Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/M6pYVSPeRii26Fe6-xA2oF6TOhY.roa
File: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (raw, json)
Hash identifier: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=
Subject key identifier: 33:AA:58:55:23:DE:46:28:B6:E8:57:BA:FB:10:36:A0:5E:93:3A:16
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 0194221FE2D0A4043D850B8CE154A286A783
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/M6pYVSPeRii26Fe6-xA2oF6TOhY.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209365
IP address blocks: 85.208.100.0/24 maxlen: 24
85.208.101.0/24 maxlen: 24
85.208.103.0/24 maxlen: 24
185.206.62.0/24 maxlen: 24
185.206.63.0/24 maxlen: 24
2a09:85c0:10::/48 maxlen: 48
2a09:85c0:20::/48 maxlen: 48
2a09:85c0:30::/48 maxlen: 48
2a09:85c0:40::/48 maxlen: 48
2a09:85c0:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:d0:a4:04:3d:85:0b:8c:e1:54:a2:86:a7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33aa585523de4628b6e857bafb1036a05e933a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:84:00:e1:4e:72:64:73:9d:f4:c6:74:fb:
b8:f1:eb:81:3d:d0:29:4b:5f:80:8c:f9:02:a8:d3:
1e:8e:45:2e:3e:69:b4:12:1b:25:99:4e:fb:d8:75:
fa:ed:a2:9d:22:d1:4e:a6:e3:9b:b4:34:3b:44:b1:
55:cb:f9:45:18:be:f9:4e:1a:09:33:bc:9d:b6:e2:
46:cb:ef:7e:6d:5a:88:32:5a:b4:fc:33:83:eb:e8:
44:18:7a:f2:74:f6:64:30:d0:76:49:50:e8:9e:9c:
8a:59:de:63:c8:03:60:6c:2d:04:c7:78:12:f4:1d:
f2:3a:d4:8b:d3:ab:6a:93:57:3c:88:44:05:6f:00:
ef:63:5d:f5:c9:33:02:ba:cb:80:46:37:d7:4c:c0:
ba:fa:a8:64:ab:62:ce:85:b5:64:fd:b5:08:03:1c:
07:c6:b4:ec:c6:3a:66:eb:8c:22:5b:78:c4:2a:7d:
3f:6a:7d:8a:6b:04:93:c7:7d:61:48:e1:59:db:59:
a2:56:ae:ef:f3:d9:82:b0:1d:21:f3:5c:a1:1f:d2:
a0:b5:4c:15:0b:3a:68:cd:7b:65:c7:26:d3:a3:e9:
8a:22:52:5c:7a:74:c3:6d:8e:fa:00:46:da:d0:28:
65:d1:9a:4d:ff:66:38:0f:e6:ce:ba:79:17:b3:db:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:58:55:23:DE:46:28:B6:E8:57:BA:FB:10:36:A0:5E:93:3A:16
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/M6pYVSPeRii26Fe6-xA2oF6TOhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.100.0/23
85.208.103.0/24
185.206.62.0/23
IPv6:
2a09:85c0:10::/48
2a09:85c0:20::/48
2a09:85c0:30::/48
2a09:85c0:40::/48
2a09:85c0:50::/48
Signature Algorithm: sha256WithRSAEncryption
ac:0d:c9:3a:54:ac:58:f3:23:6b:1d:3c:9f:de:7e:52:80:c2:
65:ec:64:3c:09:7a:bb:ce:cc:81:cb:a0:09:89:0a:eb:f0:1c:
ba:4d:ee:1d:be:67:15:b4:e9:3d:19:22:99:00:55:e9:ef:a7:
0f:9b:2a:fd:10:87:ed:33:29:2f:4f:54:98:ae:b4:df:4b:51:
81:36:9a:cc:bf:92:d2:a6:e4:a1:6d:39:5c:9c:1d:63:19:81:
dc:51:5c:3e:33:37:25:1e:eb:01:36:6a:2d:d8:da:93:bc:63:
03:88:86:1b:ac:a5:5c:bc:39:20:1b:8a:71:d1:b5:5d:aa:af:
ff:60:e5:a6:dc:4c:2a:de:fd:97:70:a3:42:ba:ed:64:cc:df:
84:35:d0:b0:57:ee:bf:c6:f9:3c:b6:e2:f4:ed:0c:55:20:a4:
5d:33:23:50:0f:5c:31:80:3f:fa:6b:a9:1c:17:be:00:57:e5:
06:ef:f1:ed:14:b5:9a:86:b1:28:de:f1:bd:51:d8:dc:9d:e4:
24:04:86:3b:d0:8d:56:95:02:64:a2:39:bf:e6:99:17:3e:1a:
fb:dc:a4:88:f1:b1:74:6d:3f:bb:e9:8c:e0:49:8c:18:99:ee:
e8:d5:99:3a:8a:b4:9a:c9:ef:a4:14:f4:0d:d2:9b:8e:25:0f:
69:28:13:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net