Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa
File: K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa (raw, json)
Hash identifier: +E0IiIySxfBfIZxXi+3jzbpb+rQYgtEbnhfMPIDheqM=
Subject key identifier: 2B:BF:EB:16:4F:9E:C7:78:45:C2:1D:CC:27:16:90:C7:23:7E:5E:99
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 01952362F5401B94A90820633041DD9F9626
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa
Signing time: Thu 20 Feb 2025 12:44:02 +0000
ROA not before: Thu 20 Feb 2025 12:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207104
IP address blocks: 185.163.156.0/24 maxlen: 24
185.163.157.0/24 maxlen: 24
185.163.158.0/24 maxlen: 24
185.163.159.0/24 maxlen: 24
185.191.32.0/24 maxlen: 24
185.191.33.0/24 maxlen: 24
185.191.34.0/24 maxlen: 24
2a0a:400:2000::/36 maxlen: 36
2a0a:400:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:62:f5:40:1b:94:a9:08:20:63:30:41:dd:9f:96:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Feb 20 12:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bbfeb164f9ec77845c21dcc271690c7237e5e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:72:1a:0c:de:e4:63:f7:39:bc:47:7c:33:
86:a1:0f:87:f7:76:30:e0:cd:bd:a1:3e:98:74:3b:
a0:dd:92:c2:28:d6:93:9a:55:bb:b4:ff:c1:30:81:
dc:0c:92:02:e5:1f:dc:b7:bc:1e:ac:62:22:6e:ab:
b8:59:0b:a7:89:4d:59:30:c6:c0:15:3e:95:7d:44:
3f:05:5d:78:a7:31:05:48:cc:ee:ce:65:a6:5e:63:
8f:68:76:b5:2a:7b:1a:1c:7a:7b:9d:87:0f:76:a5:
fc:0b:c7:78:10:a4:5e:89:04:65:72:8f:7b:ed:83:
32:6c:95:1e:74:64:72:ed:3b:de:50:a8:1d:30:cc:
91:58:c5:23:93:d4:a4:a2:fa:cf:7b:c3:33:f1:b0:
b9:34:ef:a7:fa:a5:c6:1c:a9:6c:da:c8:ad:fc:ee:
da:8c:50:a5:9f:15:19:89:00:ff:b5:04:0b:37:c5:
1d:46:26:93:19:1b:0c:5a:19:ba:7e:ca:6c:c7:8b:
30:88:06:ca:32:6c:87:04:f0:eb:06:a2:db:34:42:
7e:4d:dd:52:6c:f1:5b:84:ab:57:65:21:aa:f1:7f:
25:c4:f2:c1:77:68:08:67:e2:ee:5e:3e:16:b3:12:
8b:f3:7d:49:f8:a0:72:4d:64:b4:27:c8:17:c8:95:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:EB:16:4F:9E:C7:78:45:C2:1D:CC:27:16:90:C7:23:7E:5E:99
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.156.0/22
185.191.32.0-185.191.34.255
IPv6:
2a0a:400:2000::/35
Signature Algorithm: sha256WithRSAEncryption
9b:f4:e1:7b:78:07:0b:5a:27:9e:93:87:be:04:f6:7e:b7:84:
c8:b2:a2:e9:63:cb:7b:7b:25:dc:dd:bb:fd:48:2e:1f:2c:ff:
8d:96:07:80:4e:64:92:19:5b:fd:48:01:fd:36:ff:c3:d8:15:
e2:c2:de:bc:31:40:a3:c6:ab:1e:aa:4d:a2:b4:4d:03:a8:9a:
de:50:91:f8:b0:e0:4a:5e:05:a0:32:cd:c1:bd:ab:87:e5:fd:
96:1d:a8:fe:f8:a9:c3:ef:3a:f1:9a:0c:57:4f:01:4b:97:c4:
c9:7a:f5:05:8a:9b:b3:eb:b5:ef:e5:75:69:ca:2c:3f:bd:6c:
1b:c5:fb:43:8b:80:c9:29:e3:97:b1:5b:34:97:8c:d2:51:b2:
be:e5:12:e7:c1:dc:69:30:ac:fb:8b:f1:e8:02:97:eb:21:b7:
b3:7f:b1:9f:f3:16:ea:ad:c9:33:ab:10:67:16:9a:2d:42:3f:
7a:5c:1b:e3:fc:86:c4:7e:80:4a:ed:91:5f:86:e0:ac:8e:a8:
69:5d:e4:c4:dc:ea:8d:dd:42:67:c4:79:28:b4:01:e9:44:b6:
8e:67:4c:0c:1d:60:b6:7c:72:64:5a:6b:1f:c8:dc:d8:0b:bd:
c3:71:b5:18:39:63:05:65:49:3f:dc:9e:50:6f:d0:9d:15:de:
8e:5a:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net