Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bicuo27VbekDKZ2baxGyIAeBOBw.roa
File: bicuo27VbekDKZ2baxGyIAeBOBw.roa (raw, json)
Hash identifier: SWEpCpnN+xzcUkxLs6Bt4xTFqOqzIoS1IpAm8o8Z7uw=
Subject key identifier: 6E:27:2E:A3:6E:D5:6D:E9:03:29:9D:9B:6B:11:B2:20:07:81:38:1C
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01961508F1858CECEFDEDE115665D684958F
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bicuo27VbekDKZ2baxGyIAeBOBw.roa
Signing time: Tue 08 Apr 2025 10:53:49 +0000
ROA not before: Tue 08 Apr 2025 10:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 185.169.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:08:f1:85:8c:ec:ef:de:de:11:56:65:d6:84:95:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Apr 8 10:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e272ea36ed56de903299d9b6b11b2200781381c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:64:1e:69:65:0f:06:91:cc:08:e5:48:dc:
e2:e2:cc:45:07:3e:45:6b:6e:23:94:4e:0b:2c:88:
0c:2d:23:58:f5:98:f3:34:94:d9:76:16:fa:96:8b:
d3:4f:79:56:6f:27:f2:01:da:bb:d0:c3:6b:3b:b7:
a8:fb:84:98:9d:75:bd:1f:e1:f7:ed:cf:6c:d4:ad:
0a:e0:f5:b8:89:72:bb:ef:da:7a:56:37:1a:b6:85:
4c:cd:a0:7e:32:1b:cf:80:f5:23:78:8e:a7:96:8d:
77:3c:68:ac:e5:79:ad:57:b1:69:e8:2d:f0:cb:1e:
c4:86:82:04:76:e7:51:b0:1e:28:b0:89:b0:ba:4b:
bd:59:af:72:0d:0f:19:a9:56:33:c0:62:4f:9e:6f:
83:89:6b:4a:9f:38:3f:e0:2b:1e:67:df:d3:78:7f:
d4:48:95:e4:2f:e1:51:92:10:5c:29:a3:d6:29:bb:
a1:e3:c6:43:9b:61:ab:e1:ea:f6:2d:eb:21:62:5a:
b3:55:a0:09:e2:9a:7a:8f:76:5b:cc:de:c6:59:78:
9d:8c:65:a0:67:82:72:d9:31:57:6b:bc:bf:6c:30:
0d:db:b7:65:22:fe:9b:c5:db:a2:b4:d6:e4:ec:f7:
93:82:59:ec:45:92:47:01:fb:08:8a:fe:ca:4e:fc:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:2E:A3:6E:D5:6D:E9:03:29:9D:9B:6B:11:B2:20:07:81:38:1C
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bicuo27VbekDKZ2baxGyIAeBOBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.183.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7b:8c:e4:22:af:8e:4d:73:47:8f:dd:86:4a:b5:71:d3:99:
e5:07:45:a5:c8:00:b8:1b:a3:7d:26:d7:63:1c:44:af:30:1a:
d8:da:35:58:6e:8f:a1:cf:c7:d9:83:9f:18:75:0a:dc:6f:98:
8a:df:c0:af:0e:d2:60:b7:3e:ec:2e:fe:49:05:17:9b:82:72:
39:a6:1f:1d:d6:10:a3:46:f5:5b:52:4f:43:25:de:8d:fa:dc:
f2:bc:b1:30:e8:6f:e7:f6:cc:84:a9:ae:57:29:1f:76:3b:5b:
13:86:92:d2:1b:f1:69:79:49:3e:18:ac:52:16:22:cc:e5:df:
31:f1:c4:06:83:cb:82:f2:07:83:33:94:b4:21:fe:f1:a1:ce:
f2:32:05:c8:12:96:0e:11:b7:81:a0:52:6e:12:cd:2f:c2:b3:
40:90:15:63:73:56:9f:4f:8a:1a:48:01:22:b9:c9:99:ec:42:
84:ef:f3:88:65:a3:18:d2:83:12:97:69:5b:7d:e4:df:8a:7f:
e7:99:16:f6:ff:b3:c6:8d:1f:8f:99:1c:47:da:45:df:41:78:
e7:8e:f3:b6:ca:00:05:64:c4:4e:2e:ab:6d:2f:20:6f:a1:30:
11:50:c0:ad:99:35:ef:3b:bc:7a:50:e4:46:36:f4:a7:42:83:
1e:f5:b3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net