Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/m2FaQjqwdirKnIXjWYvZqBXz6X8.roa
File: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (raw, json)
Hash identifier: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=
Subject key identifier: 9B:61:5A:42:3A:B0:76:2A:CA:9C:85:E3:59:8B:D9:A8:15:F3:E9:7F
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 019424B2BDD4F4F8773D599237467BF85E48
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/m2FaQjqwdirKnIXjWYvZqBXz6X8.roa
Signing time: Thu 02 Jan 2025 01:48:01 +0000
ROA not before: Thu 02 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205638
IP address blocks: 185.211.156.0/22 maxlen: 22
185.211.156.0/24 maxlen: 24
185.211.157.0/24 maxlen: 24
185.211.158.0/23 maxlen: 23
185.211.158.0/24 maxlen: 24
185.211.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:bd:d4:f4:f8:77:3d:59:92:37:46:7b:f8:5e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Jan 2 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b615a423ab0762aca9c85e3598bd9a815f3e97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:1d:4c:75:d7:5a:68:3b:64:93:09:fe:6e:
60:19:9b:41:bd:91:1e:dd:a5:f6:17:c6:09:61:76:
16:50:4c:6d:bb:2b:1b:f8:1b:59:5e:e0:b4:63:c0:
15:9d:ba:8b:5b:4c:d9:5c:eb:c3:b5:24:e4:ae:7c:
14:92:39:8d:0e:f1:78:c6:3c:41:3a:fa:a2:e6:e6:
bf:89:1d:89:57:5a:c5:a8:c6:fb:7a:17:03:9b:e7:
34:82:fb:e5:fa:96:65:eb:92:fe:27:e2:aa:78:05:
2a:1b:6d:8b:5d:84:ab:02:65:3f:64:e1:4d:97:1d:
ee:75:bd:86:f7:df:ef:bb:12:ab:1e:fa:87:4e:5d:
a8:0f:97:09:ff:70:7a:39:03:3e:9c:a9:e9:ee:cc:
bf:54:46:55:13:ce:c7:8d:4e:9f:db:95:a3:e9:11:
e2:6a:a4:a5:05:17:90:48:65:b1:94:75:45:e8:1a:
fa:14:6d:66:7f:df:5e:f5:bf:f3:e7:ae:fe:9b:2e:
f0:40:58:26:d5:ae:13:d5:82:9b:45:0d:a7:ed:b7:
84:2a:f9:90:0d:a2:b8:7a:db:04:34:db:84:a2:98:
65:66:d3:27:c7:20:bc:e8:38:73:c2:03:be:c7:33:
fd:e7:83:fe:ea:57:8f:82:3f:cf:85:80:5d:99:8d:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:5A:42:3A:B0:76:2A:CA:9C:85:E3:59:8B:D9:A8:15:F3:E9:7F
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/m2FaQjqwdirKnIXjWYvZqBXz6X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.156.0/22
Signature Algorithm: sha256WithRSAEncryption
63:d2:43:53:ba:8a:1f:8c:93:7b:42:3e:da:fe:66:7a:72:1b:
61:17:d0:1f:d5:3f:e2:fa:55:eb:6a:3c:0d:f9:a3:f0:08:94:
ae:44:ab:6a:1c:66:17:92:1b:ae:57:f5:b0:0e:4d:a1:ff:e1:
18:14:ae:d1:f4:8e:2d:61:d6:a1:f7:bb:94:0a:8e:c4:a7:ef:
64:dd:e7:de:1a:5b:83:9f:c0:db:d4:a6:ab:33:59:71:7d:bd:
c5:60:2f:18:da:13:59:41:c5:de:25:b3:69:1f:f1:44:3a:a0:
36:ce:14:f8:61:5c:40:a9:48:8e:ce:ea:4d:54:89:94:12:f0:
37:c9:1d:65:98:3a:68:df:7f:f7:25:4d:5d:28:c3:41:d9:35:
a1:a6:db:db:8c:b1:54:e1:6d:58:5a:9e:a2:60:53:ce:1e:56:
58:f1:6a:d5:c7:d0:77:9f:e9:e2:fa:65:ff:98:f4:69:76:ff:
22:7f:9e:7e:b0:cf:ad:b9:02:fd:c1:e9:f2:d8:67:32:6f:27:
c7:95:c2:a5:6f:b2:5d:ee:2b:d4:b3:a8:87:4c:dd:f9:3a:45:
1b:4f:90:e0:39:34:f5:3c:df:a8:c1:e9:00:d0:46:72:63:38:
a8:c4:97:c9:e0:8a:43:78:84:d8:2a:83:34:66:c4:22:38:b7:
2e:bc:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net