Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa
File: zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa (raw, json)
Hash identifier: Sf54rTElSlunUVvFtUXJDy0FrQ/XeLhMeCRG3/nN1oE=
Subject key identifier: CC:B9:E0:99:61:30:FC:3D:01:C5:E6:FE:91:C3:D6:C0:FF:60:A7:F5
Certificate issuer: /CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Certificate serial: 0194236A388881D4CD422CA9C55C64CBE3AD
Authority key identifier: EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206121
IP address blocks: 185.177.100.0/22 maxlen: 22
185.177.100.0/23 maxlen: 23
185.177.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:38:88:81:d4:cd:42:2c:a9:c5:5c:64:cb:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea51769ce8672c56d1652bf90a5aefca819b488a
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccb9e0996130fc3d01c5e6fe91c3d6c0ff60a7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:dc:00:15:f1:a8:d8:a4:19:43:73:1c:a1:
a7:29:dc:08:2b:7c:e5:5b:30:03:42:de:c5:cb:e7:
f5:7b:70:07:e9:02:97:bf:83:31:83:e4:37:5e:f6:
98:2f:cb:64:b9:86:7f:0d:01:2a:7d:60:25:8a:35:
0a:e5:dc:b5:02:aa:d0:c4:61:1b:20:ec:ca:66:82:
3f:c7:8f:6e:35:d2:b4:a0:91:99:1f:e8:1d:c7:b5:
a8:20:c6:ff:d0:68:b5:e8:da:51:ec:43:bd:db:ed:
6b:70:ec:db:32:c1:08:23:24:eb:29:b5:76:16:f1:
16:52:10:47:7f:28:77:fc:13:08:17:b7:8b:a3:6b:
39:02:56:ec:21:4f:ef:ad:93:18:c1:0f:e1:2a:08:
1a:d7:30:01:38:2e:d1:01:5e:90:c7:92:f0:da:43:
0c:29:af:1d:0e:bf:89:18:23:df:4a:7c:07:fd:bb:
6e:02:dc:4d:b3:23:2c:38:4a:a2:ec:a2:13:d2:53:
d5:fd:85:33:09:f7:78:93:9f:5f:26:06:e2:04:86:
af:78:58:0b:85:1e:9c:93:e5:51:2d:40:f2:f2:97:
25:76:e6:86:10:3f:dd:c0:ba:86:30:4f:ba:a8:0e:
2e:43:f8:de:dc:8e:44:40:bb:24:b2:d5:24:34:26:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:E0:99:61:30:FC:3D:01:C5:E6:FE:91:C3:D6:C0:FF:60:A7:F5
X509v3 Authority Key Identifier:
keyid:EA:51:76:9C:E8:67:2C:56:D1:65:2B:F9:0A:5A:EF:CA:81:9B:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lF2nOhnLFbRZSv5ClrvyoGbSIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/zLngmWEw_D0Bxeb-kcPWwP9gp_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dbf8be-68a2-4b3d-97db-82e2d5ee9c90/1/6lF2nOhnLFbRZSv5ClrvyoGbSIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.100.0/22
Signature Algorithm: sha256WithRSAEncryption
77:59:fa:a0:be:2a:9c:80:07:54:fa:ab:46:13:c1:f5:f8:4b:
41:9f:45:e0:20:7f:67:6c:93:10:a7:2e:85:87:38:80:42:99:
c0:9a:5f:9c:57:96:53:d7:36:5b:1f:ff:25:1b:e5:91:20:69:
73:b9:3e:ab:89:1c:6b:05:da:86:21:0c:4b:00:bf:01:6c:c5:
65:98:82:0d:06:2e:d3:68:8b:d4:d2:61:8f:f3:b2:65:7e:e6:
49:e0:29:77:f9:9f:b6:55:57:1f:c7:4b:1b:6c:f8:a4:29:8e:
0e:56:21:dd:63:22:85:0f:05:03:1c:c5:c9:73:1e:dc:a0:66:
c3:77:c6:6c:a4:31:db:3d:5d:aa:3c:2e:81:52:67:1d:03:74:
04:45:9b:be:08:a4:3d:dc:d9:19:c8:b0:9d:8d:bd:73:a2:47:
a2:00:24:72:2b:d1:a8:6c:83:87:dd:59:b7:34:ab:0e:cf:2b:
4d:e3:23:00:03:2e:76:dd:2f:3a:5a:8f:e6:2c:1c:40:b9:04:
08:67:84:21:5c:95:39:4e:28:1f:16:0e:d7:81:cd:a1:a2:8b:
36:b5:f5:1d:8d:3f:64:bb:dd:48:98:4f:e7:ce:40:68:59:85:
76:18:fd:d5:cf:18:b2:c2:db:b8:a5:0f:64:6b:70:b4:06:cc:
8b:d1:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:03 2025 by rpki-client on console.sobornost.net