Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/DErHItNq7nABZO58YjUcqRebihE.roa
File: DErHItNq7nABZO58YjUcqRebihE.roa (raw, json)
Hash identifier: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=
Subject key identifier: 0C:4A:C7:22:D3:6A:EE:70:01:64:EE:7C:62:35:1C:A9:17:9B:8A:11
Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial: 0194F49BDB7BB3AD9247121C1F1AD044A53B
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/DErHItNq7nABZO58YjUcqRebihE.roa
Signing time: Tue 11 Feb 2025 10:44:02 +0000
ROA not before: Tue 11 Feb 2025 10:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203266
IP address blocks: 185.140.24.0/24 maxlen: 24
185.140.25.0/24 maxlen: 24
185.140.26.0/24 maxlen: 24
185.140.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f4:9b:db:7b:b3:ad:92:47:12:1c:1f:1a:d0:44:a5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Validity
Not Before: Feb 11 10:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4ac722d36aee700164ee7c62351ca9179b8a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:2e:60:81:3e:81:24:e7:80:4e:39:c4:f5:
62:2a:a1:c9:96:24:6f:09:1b:93:01:ec:b7:e9:56:
8e:4d:27:2f:92:33:c5:85:6f:9e:5c:45:5f:c1:f6:
23:ac:4b:1c:57:de:47:29:c9:44:b8:d5:48:6d:19:
8b:1b:f9:b3:63:a1:35:e8:f3:b8:c5:db:fe:66:f9:
b7:aa:70:5e:41:d0:53:ec:88:9a:cc:49:a4:92:f3:
e6:1a:f2:29:c9:c7:46:86:c1:23:48:ab:62:55:7b:
5f:32:9e:97:68:ea:88:7c:06:66:d2:4b:65:35:a7:
29:cf:ea:ce:aa:4a:e7:f5:98:55:d1:bd:61:50:c5:
f8:5f:f1:64:22:97:97:0a:94:2a:b0:d0:62:00:9f:
f1:c6:f1:77:ea:6e:92:88:3e:f3:24:2e:05:67:a3:
48:04:1e:9f:e6:33:e2:09:c2:c0:dd:bc:b9:8c:42:
d5:fe:e6:27:38:f7:c6:a0:08:df:32:b4:86:14:e1:
e9:b8:1d:45:8c:59:93:f1:5b:a5:ac:8f:e5:fa:8c:
1d:40:85:4a:35:a4:61:43:7b:05:24:b3:8f:d5:84:
f4:21:c1:ae:aa:54:f1:e6:a9:f8:17:47:93:b1:9f:
5d:8f:79:37:3b:42:cf:64:0d:b2:8c:70:62:5b:1b:
63:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:C7:22:D3:6A:EE:70:01:64:EE:7C:62:35:1C:A9:17:9B:8A:11
X509v3 Authority Key Identifier:
keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/DErHItNq7nABZO58YjUcqRebihE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.24.0/22
Signature Algorithm: sha256WithRSAEncryption
09:34:86:6a:65:45:f5:c0:08:1c:3a:54:03:64:c0:de:91:2a:
20:78:d4:c0:99:e2:93:69:51:0b:a9:10:e9:d7:41:93:ca:39:
65:4e:74:e8:f3:16:e3:88:90:e8:c7:27:a2:16:a0:f5:65:9e:
c4:4e:86:ea:dc:c4:0c:dc:17:d7:c2:91:74:f2:ac:f3:b4:79:
80:6b:96:e1:40:0b:20:66:6c:a6:a8:04:3e:76:8c:fd:d7:6a:
b4:85:28:09:6a:d6:df:3d:9b:9c:3b:ca:f4:bb:3d:82:d1:a0:
77:f2:60:64:56:02:41:50:96:1c:fb:a4:f2:45:9e:e0:b1:2a:
01:ac:7b:da:47:af:69:c5:95:2a:62:f5:9f:41:08:73:c6:13:
d8:67:21:15:b8:e2:ea:07:90:5b:a3:72:c1:ec:1e:ba:d3:22:
e7:3b:dc:44:a7:61:6e:b3:fa:94:6f:fb:4a:e2:71:e4:a1:69:
8e:f3:18:12:a4:84:60:11:64:59:b5:b0:ca:a8:c7:d4:1c:2f:
eb:90:87:e0:a1:e3:96:c8:23:eb:5d:6d:c6:98:41:07:ab:51:
54:5b:f4:eb:a4:3b:87:25:b5:72:92:b5:5b:96:1c:da:94:5d:
3b:63:45:4f:96:85:90:b2:9d:87:56:01:56:63:64:83:05:fc:
91:75:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net