Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/QIpPOWuJUQR17x2KgabcF3hdBpY.roa
File: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (raw, json)
Hash identifier: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=
Subject key identifier: 40:8A:4F:39:6B:89:51:04:75:EF:1D:8A:81:A6:DC:17:78:5D:06:96
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 01941FFA1C5184F4C54D2E2D3C3CF8E8FF9B
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/QIpPOWuJUQR17x2KgabcF3hdBpY.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39691
IP address blocks: 185.234.224.0/22 maxlen: 22
185.234.224.0/23 maxlen: 23
185.234.224.0/24 maxlen: 24
185.234.225.0/24 maxlen: 24
185.234.226.0/24 maxlen: 24
185.234.227.0/24 maxlen: 24
2a0d:2f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:51:84:f4:c5:4d:2e:2d:3c:3c:f8:e8:ff:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=408a4f396b89510475ef1d8a81a6dc17785d0696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:34:27:70:03:48:01:4b:26:d2:21:37:cf:
49:2f:5d:1b:4a:0e:fc:d2:26:45:9e:14:14:e9:0c:
b7:51:37:24:21:38:c6:16:ff:20:82:8d:1e:6e:f2:
40:b2:3d:eb:02:63:71:7b:9d:52:71:9f:f4:03:ca:
fd:75:c7:80:d3:10:76:8d:37:d4:9d:c2:eb:57:85:
92:30:7f:31:d8:35:a6:0e:62:42:3f:a6:92:9a:51:
b8:a5:1a:da:ef:a9:f3:6a:1e:22:41:63:82:21:52:
df:2d:6a:f4:53:16:68:2f:c2:42:b9:7c:d9:af:9d:
e4:7b:c8:6b:91:ea:4f:da:40:d8:52:2e:5a:a9:cb:
3b:bc:e3:b7:88:f5:8e:d6:8f:63:72:ae:73:ba:d2:
35:2b:18:58:d0:15:b1:4c:6c:9b:d3:1f:60:1c:23:
11:91:7c:95:2b:a3:8a:59:93:01:34:86:ee:54:62:
e6:54:0c:b2:c5:b0:aa:53:9c:d1:6a:69:a8:ff:cd:
a1:ef:c2:52:d8:64:df:d1:85:eb:56:f4:8b:25:fa:
eb:45:79:3f:a2:bc:37:c1:92:7c:25:aa:41:5f:c5:
5c:f1:68:90:66:cf:b2:42:57:8c:98:20:e3:b8:9d:
e1:e3:e8:82:b2:b6:d0:fc:3d:e2:5f:b7:cc:ba:da:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8A:4F:39:6B:89:51:04:75:EF:1D:8A:81:A6:DC:17:78:5D:06:96
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/QIpPOWuJUQR17x2KgabcF3hdBpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.224.0/22
IPv6:
2a0d:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
42:c8:de:f5:e9:0a:06:8e:f5:00:e9:a8:90:3c:cb:63:6b:de:
56:8f:cd:de:69:08:d9:64:e6:94:fa:b5:d8:bf:50:46:a2:4c:
ca:10:3b:dc:ef:f7:0c:12:49:3c:c1:62:cb:16:af:16:8c:fa:
2e:22:9a:16:72:57:42:3b:02:0e:f1:bc:da:25:a6:43:68:5e:
a2:ff:b6:80:09:75:98:a2:a6:9c:35:30:af:1f:d2:ae:b9:aa:
3c:69:99:ec:c4:bc:da:8a:7a:1c:ad:b1:a2:1e:eb:a5:5c:28:
ec:dc:54:a8:14:a3:26:9d:61:bd:cc:b1:6c:f5:3a:c6:8e:49:
6a:24:e8:2c:4b:ec:63:cb:20:2a:5a:49:49:f0:11:1f:80:e9:
e7:a7:12:2a:2a:d3:82:76:8e:a5:3c:19:cc:ed:2f:d3:c8:8e:
7f:13:68:fc:ef:7b:ba:b0:70:d5:a3:a6:85:20:c6:46:2d:f5:
d0:13:7c:06:64:61:4b:6e:cb:59:b2:50:15:92:60:99:f6:51:
a5:00:2f:49:d7:26:b0:b2:81:4d:7d:36:a5:ef:16:f2:5f:3e:
0b:3f:3f:ef:a0:9c:d5:f4:1b:5b:02:58:c6:3b:c7:01:43:ce:
8e:03:5a:95:06:fe:9c:c8:4c:3b:3d:e0:71:e9:fa:fd:fc:a0:
4e:19:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net