Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/bs5TDByPfX7v0gGiMzCGnbwDPsc.roa
File: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (raw, json)
Hash identifier: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=
Subject key identifier: 6E:CE:53:0C:1C:8F:7D:7E:EF:D2:01:A2:33:30:86:9D:BC:03:3E:C7
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 019425219E327E156965F344F8C562B148F0
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/bs5TDByPfX7v0gGiMzCGnbwDPsc.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34308
IP address blocks: 84.246.248.0/21 maxlen: 24
185.63.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9e:32:7e:15:69:65:f3:44:f8:c5:62:b1:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ece530c1c8f7d7eefd201a23330869dbc033ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:e8:8c:15:bc:f6:67:8a:b9:4e:c9:de:16:
1e:73:a7:57:d0:2a:5b:66:d7:ae:38:79:a7:99:c5:
18:af:16:21:12:4d:d3:5d:27:2b:88:fb:c7:79:58:
f0:23:0c:b9:50:26:d2:14:ac:05:7e:dc:7d:3a:dd:
6f:ba:ec:f5:90:30:35:cb:27:b2:36:94:81:26:c0:
85:4f:82:df:82:57:51:c6:e6:21:74:4d:b2:c0:ac:
e5:8a:08:7d:bb:1a:bb:45:7a:dd:7a:e8:2d:d6:cb:
57:fe:45:18:54:17:5c:4a:1d:50:c3:70:4f:b8:09:
07:8a:d0:33:9e:a9:21:37:78:78:bf:a6:e1:4b:0b:
33:90:07:a4:d8:b6:77:01:c1:cc:e6:de:55:d0:19:
78:d1:8b:26:5b:4a:f2:71:1f:90:a0:1b:0a:c3:e6:
bb:52:6a:1b:eb:c4:8e:34:56:b0:74:f8:55:b7:bf:
dd:93:0a:f0:f4:1e:30:25:aa:28:07:26:64:2e:95:
5d:de:a8:f1:fc:b3:9f:21:d5:eb:42:ed:d4:8a:9e:
6b:1f:0a:99:5e:83:f6:d3:82:1f:61:23:de:bd:44:
77:9f:6a:5c:64:28:18:ee:fa:d2:3e:d1:db:16:78:
5f:cb:17:58:c1:51:12:2f:6d:9e:52:24:fb:a2:2f:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:53:0C:1C:8F:7D:7E:EF:D2:01:A2:33:30:86:9D:BC:03:3E:C7
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/bs5TDByPfX7v0gGiMzCGnbwDPsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.248.0/21
185.63.212.0/22
Signature Algorithm: sha256WithRSAEncryption
89:d1:7e:d5:32:d5:94:94:15:c3:e9:85:0e:8b:7f:6f:3b:5e:
13:dc:71:08:9f:e3:20:17:56:09:e9:34:1a:28:d1:fa:f1:1b:
6f:11:c0:3c:f7:d2:37:55:7a:65:91:ee:9e:26:47:f5:48:00:
9b:25:28:21:14:9e:31:c5:a4:d1:f9:c0:8f:cc:ff:62:01:c8:
2f:a6:db:ae:c7:e6:08:70:d1:db:5b:96:64:b3:ef:02:62:d0:
59:f9:e9:96:15:f6:aa:c9:9f:9d:ad:a8:ff:fe:e8:05:13:f8:
25:ce:4a:3f:91:5c:1e:83:15:a6:2d:c0:eb:4e:6b:8f:46:05:
95:56:b6:97:04:d9:52:61:98:2a:99:cd:15:ed:c1:54:99:91:
37:17:a6:9b:5c:cd:96:9b:66:8f:4a:a5:63:c8:10:4d:e6:bc:
02:62:30:1d:9b:e1:14:c8:fb:15:49:0b:30:7f:ec:c5:66:64:
79:b3:4e:5a:74:c2:26:42:ee:45:bc:18:a3:62:e9:30:59:53:
4f:a3:1c:25:fb:f7:f5:2c:62:0c:ff:06:01:9f:03:3d:85:da:
d6:72:2a:79:fd:98:c2:22:fe:58:76:6f:02:1f:a6:d2:b3:b0:
e5:34:3e:71:2f:52:34:62:a5:e6:8b:af:84:1a:7a:9c:08:2c:
b5:ce:05:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net