Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa
File: eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa (raw, json)
Hash identifier: RcgTIJu/NwqSqC/vmr9OYFdwRt2Fz/3jLy3D9rjl+1A=
Subject key identifier: 78:73:A0:2D:37:0A:15:34:02:6F:DA:44:A1:5D:51:A4:EF:4E:6F:A0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B603893808A89BFDFCFFDC01D63A2B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa
Signing time: Thu 02 Jan 2025 15:50:27 +0000
ROA not before: Thu 02 Jan 2025 15:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215350
IP address blocks: 85.133.207.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:03:89:38:08:a8:9b:fd:fc:ff:dc:01:d6:3a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7873a02d370a1534026fda44a15d51a4ef4e6fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:3f:cf:3c:47:30:c4:ec:8b:43:08:65:28:
3d:2b:be:4e:e6:e0:3b:f3:85:fb:b2:55:74:e3:88:
2c:96:f0:df:e6:82:de:8f:e5:77:3e:0c:f8:1f:34:
98:a9:ad:34:c7:1c:3e:83:26:5c:f3:e2:f2:2e:e8:
d7:67:ba:33:5b:71:e3:80:92:54:85:07:58:4d:86:
a6:ed:72:ca:cc:ca:f3:51:bc:9a:3e:10:15:e3:52:
41:70:8e:81:cf:f8:ce:d5:e5:79:a7:fa:73:00:cd:
6a:26:eb:df:24:08:a3:d3:d0:c2:69:8c:ba:52:0e:
5a:a4:50:f3:ed:6e:ac:50:c7:ff:74:63:6b:aa:eb:
bd:7f:fa:34:cd:ff:b4:8e:66:df:9c:f6:90:03:b4:
7c:41:55:30:6d:c8:a1:0d:43:55:77:29:38:fb:ee:
60:51:c0:1c:2e:83:48:b0:63:37:79:f0:61:76:ed:
b1:cd:36:21:46:55:65:b7:82:d9:4d:8c:88:23:16:
48:2c:96:6b:d4:f4:8f:9d:68:df:bb:4a:be:75:0c:
93:35:66:f9:84:78:14:d8:85:c0:91:60:cc:13:6e:
3c:5b:d1:2e:67:7c:59:30:92:b2:4f:d1:e9:c3:6f:
86:7e:ec:7c:35:77:7d:2d:94:b2:c4:38:92:a0:20:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:73:A0:2D:37:0A:15:34:02:6F:DA:44:A1:5D:51:A4:EF:4E:6F:A0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.207.0/24
85.133.215.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3b:d7:cf:01:ac:c0:d0:b0:4e:9a:78:a4:23:3c:86:42:c0:
d4:ec:3b:c8:e3:b6:44:9b:fc:74:88:12:fe:7e:f2:20:7a:8f:
a5:c8:f0:15:89:c4:13:60:18:4c:1c:ea:6c:07:f1:e6:79:44:
9b:da:75:0d:f6:76:1a:68:33:02:3d:92:9a:4d:6b:d8:c1:49:
8b:45:b0:91:34:b4:4d:00:1e:42:6a:1c:be:e8:19:c9:36:25:
57:d8:e2:b7:fa:9b:ad:24:a7:f2:b1:79:c1:7c:fb:af:dd:20:
48:ec:6e:be:bb:db:32:f3:bc:44:8e:97:d9:5c:fe:92:44:dd:
ec:35:fa:51:e9:03:98:03:27:2c:95:92:18:69:35:f2:6b:76:
8f:4e:cf:0c:07:e2:d7:96:bf:2f:8f:c3:ab:e5:7a:b4:f7:04:
e0:44:07:5e:a4:69:07:5a:39:98:2f:ee:f4:eb:5a:73:87:61:
50:7c:56:d8:09:4b:72:87:5f:6b:a2:48:f2:da:4a:2d:d0:3b:
82:e3:b0:7f:f4:cb:c7:29:22:3e:65:92:98:5a:58:1c:ce:95:
ff:8d:7f:43:2f:ab:07:ff:56:2a:a5:40:1b:a0:25:5c:aa:fa:
08:61:0b:fe:f8:4f:cf:a2:34:34:df:77:f9:04:10:d8:3b:49:
a2:86:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net