Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/zduwkC5PQDOGNkAdIMyn-hz63Ys.roa
File: zduwkC5PQDOGNkAdIMyn-hz63Ys.roa (raw, json)
Hash identifier: dngQzoKRwxwQY6jw/yt5nYtfsqDVjR83fQraMN2FWXk=
Subject key identifier: CD:DB:B0:90:2E:4F:40:33:86:36:40:1D:20:CC:A7:FA:1C:FA:DD:8B
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01960C2A705E38B6F3CF4E445A37C6F35BFF
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/zduwkC5PQDOGNkAdIMyn-hz63Ys.roa
Signing time: Sun 06 Apr 2025 17:33:49 +0000
ROA not before: Sun 06 Apr 2025 17:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25693
IP address blocks: 185.228.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:2a:70:5e:38:b6:f3:cf:4e:44:5a:37:c6:f3:5b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Apr 6 17:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cddbb0902e4f40338636401d20cca7fa1cfadd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:57:76:38:77:7e:0f:8a:70:17:1e:19:c7:63:
51:7e:6d:80:c4:24:3a:18:ba:6c:54:00:1d:f1:83:
6e:bd:8f:fd:7a:f3:2f:04:91:af:87:d8:1c:e0:11:
1e:61:17:0e:e9:6b:6a:01:fb:ae:e4:88:ec:13:75:
c6:16:f6:41:56:09:60:22:8d:a8:a1:3b:59:a3:ae:
5e:b9:d1:a6:b6:f7:07:57:e5:b5:83:55:bf:92:85:
49:86:03:07:a5:6c:41:cc:8e:09:cf:e0:b5:27:2d:
2e:ca:4f:93:48:20:05:bb:62:6e:74:04:15:b3:9b:
b3:2e:a4:f5:0c:98:ac:a1:7f:48:aa:25:14:5c:ed:
41:6a:8c:1b:61:6e:60:61:90:f9:fc:58:5c:72:84:
3b:8b:90:a3:98:88:6a:5c:e1:f6:34:ad:b2:f6:ff:
64:f3:54:ea:c8:e6:7e:e1:bf:a9:73:c0:2b:05:c9:
ea:70:4d:5a:2c:b9:ca:6d:72:68:19:aa:7e:f9:d1:
f1:3b:ea:af:fe:4f:ff:b2:a0:0d:b1:06:05:75:a8:
39:8a:f5:8e:f3:ab:22:8b:e6:9f:f6:19:1a:e2:56:
49:88:ca:ee:cd:5c:8c:5d:48:c2:e4:bd:23:39:5f:
8e:e3:f7:24:56:71:ed:cc:7e:24:0b:d7:90:8c:20:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:B0:90:2E:4F:40:33:86:36:40:1D:20:CC:A7:FA:1C:FA:DD:8B
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/zduwkC5PQDOGNkAdIMyn-hz63Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:84:6b:a9:43:91:5d:9d:b5:8c:6f:5a:c4:06:08:b6:9e:86:
df:78:77:bc:1c:3a:85:81:a7:19:9e:71:5b:9f:06:57:0f:ad:
1e:83:a0:bd:4c:37:bb:d9:0f:92:46:c8:d9:5b:2f:d5:74:65:
d7:bb:e3:d3:96:90:f2:78:32:ae:5f:82:58:b7:f3:45:97:9d:
e8:26:91:b4:bb:de:cc:1c:41:63:68:db:5a:eb:3d:a8:1b:ed:
c9:3a:9c:f0:45:49:24:d5:05:78:68:e0:21:ad:a9:9c:90:7c:
1e:64:bf:d4:56:3d:f4:15:1a:18:75:84:35:ec:83:b9:8f:2f:
31:74:a5:79:38:12:db:dc:3d:34:fa:30:8d:d2:00:00:36:e5:
d1:8c:81:20:c5:a0:53:31:80:36:0c:f9:1c:19:73:b6:66:1e:
2e:35:a8:d1:f9:2c:55:21:b1:45:34:f0:59:ac:bb:6c:a6:0f:
7f:c1:40:61:d0:f9:15:f7:a0:6b:26:6e:61:66:c1:5f:30:15:
a9:2e:33:24:9c:26:e7:33:09:33:db:9b:a5:13:ad:8a:93:5a:
7a:9d:7e:6e:18:b0:58:19:b4:4e:dd:d3:b9:b8:63:e9:eb:52:
30:e3:c6:93:da:84:95:e4:81:9a:5b:7b:55:29:5f:79:86:8b:
c4:b9:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:30 2025 by rpki-client on console.sobornost.net