Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/VeBtVkpIYodNfDVL9q0zO2G9fI4.roa
File: VeBtVkpIYodNfDVL9q0zO2G9fI4.roa (raw, json)
Hash identifier: 69DCX1Y+C0YR951ujfa1InW/UlkkHLEEqX2IFa0T65Q=
Subject key identifier: 55:E0:6D:56:4A:48:62:87:4D:7C:35:4B:F6:AD:33:3B:61:BD:7C:8E
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 0194221F886E9055D2417233AE3C2A1CB466
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/VeBtVkpIYodNfDVL9q0zO2G9fI4.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47872
IP address blocks: 185.44.116.0/24 maxlen: 24
185.44.117.0/24 maxlen: 24
185.44.119.0/24 maxlen: 24
212.5.48.0/24 maxlen: 24
212.5.49.0/24 maxlen: 24
212.5.50.0/24 maxlen: 24
2a01:73e0::/32 maxlen: 64
2a01:73e0::/36 maxlen: 36
2a01:73e0:a000::/36 maxlen: 36
2a01:73e0:b000::/36 maxlen: 36
2a01:73e0:c000::/36 maxlen: 36
2a01:73e0:d000::/36 maxlen: 36
2a01:73e0:e000::/36 maxlen: 36
2a01:73e0:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:88:6e:90:55:d2:41:72:33:ae:3c:2a:1c:b4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55e06d564a4862874d7c354bf6ad333b61bd7c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:c9:75:53:13:9c:a6:77:39:d0:84:7b:9e:
ca:9b:27:89:b1:f5:fc:58:f5:8c:94:5b:49:5c:47:
bd:cc:ea:83:9c:79:37:f6:d7:1c:89:8e:f4:ed:59:
b1:a6:77:18:3a:23:34:6c:65:7a:bf:48:99:9f:33:
9f:70:82:db:1d:68:42:4b:19:07:9e:33:c9:4a:00:
e5:69:31:01:be:ca:0e:67:06:dd:33:c9:66:09:ee:
c8:1f:29:8f:80:56:12:7d:40:23:fd:eb:d3:01:78:
03:93:6c:22:85:2c:e4:d7:60:a6:2c:1d:fd:2d:6f:
2e:85:1e:f2:cd:2a:86:74:e6:d0:eb:65:da:1a:56:
ac:04:79:8e:f8:25:25:75:f1:18:ff:e1:a4:ba:a5:
16:c2:0b:b6:4b:f1:1e:74:c2:24:e3:2d:62:e9:a6:
5a:c5:a0:06:2c:36:5c:76:67:ce:f9:3e:95:fe:c9:
67:99:26:40:35:3f:26:65:5e:55:25:c4:a6:1e:b1:
aa:c8:d7:9a:f6:4d:7c:0c:c5:3e:8a:cb:a9:2a:83:
20:59:ad:fb:bd:a8:82:13:12:4f:79:e9:42:6d:96:
db:da:6f:f7:ef:7b:23:ea:29:b2:6d:7a:3f:71:54:
39:c1:2e:7c:fb:74:36:28:d4:a5:f6:fd:63:ed:87:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E0:6D:56:4A:48:62:87:4D:7C:35:4B:F6:AD:33:3B:61:BD:7C:8E
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/VeBtVkpIYodNfDVL9q0zO2G9fI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.116.0/23
185.44.119.0/24
212.5.48.0-212.5.50.255
IPv6:
2a01:73e0::/32
Signature Algorithm: sha256WithRSAEncryption
83:91:c3:2c:11:36:30:ed:f9:62:94:27:8c:c0:46:5a:47:bb:
e1:06:80:f4:dc:bd:da:bf:0e:2c:5b:9d:1e:ea:6b:81:fc:57:
3b:cd:ee:a6:74:49:6c:33:bf:48:e5:1c:a9:7a:94:2b:2c:2c:
5b:8c:4b:e4:15:6c:9a:76:fd:a2:2c:52:ae:2b:c9:98:4b:80:
56:74:0a:e5:64:7d:e1:60:d0:3c:9a:e7:94:44:32:06:04:9a:
f4:0b:7d:28:f4:f8:67:13:9d:32:cf:9d:7e:d9:dd:3c:23:28:
0b:ea:e7:c8:34:f9:17:0a:aa:6e:b8:b2:a7:a5:ba:58:f6:d9:
62:3a:b1:1d:e4:cb:73:cc:41:e4:15:49:a0:f4:ed:a5:f2:38:
92:35:19:76:50:31:33:94:2e:25:08:4c:53:fb:5d:f1:49:29:
70:f0:0a:2c:a6:1f:3f:47:4d:36:93:99:fc:b2:b6:01:dd:79:
8c:fe:df:24:d9:ad:b1:d4:ea:cb:67:1a:97:bf:29:83:03:f6:
5f:d3:d2:29:12:20:84:66:de:cf:f2:85:e6:fe:71:df:8b:c6:
49:10:0b:5d:ca:39:3c:34:85:bb:1f:46:ea:ef:f0:73:9f:a8:
03:d1:ce:d9:c0:fc:3e:ad:69:48:e4:98:d6:67:49:4f:0b:31:
6d:99:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net