Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/vL8VBacqTlyBVVarywT22uMI0zY.roa
File: vL8VBacqTlyBVVarywT22uMI0zY.roa (raw, json)
Hash identifier: gny+nDXnfsQzPSknIm8bXLga3jBQmfIOGiuvRlfy/pA=
Subject key identifier: BC:BF:15:05:A7:2A:4E:5C:81:55:56:AB:CB:04:F6:DA:E3:08:D3:36
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 01941F8C3F613DFA90010F65E4DCC0EE4030
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/vL8VBacqTlyBVVarywT22uMI0zY.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8648
IP address blocks: 185.105.252.0/24 maxlen: 24
185.105.253.0/24 maxlen: 24
2a06:3a80:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3f:61:3d:fa:90:01:0f:65:e4:dc:c0:ee:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcbf1505a72a4e5c815556abcb04f6dae308d336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:42:c6:c4:e8:be:40:47:0e:d0:f2:c5:6c:
13:09:5b:b1:4d:d3:75:ae:31:d1:69:95:b4:b3:55:
f6:c6:1b:b2:fa:ab:ce:d6:bc:95:87:0e:72:e9:a6:
f9:bd:29:4c:a8:58:d1:23:0d:f6:61:fd:6c:bc:65:
9f:b7:c3:b1:db:93:e0:63:5c:cf:39:14:b5:32:24:
d1:14:d6:88:e3:6d:49:21:f0:f3:fa:95:4a:96:51:
70:4f:80:03:3a:98:57:18:70:cd:e4:63:a4:52:0c:
8d:15:9b:73:82:ae:97:ef:ed:eb:4e:fd:7e:66:fc:
5e:e6:c0:c2:00:30:00:d6:3a:d4:05:a4:1d:dc:f5:
81:e0:9d:34:17:c3:5b:25:9e:ac:1d:33:9e:5d:c5:
45:6f:a3:02:91:49:a2:7b:88:5c:42:c9:1f:9a:d3:
99:33:08:87:77:e2:b8:ab:89:e9:2c:27:1c:8a:59:
49:e7:30:12:75:03:6b:ef:d2:5e:dd:e0:78:a5:44:
54:b2:93:17:61:fb:66:f2:a4:b4:f6:31:53:90:32:
3b:a3:cd:f1:8a:26:6d:36:04:59:ba:02:d8:76:46:
0b:60:9c:cd:14:3b:23:11:95:50:0d:59:a3:51:3f:
97:eb:f8:a1:cc:26:c5:5b:27:6e:4a:1a:55:08:8c:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:15:05:A7:2A:4E:5C:81:55:56:AB:CB:04:F6:DA:E3:08:D3:36
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/vL8VBacqTlyBVVarywT22uMI0zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.252.0/23
IPv6:
2a06:3a80:200::/40
Signature Algorithm: sha256WithRSAEncryption
ac:07:3f:ed:3b:98:d4:0f:9b:28:0f:c0:a2:51:c4:41:61:93:
81:44:92:ac:8e:78:ae:f0:c8:a3:79:75:37:b6:4e:6e:c5:5d:
b6:5f:d6:ab:67:76:08:f6:98:21:83:9f:c6:0f:ba:56:eb:ba:
27:aa:0c:bb:cf:c5:5d:36:40:2f:8b:10:89:3f:03:81:76:e6:
c8:a2:0c:03:d0:0d:1a:ea:3e:7b:0f:7e:8b:17:d7:6b:49:b1:
84:8b:70:da:53:ae:38:45:ed:bf:14:26:64:fb:90:72:d1:6a:
07:6d:c1:ec:12:ed:87:aa:e9:b9:f2:8c:d0:7c:d9:ec:70:4a:
6a:4d:ae:23:8d:83:ba:62:cb:df:7e:ea:0b:48:2e:47:dd:3e:
32:54:45:41:3e:3a:a5:5f:e3:62:11:35:5e:49:1f:ba:2c:60:
a7:05:c1:7b:35:6b:db:6e:27:f0:10:23:c2:c6:42:80:e4:33:
9c:d8:4f:82:2d:0b:f4:21:9c:0c:0b:39:55:de:86:16:4a:11:
2f:4c:77:1d:20:f7:45:d0:48:d7:ad:48:2a:27:3b:26:3c:5c:
53:6c:81:a9:40:db:ce:5f:d3:5a:75:d6:c4:39:b9:1b:f3:10:
a3:ab:fe:f9:30:20:01:c7:30:76:4c:e0:c8:f9:85:36:dd:15:
5c:c7:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:19 2025 by rpki-client on console.sobornost.net