Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/XukASID4vdHx7vc_ang5UnSgHH8.roa
File: XukASID4vdHx7vc_ang5UnSgHH8.roa (raw, json)
Hash identifier: DxLEWXez2e/d5+PqlJRiByRJ5SsEhSAc9iljhU9E7yk=
Subject key identifier: 5E:E9:00:48:80:F8:BD:D1:F1:EE:F7:3F:6A:78:39:52:74:A0:1C:7F
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 019427B4F2FB8365D1F3846954721D71CF30
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/XukASID4vdHx7vc_ang5UnSgHH8.roa
Signing time: Thu 02 Jan 2025 15:49:17 +0000
ROA not before: Thu 02 Jan 2025 15:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204369
IP address blocks: 185.137.52.0/22 maxlen: 22
185.137.52.0/23 maxlen: 23
185.137.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f2:fb:83:65:d1:f3:84:69:54:72:1d:71:cf:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 2 15:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ee9004880f8bdd1f1eef73f6a78395274a01c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:7c:c3:5f:bb:a3:7b:05:25:94:e2:2c:2c:
8d:2b:97:22:f3:19:cf:92:ea:e2:92:a3:5e:2c:16:
01:33:9f:13:be:b6:a0:79:0c:c1:dd:9a:76:db:46:
98:68:01:cd:f8:03:5f:50:11:69:a4:88:c2:66:2b:
ab:21:97:6e:98:79:cd:59:7d:5c:99:21:46:c6:5a:
3e:72:a0:38:11:02:7e:a6:80:b9:1c:f3:5b:88:91:
f3:40:ae:9d:38:e0:fb:ca:bf:14:c3:de:a3:72:59:
35:4e:d7:90:5b:14:12:07:f7:06:eb:ef:a0:58:67:
ef:b7:bd:81:e0:f4:0a:e5:b1:63:2c:65:06:8c:9e:
4f:ac:ef:13:26:a1:78:e5:3b:60:2d:5b:f3:bf:8a:
6d:97:7f:b5:48:a0:b8:ac:40:37:70:4c:5f:48:c0:
8b:91:02:28:bf:1c:6e:a8:06:7e:1c:4b:68:12:ee:
61:63:f3:d9:9a:b3:ca:22:7a:c1:67:6b:b2:8e:3e:
17:a3:05:a2:7d:ca:6c:2d:1f:b6:34:01:dc:30:a0:
c3:b4:f3:68:4e:60:b5:50:4b:6b:a1:03:46:07:d1:
53:22:6f:2d:ca:9a:cf:b2:71:fd:6a:2b:3e:eb:03:
c4:91:bb:86:50:f7:67:27:8d:5f:f4:45:7b:ef:7e:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E9:00:48:80:F8:BD:D1:F1:EE:F7:3F:6A:78:39:52:74:A0:1C:7F
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/XukASID4vdHx7vc_ang5UnSgHH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.52.0/22
Signature Algorithm: sha256WithRSAEncryption
20:cf:91:08:b0:cc:86:3b:5f:37:7e:db:0d:c2:a0:5f:7a:cb:
7b:e0:e2:a0:2c:b7:fe:11:e6:68:4a:58:e9:a4:e9:d6:dc:7f:
bd:ec:bf:58:b6:56:fd:41:55:fb:6c:d1:7f:37:7e:a5:40:52:
bb:b9:58:79:12:db:e5:8e:b8:4c:05:8b:ad:b1:c7:0b:62:ee:
de:6d:75:0f:3f:44:ba:d4:67:bd:c3:6e:bc:db:7e:76:97:d7:
16:8a:c1:75:b3:c0:68:c9:f0:37:40:a4:69:bc:48:aa:01:ea:
59:3c:5a:e1:7b:bd:dc:e3:13:f3:d1:11:34:d5:f8:0b:d9:b4:
2a:05:81:7d:eb:c2:94:74:07:f2:54:84:cb:95:ce:54:4a:53:
17:d8:ab:5b:3d:e6:35:19:c8:fc:65:00:e0:1c:f7:98:4e:a3:
07:8e:0f:8d:7d:ec:aa:10:14:18:ae:ca:14:69:d3:8a:2d:05:
2d:dd:19:64:37:ae:53:97:46:1f:73:1c:31:18:90:13:77:d8:
4b:54:17:0e:84:20:aa:63:b9:91:94:dc:24:47:ef:7b:6f:af:
23:3f:77:01:fc:b2:e1:dd:31:99:74:4b:11:9b:b3:6e:72:64:
13:ba:82:a9:56:e8:df:08:0d:4d:67:b2:72:fe:54:82:10:f0:
cf:7d:67:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net