Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/bcsuWSTOEvrNi8Bj_pY3ZTkyjTo.roa
File: bcsuWSTOEvrNi8Bj_pY3ZTkyjTo.roa (raw, json)
Hash identifier: gzGAlBuK5OENfmUWRjaIU+LruIs+AOY9SmxU1Rg2h3E=
Subject key identifier: 6D:CB:2E:59:24:CE:12:FA:CD:8B:C0:63:FE:96:37:65:39:32:8D:3A
Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial: 01941FFAA2BD3499AC94E993C0168CFCF5DC
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/bcsuWSTOEvrNi8Bj_pY3ZTkyjTo.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197524
IP address blocks: 91.235.8.0/22 maxlen: 23
185.18.36.0/22 maxlen: 23
185.93.200.0/22 maxlen: 23
2a05:fa40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a2:bd:34:99:ac:94:e9:93:c0:16:8c:fc:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dcb2e5924ce12facd8bc063fe96376539328d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:fa:57:0b:6e:04:39:90:dd:43:d3:79:f3:
23:92:40:88:4b:dd:a7:c3:ea:7a:f6:1c:b2:19:4d:
21:4a:9a:32:14:28:41:19:5f:44:79:3e:1b:fb:18:
98:44:f6:ee:84:5d:e1:80:98:5f:78:ca:f0:2b:a4:
63:5c:e2:5a:3a:6e:da:b7:0c:1b:e1:c0:59:14:b6:
d8:9f:81:68:d9:b2:58:9d:e0:2f:1e:68:a4:c1:4e:
72:97:7b:63:7b:1a:8b:0d:ac:72:ca:4f:93:2e:30:
79:20:77:ce:9d:ec:ad:d3:19:fd:db:83:7a:31:87:
a7:b1:2b:b0:a6:8f:96:72:04:02:91:f3:b7:cc:a8:
b4:1c:9a:f8:ac:27:65:c9:30:ae:80:43:2e:8e:56:
78:49:59:88:b8:1d:ff:16:07:23:68:4e:c3:54:aa:
ff:62:d2:24:d2:df:c5:05:e6:24:3c:b2:ef:30:38:
1c:05:01:72:8b:4d:31:10:3a:96:0a:fe:29:8c:b5:
f7:f5:69:3f:33:d9:8c:75:e6:a8:d9:ca:4e:d5:4e:
b6:b9:cc:e7:cd:ce:e6:5a:d8:3d:0a:5b:ef:ee:17:
ad:20:d0:fe:e2:04:d5:60:4d:b1:fd:25:bd:ac:f4:
83:93:c6:e1:8d:75:9a:65:be:3a:c6:37:c4:46:41:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CB:2E:59:24:CE:12:FA:CD:8B:C0:63:FE:96:37:65:39:32:8D:3A
X509v3 Authority Key Identifier:
keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/bcsuWSTOEvrNi8Bj_pY3ZTkyjTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.8.0/22
185.18.36.0/22
185.93.200.0/22
IPv6:
2a05:fa40::/29
Signature Algorithm: sha256WithRSAEncryption
64:52:b0:c3:df:ae:8b:50:9c:fb:33:c9:28:81:13:c2:83:2f:
40:cb:a8:bf:b1:bc:f5:6b:b0:79:ff:14:be:c3:b6:3c:58:6b:
37:83:77:6b:15:b5:90:a9:fc:9c:ed:8e:10:d2:1a:72:e0:c8:
62:a6:36:e8:8a:ae:0f:c0:25:f4:7f:83:ee:1d:d7:29:bf:b5:
c2:23:bb:1d:37:33:39:10:43:08:05:3f:24:e4:a4:5e:0c:53:
35:92:a4:76:c8:45:52:a6:42:76:63:09:2e:73:4d:f8:fb:57:
2a:5e:01:05:45:6d:db:9e:0d:6f:de:88:c3:59:52:93:5b:37:
80:c4:01:ed:2a:a6:ca:d9:97:43:b1:2b:d8:ca:00:8f:93:50:
ce:59:4d:d5:8c:d4:78:d3:5c:3d:0a:fe:98:bc:78:95:b5:00:
4a:f8:65:bb:2f:16:cd:4b:3f:04:f9:98:11:04:d5:51:db:4d:
2f:48:75:14:cd:46:23:72:63:43:06:36:23:eb:ac:98:05:cd:
27:3b:9d:72:73:8f:a7:01:7a:3d:86:dc:78:86:aa:f0:f7:23:
e0:d1:e2:41:4e:a1:62:79:ad:03:56:85:0c:60:c5:f8:92:05:
c0:33:39:1b:ce:72:a5:26:49:86:b4:e4:68:25:01:5c:53:42:
41:e9:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net