Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/8b8hGUt6rzi1dlifxra-q3rgP6w.roa
File: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (raw, json)
Hash identifier: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=
Subject key identifier: F1:BF:21:19:4B:7A:AF:38:B5:76:58:9F:C6:B6:BE:AB:7A:E0:3F:AC
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 019426D8F69AA5FDEC8CA6532CE9587D5555
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/8b8hGUt6rzi1dlifxra-q3rgP6w.roa
Signing time: Thu 02 Jan 2025 11:49:00 +0000
ROA not before: Thu 02 Jan 2025 11:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57581
IP address blocks: 185.27.76.0/22 maxlen: 22
185.27.76.0/24 maxlen: 24
185.27.77.0/24 maxlen: 24
185.27.78.0/24 maxlen: 24
194.114.145.0/24 maxlen: 24
2a00:92a0::/32 maxlen: 32
2a00:92a0:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:f6:9a:a5:fd:ec:8c:a6:53:2c:e9:58:7d:55:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Jan 2 11:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1bf21194b7aaf38b576589fc6b6beab7ae03fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:85:bf:6f:f2:84:a4:a8:69:65:30:38:60:
c4:88:79:b8:c0:b2:ad:b1:a6:bb:57:d7:ca:70:24:
2f:93:97:13:ca:00:f1:09:40:b3:c3:ae:85:ef:c3:
3c:19:6a:90:cf:7e:f4:fe:a3:41:43:2b:55:4b:b7:
88:bd:cb:73:54:d0:42:3d:40:8d:e7:0d:d9:e9:33:
87:55:aa:2d:0f:4a:c6:4d:1b:dd:04:f4:84:22:a8:
ab:d7:40:20:95:8b:65:2b:23:fa:07:b7:29:bd:11:
4e:ee:64:5b:64:13:62:0f:be:99:81:0a:8a:4a:d4:
33:65:a4:ec:00:79:2b:a6:38:ab:49:aa:97:c5:53:
63:b4:84:bc:55:ec:e4:e6:28:b2:6f:b4:6c:a0:1b:
0f:d2:8f:e5:43:9f:c9:2c:06:cc:1f:b1:d7:0a:8d:
be:d3:19:7b:38:58:b1:3d:e6:25:76:61:90:83:a9:
82:9a:d2:1c:80:bf:bc:72:e3:d2:0d:4c:12:f7:2f:
ab:bb:63:e6:ff:7d:e6:19:c3:30:6a:e1:6a:1f:27:
23:96:1f:47:31:b5:8d:8d:51:bd:13:02:7d:d7:8f:
7e:41:9a:64:f5:55:90:06:e0:9c:cb:54:ca:37:11:
46:11:4a:17:ad:23:cc:22:32:d5:d4:21:54:8d:aa:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:21:19:4B:7A:AF:38:B5:76:58:9F:C6:B6:BE:AB:7A:E0:3F:AC
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/8b8hGUt6rzi1dlifxra-q3rgP6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.76.0/22
194.114.145.0/24
IPv6:
2a00:92a0::/32
Signature Algorithm: sha256WithRSAEncryption
34:9b:00:86:e8:e9:13:33:77:1f:68:42:52:5c:7c:52:ae:aa:
a1:77:23:33:73:95:b4:3e:ee:69:28:cd:ae:29:e8:b5:6b:1d:
5e:97:ad:62:74:28:c0:34:b6:74:7a:76:e8:ac:cc:c2:77:5c:
12:ad:1a:46:5f:5c:bb:c4:2f:77:12:19:2b:84:ed:1e:bd:c4:
2c:0e:58:d4:e9:85:0b:7e:3c:45:c1:05:60:5e:fe:1f:c5:5d:
a2:78:03:ff:36:24:0e:65:2c:1a:52:53:8b:9a:04:57:1f:f8:
7a:6f:3f:d3:e4:f5:e4:cb:cd:58:03:d0:13:eb:48:75:a1:ed:
41:a5:22:dd:e3:00:0a:5b:81:ec:b5:b8:e4:e2:2f:a4:8d:43:
99:e7:df:0a:25:1f:e6:24:c6:71:e7:5d:1b:16:7b:ec:6a:47:
f2:8f:da:36:53:b3:2d:04:5d:87:c0:cc:96:38:b9:ec:d2:3a:
b5:2f:91:0f:b0:17:ef:b9:68:3e:6c:23:8c:43:99:33:1d:9b:
fe:6f:29:0a:15:e3:0f:c3:16:3c:6d:b4:33:05:78:b0:7b:04:
b6:35:04:6e:a2:cc:86:6e:9c:22:31:4e:b4:be:a5:ba:ee:a7:
8b:dc:0a:1a:26:fc:2e:e0:9f:ef:2d:c8:82:03:9e:46:0e:ac:
e4:24:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net