Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/ReM4HS5dXIm1BINFYm_Edq9MxBI.roa
File: ReM4HS5dXIm1BINFYm_Edq9MxBI.roa (raw, json)
Hash identifier: ChJsWIxFI+FaET5RTWvveeFgIxBAP+n5s4jzz5FmLi4=
Subject key identifier: 45:E3:38:1D:2E:5D:5C:89:B5:04:83:45:62:6F:C4:76:AF:4C:C4:12
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 019424B3FB863A8A8E87800BC395C77DA8DD
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/ReM4HS5dXIm1BINFYm_Edq9MxBI.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49265
IP address blocks: 185.91.188.0/22 maxlen: 22
185.91.188.0/23 maxlen: 23
185.91.188.0/24 maxlen: 24
185.91.189.0/24 maxlen: 24
185.91.190.0/23 maxlen: 23
185.91.190.0/24 maxlen: 24
185.91.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fb:86:3a:8a:8e:87:80:0b:c3:95:c7:7d:a8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e3381d2e5d5c89b5048345626fc476af4cc412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:00:74:e9:00:51:2c:93:16:f1:8f:4d:37:
8f:23:0c:ed:21:b8:db:be:ca:36:e0:82:69:65:33:
d4:fd:2a:b5:c5:27:c4:81:e3:82:8c:de:3b:f0:87:
15:47:fb:50:ba:47:0c:2f:40:6e:b7:69:a2:80:4d:
2f:2f:15:f5:a1:91:a3:2f:cd:eb:b5:a4:1e:7f:a6:
5d:84:c3:f2:ed:62:dc:e0:be:3b:92:3e:4c:b6:5e:
c8:67:10:20:28:14:60:2b:4c:68:93:bb:b5:eb:01:
f3:d3:c0:38:40:4c:3a:fc:44:59:4f:ae:42:91:e0:
e1:14:56:4b:09:ac:f1:fe:5a:42:d9:18:32:7b:a1:
1b:f4:86:d3:ad:78:c4:ea:14:29:9f:19:b4:a9:01:
4f:31:f2:fd:49:d7:03:19:9e:1f:7c:7a:9d:81:53:
1a:ec:4e:10:60:dd:ec:76:16:39:71:79:ea:aa:57:
bb:77:d0:a0:e7:0e:a1:ff:5d:0d:67:52:e6:cb:1f:
f8:0f:0c:16:9f:7b:e8:58:16:20:7a:0f:bd:9b:67:
2a:7f:d1:9d:16:03:e1:11:4a:84:87:41:26:8d:36:
80:0a:31:2a:1d:a2:76:27:c9:ec:58:e6:01:0d:19:
31:6e:4c:ed:db:4d:97:01:8e:8f:07:63:ff:af:6d:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:38:1D:2E:5D:5C:89:B5:04:83:45:62:6F:C4:76:AF:4C:C4:12
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/ReM4HS5dXIm1BINFYm_Edq9MxBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.188.0/22
Signature Algorithm: sha256WithRSAEncryption
02:ef:9b:41:92:37:8d:96:e5:19:17:0e:2c:dc:e7:6a:fa:9e:
7b:38:34:83:59:4b:1e:d0:c6:72:01:dc:7a:f9:94:44:49:73:
d2:d1:45:7f:00:0c:13:f8:86:08:87:8c:9b:83:f9:5b:75:e4:
c7:72:f1:f7:a5:52:4a:4f:cb:4b:e9:ae:c7:f1:33:09:93:19:
9b:ac:67:00:db:ed:fc:2d:54:82:a7:d3:e3:9a:0b:d6:d9:d0:
1a:90:10:ae:ef:68:f2:29:bb:6f:ce:53:a8:b7:49:3d:12:84:
ee:42:3a:88:b0:36:8b:11:d8:40:53:d9:e6:62:69:9d:dc:53:
eb:c4:62:69:8f:ae:0a:43:65:1a:b1:7d:9f:64:74:6b:73:54:
91:0e:e6:d8:3f:14:78:c1:2b:7f:b0:49:9b:a4:3e:be:38:4c:
5b:93:03:4c:6a:b5:75:3e:5e:59:3e:e7:ac:f8:09:41:f3:bc:
96:be:76:85:9e:3f:18:7f:4a:ea:94:81:d3:1e:64:62:33:7b:
8e:8e:96:b8:6a:8f:01:e5:5e:d5:6c:3d:35:b9:ac:fe:d6:ab:
d2:af:bd:03:4e:ee:f2:b1:3c:9c:b3:e9:b7:e9:24:ba:5d:50:
8a:9c:15:20:8b:bf:99:00:38:ec:65:e0:95:4f:5f:4c:b4:a5:
73:85:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net