Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/GQpADLfUfi9O25t6I2nfG_-65Hc.roa
File: GQpADLfUfi9O25t6I2nfG_-65Hc.roa (raw, json)
Hash identifier: ljcTITFjQ/VKOR8sjyVc0+BiLqh99gTvUMfazvzzIRQ=
Subject key identifier: 19:0A:40:0C:B7:D4:7E:2F:4E:DB:9B:7A:23:69:DF:1B:FF:BA:E4:77
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019424B3A9D15262C6D55DD8C1FA2513C7FC
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/GQpADLfUfi9O25t6I2nfG_-65Hc.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207104
IP address blocks: 185.163.156.0/24 maxlen: 24
185.163.157.0/24 maxlen: 24
185.163.158.0/24 maxlen: 24
185.163.159.0/24 maxlen: 24
185.191.32.0/24 maxlen: 24
185.191.33.0/24 maxlen: 24
2a0a:400:2000::/36 maxlen: 36
2a0a:400:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a9:d1:52:62:c6:d5:5d:d8:c1:fa:25:13:c7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=190a400cb7d47e2f4edb9b7a2369df1bffbae477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:d4:b1:41:27:7e:f6:9a:c1:71:fe:e1:39:
8b:64:81:6e:1d:09:ed:92:c2:e6:fa:69:59:26:a2:
5b:c6:79:89:dc:87:ff:9f:80:9d:f9:7f:ce:de:b1:
49:b5:8e:46:c1:18:2c:4c:3a:de:78:22:5e:8e:b9:
63:a2:5c:5b:4a:cd:9b:8c:33:2b:5e:a8:be:5e:ae:
ea:73:3a:86:0a:07:14:2e:0f:b8:00:67:c0:ff:81:
46:6e:a1:d3:63:4b:c2:63:4a:2f:10:c8:b7:b6:d8:
ac:04:b2:15:18:a9:03:71:e2:3d:7d:ce:d2:ef:f5:
5e:4d:80:65:b0:dd:3f:74:1b:b3:b5:9a:3b:bb:1e:
16:b1:81:86:30:81:a4:e3:4e:9a:70:42:20:3e:2e:
6f:8c:87:9b:27:78:69:90:4a:15:47:e7:a5:22:6e:
12:93:de:ef:02:73:db:9f:eb:78:52:f8:21:5e:25:
71:3f:a1:19:6b:eb:c3:55:17:80:74:bb:3c:fc:d8:
3e:2b:13:38:1f:59:0c:75:78:b0:7d:17:0f:1b:e3:
ed:cd:a4:cf:8c:3a:82:ab:81:ef:af:fe:e0:70:15:
ba:7d:e0:82:57:cc:75:46:84:e2:16:49:d8:59:26:
f2:a7:9c:29:64:bb:6e:f0:cc:06:be:32:40:aa:63:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:40:0C:B7:D4:7E:2F:4E:DB:9B:7A:23:69:DF:1B:FF:BA:E4:77
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/GQpADLfUfi9O25t6I2nfG_-65Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.156.0/22
185.191.32.0/23
IPv6:
2a0a:400:2000::/35
Signature Algorithm: sha256WithRSAEncryption
b5:12:01:4d:6c:a3:d7:20:30:4d:48:08:ce:31:27:07:ee:d2:
78:ff:30:23:e1:39:ff:e3:59:3d:da:33:34:f9:c3:3e:a7:b5:
ba:af:4e:2d:2b:32:71:84:f8:9b:93:af:8b:7c:bf:6c:e9:b3:
9f:e8:7d:cb:d5:18:c7:0d:2d:62:89:f5:4b:3b:96:eb:8f:de:
0c:d5:6c:e7:ba:40:cd:52:68:14:88:9d:58:48:63:58:6e:f5:
2f:0e:86:5a:01:68:d4:e3:b4:ed:de:48:a1:2a:fa:52:21:5f:
31:08:f2:70:54:49:25:4c:d3:3e:d2:1c:0b:0a:2f:86:56:39:
ca:43:5c:fe:3f:52:de:5b:e1:df:68:79:dd:3e:ce:b8:7e:7d:
8f:c6:a2:26:85:29:b8:8c:41:8a:15:db:13:71:c5:7d:31:ba:
dc:ed:6e:57:7a:b0:6a:7f:a3:ce:c4:29:74:d5:e6:74:9b:1c:
a5:de:6a:6e:24:f9:76:99:23:2f:d2:c0:27:3c:e0:6d:83:e7:
c7:4d:51:8e:c5:ea:8b:35:ae:1b:cf:30:22:64:7d:16:16:07:
15:21:27:e8:b4:5e:60:24:26:6b:cd:d5:8f:ac:1c:40:aa:8d:
88:93:c3:89:74:79:e7:2d:36:9d:80:bb:73:77:5d:45:f4:36:
5d:2c:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:35 2025 by rpki-client on console.sobornost.net