Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa
File: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (raw, json)
Hash identifier: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=
Subject key identifier: B7:5F:14:A0:77:80:11:C6:7A:62:EE:0D:28:6D:A7:02:17:A2:64:4B
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 0194266B671D4444B1EAC775E3968F9EAEF1
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa
Signing time: Thu 02 Jan 2025 09:49:20 +0000
ROA not before: Thu 02 Jan 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44472
IP address blocks: 86.111.52.0/23 maxlen: 24
185.43.147.0/24 maxlen: 24
2a12:c440::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:67:1d:44:44:b1:ea:c7:75:e3:96:8f:9e:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b75f14a0778011c67a62ee0d286da70217a2644b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:af:fc:00:29:a8:c2:32:fb:e3:f3:9b:d4:
ac:e9:74:33:d8:e9:d8:b7:24:79:94:27:85:1f:2e:
3b:b3:f2:08:d3:10:e5:59:49:ea:1d:aa:18:96:89:
6c:36:9a:78:74:65:20:8e:68:b2:af:e1:64:06:7f:
19:0d:c8:1c:84:16:df:03:77:86:d5:c0:89:e4:97:
1b:98:bc:27:af:8b:82:61:60:88:ae:da:f4:9b:5e:
e1:f2:58:cb:9c:9c:fa:ab:b4:a6:b6:15:b0:4f:07:
31:08:76:2b:9f:a3:c0:f8:fd:c2:3f:02:b3:9d:2f:
a1:db:85:1a:d2:61:e9:fc:ce:73:d4:b6:86:0f:bd:
2a:9a:82:aa:7d:d0:57:c5:7f:79:42:c3:59:df:46:
2e:12:ee:62:1f:50:48:b1:c4:b9:a6:f0:25:22:c5:
37:0f:03:ac:5c:5d:8c:3d:9b:2a:85:b3:11:71:c7:
d9:4f:d9:c8:8c:92:2c:30:dd:65:53:a9:ad:d0:cc:
27:21:45:c9:11:c6:a0:83:d3:d7:8a:4c:1b:8c:09:
e5:1e:52:2e:f4:ad:4f:3a:fd:f8:ad:bb:8d:c3:af:
90:15:13:78:32:7d:88:07:a3:e5:e0:25:4c:d5:41:
2c:5c:cb:be:6c:f6:39:8a:e0:bf:b3:d3:ee:d7:13:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:14:A0:77:80:11:C6:7A:62:EE:0D:28:6D:A7:02:17:A2:64:4B
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.52.0/23
185.43.147.0/24
IPv6:
2a12:c440::/29
Signature Algorithm: sha256WithRSAEncryption
25:f7:95:6d:e7:2a:10:e0:d9:e9:d4:f8:d7:b3:b9:8f:3b:88:
0b:d2:b6:2f:51:d0:55:ee:8d:17:26:bf:5b:9a:b8:a6:6f:fc:
78:13:ae:4c:fe:5a:3a:00:32:4d:eb:fc:16:05:22:cd:b7:0c:
cf:82:a2:e8:6a:05:dd:97:be:28:34:1e:52:99:0d:b9:ce:9c:
46:ff:1e:bb:2c:46:39:a5:92:8c:c7:01:4d:a7:16:a0:e0:ef:
6c:92:79:d9:cf:74:61:e5:f9:8d:a5:b1:28:9d:8c:14:6a:9a:
5a:7b:22:83:79:20:b1:82:0e:ba:9b:0a:1b:c0:7f:12:cf:37:
fe:7b:d9:8c:7c:e8:07:77:9b:03:8a:35:aa:55:40:9c:21:b9:
a5:02:38:1d:04:4a:b8:df:7b:08:f2:6c:dc:16:cf:33:32:05:
ed:f3:73:59:ad:14:87:38:3b:87:e5:03:81:c2:cb:a9:1b:ed:
81:f9:47:83:36:a6:2a:ee:51:e0:c9:c5:a2:0f:9d:87:4e:70:
22:b6:d5:a5:62:2d:87:33:4e:70:f0:9c:01:29:17:82:f3:b2:
fa:0d:78:88:22:a3:34:95:85:19:ea:f6:76:93:92:18:c2:b8:
3a:80:8e:3e:94:5f:71:cd:01:10:21:af:ea:d8:30:a2:2e:b4:
72:3f:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net