.209.73.0/24
185.209.75.0/24
185.210.233.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/24
185.220.250.0/23
185.222.28.0/24
185.223.78.0/24
185.223.155.0/24
185.225.0.0/23
185.225.3.0/24
185.227.146.0/23
185.228.75.0/24
185.232.206.0/24
193.8.112.0-193.8.114.255
193.58.146.0/23
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ac:37:ed:db:49:d1:d0:98:2b:b1:4b:db:4d:f4:ba:fb:d3:
b5:ef:38:06:1f:d7:aa:da:ba:03:6a:31:f4:42:61:4b:8c:35:
f4:8c:1b:c7:25:d4:93:04:cf:98:32:81:8b:c5:fa:55:8f:75:
ad:6a:89:46:07:a5:d7:c7:15:1c:4f:0a:d2:59:76:3f:0a:37:
b4:d8:58:36:7b:78:f7:a0:aa:08:9e:e5:7b:69:0b:0e:af:94:
2c:3e:08:45:98:19:8f:73:25:98:74:f2:33:d2:81:27:d0:8b:
82:b3:49:69:6e:fa:fa:38:db:fd:e6:35:ee:8d:a6:13:b5:2e:
a5:14:db:21:9f:46:ac:b2:8b:95:bc:13:93:6e:1d:0d:da:f4:
a1:1e:e6:73:11:97:5d:75:17:be:2d:5c:79:f7:8c:cc:e3:ba:
09:e9:de:90:63:1e:fc:75:75:3d:cd:c9:c7:59:fa:e1:81:43:
58:85:6a:3d:39:3c:dd:86:08:44:9b:37:71:4a:82:2e:47:19:
83:ef:82:cd:ed:25:2d:c4:37:8f:c0:c3:35:f8:af:97:fd:7f:
be:d0:bf:2f:08:b9:d8:a5:16:e8:1b:fc:01:8f:fa:f8:68:68:
f9:e3:74:7e:d1:c5:2f:8b:e5:d6:c8:e8:a7:24:e1:f0:2d:e4:
77:6a:a9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net