Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/H8j-KlQfL6AGuM7lJr3knJUrtEo.roa
File: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (raw, json)
Hash identifier: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=
Subject key identifier: 1F:C8:FE:2A:54:1F:2F:A0:06:B8:CE:E5:26:BD:E4:9C:95:2B:B4:4A
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 0194258E228E04879E9FC0FC2C7A0C84DD4A
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/H8j-KlQfL6AGuM7lJr3knJUrtEo.roa
Signing time: Thu 02 Jan 2025 05:47:39 +0000
ROA not before: Thu 02 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206999
IP address blocks: 185.28.88.0/24 maxlen: 24
185.28.89.0/24 maxlen: 24
185.28.90.0/24 maxlen: 24
185.28.91.0/24 maxlen: 24
185.73.64.0/24 maxlen: 24
185.73.65.0/24 maxlen: 24
185.73.66.0/24 maxlen: 24
185.73.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:22:8e:04:87:9e:9f:c0:fc:2c:7a:0c:84:dd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Jan 2 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fc8fe2a541f2fa006b8cee526bde49c952bb44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:77:cf:ff:c7:dc:db:66:3c:33:d7:b4:f7:
3f:38:ca:37:ce:b4:a2:e0:5f:da:b0:bc:35:9c:0f:
b3:08:e2:5b:6e:97:db:92:32:fe:56:d4:fe:fc:03:
35:49:21:ec:bd:61:3a:c0:b0:57:c4:d3:a0:28:71:
37:3e:c2:4b:ad:25:43:38:12:6a:dd:d9:c8:40:14:
29:8a:f7:2c:83:9b:94:64:4f:50:b6:07:14:21:c9:
5c:09:e2:72:f0:4e:89:fd:19:20:20:cc:77:52:c7:
53:7d:64:49:5a:41:df:88:59:40:27:6c:ca:86:2e:
24:cc:6a:1c:2e:c6:4c:ea:67:d6:3a:6d:a2:52:9a:
25:74:f4:4a:15:47:79:e8:99:cf:e3:88:d1:b6:f2:
60:26:ad:ad:46:62:a0:b1:4e:5f:88:9e:bc:b6:09:
9b:ae:22:82:31:5d:5b:b3:ac:ed:c0:e2:9b:97:cc:
bd:83:ba:59:a1:22:a7:9d:b0:ac:ab:93:37:47:e5:
da:fe:e9:87:31:c4:8b:45:4e:a4:7d:c3:8f:2d:69:
14:43:0a:41:71:79:c8:57:b3:f7:a7:48:7c:f7:28:
c9:0e:6e:e3:8c:4e:b2:aa:d9:04:df:8e:51:b8:30:
7e:94:56:3a:d3:c2:9a:a7:9c:f5:08:2b:6b:94:b4:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:FE:2A:54:1F:2F:A0:06:B8:CE:E5:26:BD:E4:9C:95:2B:B4:4A
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/H8j-KlQfL6AGuM7lJr3knJUrtEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.88.0/22
185.73.64.0/22
Signature Algorithm: sha256WithRSAEncryption
49:5a:e2:49:f3:49:43:1b:b9:a1:21:33:9e:ae:25:e4:9e:05:
a2:f4:32:24:2f:71:9c:fd:1e:de:dc:4f:46:99:06:24:ed:49:
82:06:29:ab:0b:ed:95:14:a0:5a:0d:e0:bb:4e:68:61:f8:ed:
59:be:95:65:6a:05:20:d5:0a:b7:c6:8d:22:12:d0:db:fc:4e:
cf:dc:3b:10:c7:97:19:3f:af:bf:e6:62:1c:1e:2f:2c:5f:d0:
b9:cd:89:0f:bf:f9:53:ce:be:9f:9d:dc:60:d1:be:8f:32:47:
ff:ad:08:f9:24:86:9b:23:20:12:17:f2:2b:11:54:42:26:fd:
e7:be:e5:9e:55:3b:7f:53:70:7c:b7:36:4e:fb:e5:bb:07:86:
54:3f:a1:37:34:ab:2c:55:c2:ed:89:b8:82:ca:da:70:5d:42:
3f:9c:62:ba:8e:bf:0d:63:b6:0a:42:a7:c6:e5:95:64:fd:d9:
a3:09:ba:ce:8e:3a:e5:11:9e:ce:5a:ef:77:04:7e:e0:76:86:
f0:7d:94:52:ba:84:9b:53:b0:8d:ac:2b:eb:f4:ef:72:0b:e0:
24:05:6e:9b:c7:27:2e:fa:15:c0:58:a8:c7:2c:09:ee:dc:c8:
7c:18:8d:c4:88:e6:83:18:6e:fa:0d:83:ba:76:0f:76:07:c5:
bc:ab:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net