Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa
File: 1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa (raw, json)
Hash identifier: kWMYsrVZaVYfP4Ct5LwW7USETz9giRgVCzYAo1+XF/g=
Subject key identifier: D4:BA:A6:ED:9D:D9:BC:5E:69:0B:DF:C7:0D:18:F9:50:D9:21:77:B0
Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Certificate serial: 0194222015CBB6899A0A5EA3FAB5AF497B5F
Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206562
IP address blocks: 185.152.56.0/24 maxlen: 24
185.152.57.0/24 maxlen: 24
185.152.58.0/24 maxlen: 24
185.152.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:15:cb:b6:89:9a:0a:5e:a3:fa:b5:af:49:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4baa6ed9dd9bc5e690bdfc70d18f950d92177b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:74:d1:83:98:e8:59:c0:31:af:0c:70:20:
6c:ce:b6:a5:a7:43:b3:30:f3:22:4b:d3:70:ec:39:
b3:fc:e0:84:ec:86:81:ed:1c:21:53:7c:85:54:a5:
44:88:48:e3:97:21:c8:36:48:83:19:27:15:4e:03:
57:54:cc:cd:12:67:be:d2:67:61:65:4a:0a:41:e0:
71:c4:fa:43:38:86:e9:83:31:2e:d7:18:54:a8:f7:
0d:c5:11:aa:5f:5f:87:1a:88:d6:0b:54:f6:a8:3d:
ca:6a:5d:88:1c:65:91:67:e7:35:cb:8b:17:08:9d:
83:a4:3f:0a:14:25:e4:ba:ca:48:df:a2:0f:5a:a2:
f5:88:3a:e4:76:57:71:0b:40:90:00:23:88:7b:92:
fb:0e:ec:84:9c:a1:14:bc:82:94:cd:fd:c8:13:b4:
3a:10:bd:c0:aa:44:db:3a:1e:6f:4a:4c:99:1b:0f:
f1:14:cf:b0:aa:c9:5b:b7:7f:d9:c2:21:61:79:fb:
85:32:af:b4:22:af:a8:76:7c:f0:3e:06:ca:71:35:
ea:65:62:ca:af:e3:60:e1:ea:88:9b:24:c0:fa:05:
16:bf:d0:ba:19:77:2e:73:ab:e1:c3:e1:07:7d:29:
0b:9b:e8:51:20:fd:82:8e:9c:82:90:75:88:48:bf:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:A6:ED:9D:D9:BC:5E:69:0B:DF:C7:0D:18:F9:50:D9:21:77:B0
X509v3 Authority Key Identifier:
keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/1Lqm7Z3ZvF5pC9_HDRj5UNkhd7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:7a:d9:74:47:21:b6:94:91:92:50:b3:3c:50:b2:44:2a:2d:
3b:8a:63:29:28:cd:c2:ff:b0:bb:fc:6e:02:58:43:b2:fb:db:
8f:4b:92:0e:b2:3e:3b:62:9d:b5:ad:b1:a7:75:17:fb:1c:0e:
81:8c:0c:ba:36:b8:13:71:41:93:68:87:41:33:22:36:c4:6e:
3d:3a:06:10:2b:a7:7f:c8:4e:c1:5b:b9:95:ce:eb:36:e1:43:
4d:cd:52:2f:ff:cb:7b:ff:e0:8d:db:c5:1f:cf:fe:9b:ab:31:
23:2d:b4:27:ae:66:96:10:a9:25:b4:eb:2b:a0:2e:27:2d:7a:
94:d2:ce:fb:b6:17:fc:3e:24:d2:8c:c7:34:9f:66:31:d7:0a:
fc:eb:14:49:94:31:cb:13:cc:f6:33:8b:d7:df:36:17:89:e3:
b4:94:4b:35:fe:19:34:e1:d4:6e:62:c9:3b:80:cc:5f:51:c7:
86:24:39:ad:60:f7:73:2d:c3:51:0f:ea:36:32:ee:5a:b4:fd:
a9:96:db:6b:77:bf:45:46:58:e7:03:41:ec:97:b5:61:b7:62:
41:15:a8:a3:41:5a:8f:74:72:44:23:87:db:26:80:44:6a:90:
63:7c:2b:e3:21:ba:60:25:16:d4:ba:29:44:6e:56:36:c4:c8:
3b:c7:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net