Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa
File: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (raw, json)
Hash identifier: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=
Subject key identifier: 66:2D:BF:22:E6:33:95:A2:11:B6:C9:3C:FA:AF:AE:04:1B:59:12:02
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 019422FB492B81C8F4969A5DC5DBECE14D7A
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa
Signing time: Wed 01 Jan 2025 17:48:01 +0000
ROA not before: Wed 01 Jan 2025 17:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61239
IP address blocks: 185.12.100.0/22 maxlen: 22
185.12.100.0/24 maxlen: 24
185.12.101.0/24 maxlen: 24
185.12.102.0/24 maxlen: 24
185.12.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:49:2b:81:c8:f4:96:9a:5d:c5:db:ec:e1:4d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Jan 1 17:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=662dbf22e63395a211b6c93cfaafae041b591202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:f9:e5:ea:63:61:ea:63:3f:3e:42:24:6b:
7e:e1:a7:9c:7d:0c:85:13:30:3e:b5:a0:5e:30:ff:
e9:ed:92:f6:a9:41:62:91:a6:06:be:7a:a5:87:e9:
ae:c5:d5:24:b0:c0:00:5c:fe:fd:e2:31:3b:22:d6:
16:93:d6:91:bf:61:a0:c6:6c:76:39:7a:01:60:37:
6e:d2:6f:7e:62:34:40:a3:22:ce:f5:8d:6f:e2:5f:
6f:79:79:a8:ef:40:4a:04:6f:6e:2b:bb:29:4b:13:
c5:b8:0a:b8:c9:b0:c3:cc:a5:aa:01:f6:b6:17:cc:
a1:d3:30:1c:f3:4d:2b:9c:78:71:4b:3e:5a:56:4e:
f3:8a:02:3b:4b:84:d0:ca:12:a8:b4:cc:f0:2b:72:
a5:5a:00:cd:24:05:df:45:86:22:6e:ef:a4:23:3c:
d1:69:44:93:35:a7:0c:cb:a6:71:3b:44:39:af:96:
d5:95:92:13:13:f0:48:89:d4:22:0c:07:5a:71:5f:
e6:cc:0f:d3:3c:9e:63:5a:2d:d8:93:3e:f8:5a:ed:
cf:b4:cb:32:cc:7c:36:61:23:65:1c:1b:ff:09:99:
0a:9e:10:4a:3a:39:20:31:25:39:db:8a:51:db:1c:
33:40:e0:f8:ee:ae:4d:30:2d:30:33:7f:74:25:32:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2D:BF:22:E6:33:95:A2:11:B6:C9:3C:FA:AF:AE:04:1B:59:12:02
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:06:76:08:25:91:18:28:ce:6d:63:9f:08:4e:17:5e:05:c0:
64:67:c4:52:06:5e:cc:21:e8:c2:2e:41:93:7d:88:fb:92:3b:
9d:0a:92:68:bd:2c:f1:9c:72:79:37:51:92:93:bc:cd:30:54:
dd:59:38:0d:6f:26:a1:62:93:f8:16:6e:c9:e8:8f:96:a7:61:
34:4c:ec:ad:6d:9b:62:e6:b6:57:6d:fa:89:d1:63:9d:83:51:
82:a2:d7:c2:80:69:d9:91:f4:71:d0:37:b7:32:8e:7b:bf:da:
be:18:09:04:ce:1d:00:63:75:3d:45:4e:44:7a:89:8d:47:6e:
76:f6:75:99:44:f4:08:82:af:e7:2b:06:2c:ce:7d:4b:ce:12:
77:4f:62:41:93:db:94:73:e7:63:c9:b3:b1:5d:0b:9c:bc:c3:
6c:12:66:04:31:f3:3f:5e:e8:fd:13:84:80:5c:ff:69:49:53:
45:f2:69:1c:e8:a0:0a:3c:44:c3:e9:af:0f:f3:bc:12:d8:82:
a7:1f:aa:df:72:e9:12:c2:b3:30:8b:57:0f:00:bf:f8:62:ca:
37:08:02:f5:d7:3b:49:83:62:1a:19:5e:16:a2:1f:68:0f:ae:
24:53:0c:39:6f:4f:91:79:49:4a:0f:0f:2c:f1:0d:15:b3:b5:
f9:34:c3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net