Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/b6-fNNnc1Van3A4MydclPEZwFS4.roa
File: b6-fNNnc1Van3A4MydclPEZwFS4.roa (raw, json)
Hash identifier: /GR7GNM64fL0V0AiN9wwdK8rukicfSr/O8d0i0zeSFk=
Subject key identifier: 6F:AF:9F:34:D9:DC:D5:56:A7:DC:0E:0C:C9:D7:25:3C:46:70:15:2E
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 019456C09E02F2FE08A4E6E8425D95F379B2
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/b6-fNNnc1Van3A4MydclPEZwFS4.roa
Signing time: Sat 11 Jan 2025 19:04:11 +0000
ROA not before: Sat 11 Jan 2025 19:04:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49371
IP address blocks: 185.124.12.0/24 maxlen: 24
185.124.13.0/24 maxlen: 24
185.124.14.0/24 maxlen: 24
185.124.15.0/24 maxlen: 24
185.236.28.0/22 maxlen: 22
185.236.28.0/24 maxlen: 24
185.236.29.0/24 maxlen: 24
185.236.30.0/24 maxlen: 24
185.236.31.0/24 maxlen: 24
2a03:9000::/40 maxlen: 40
2a03:9000:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:56:c0:9e:02:f2:fe:08:a4:e6:e8:42:5d:95:f3:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Jan 11 19:04:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6faf9f34d9dcd556a7dc0e0cc9d7253c4670152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:7d:b0:98:37:fc:be:45:7a:03:25:13:a1:
a0:1c:a5:84:54:63:52:5d:e8:07:30:da:72:6f:4a:
8f:78:07:0b:9e:e4:1f:f2:88:29:d8:53:08:d3:41:
97:ab:46:21:36:d4:29:45:cf:09:97:f5:36:81:df:
60:8b:3c:8c:bd:6b:78:53:26:12:f8:a1:7d:c8:48:
4c:6b:89:2d:7c:96:42:75:17:05:05:43:bb:3d:19:
51:2c:42:b3:e8:19:1b:4d:f2:81:76:5e:ff:65:50:
a8:5e:52:e6:6a:f2:92:c1:a2:a3:a9:5f:52:ef:ac:
7a:da:5c:da:7d:3a:e8:55:0d:b2:53:03:de:ae:ce:
b7:1d:d0:ab:a6:ba:69:65:5c:dd:58:e3:1c:cc:7e:
55:3f:13:25:8d:1d:d2:ba:9f:94:50:2b:62:4a:97:
62:ce:81:68:7b:ae:90:2e:b6:17:0b:f7:25:f9:55:
94:5c:05:b3:7b:e3:da:7e:59:5d:7e:3b:ce:c0:6a:
6d:f1:92:86:27:48:c1:e2:bd:bf:0e:a4:16:24:35:
78:1e:ad:77:43:15:fb:4f:82:60:91:78:67:8e:20:
0d:d4:f9:62:c0:b3:db:ca:9c:3d:e9:1a:61:ea:41:
d1:15:0b:32:da:44:a5:d3:17:85:28:18:0f:46:58:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:9F:34:D9:DC:D5:56:A7:DC:0E:0C:C9:D7:25:3C:46:70:15:2E
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/b6-fNNnc1Van3A4MydclPEZwFS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.12.0/22
185.236.28.0/22
IPv6:
2a03:9000::/40
2a03:9000:200::/40
Signature Algorithm: sha256WithRSAEncryption
84:31:ef:ac:a4:78:b7:d0:dc:ee:02:87:a0:02:97:61:73:e8:
f0:26:db:a1:5c:d0:e8:22:13:d6:a1:f0:cd:5b:a6:ff:4c:99:
47:a8:d3:b9:3c:74:27:00:79:19:10:9d:7d:b7:35:4f:c0:81:
77:93:64:30:1f:15:e7:2d:84:d4:9f:c1:35:d4:41:7b:a8:2a:
2d:38:4a:11:5a:d1:70:6c:8b:31:ba:7a:3e:ab:b0:35:cf:14:
fb:c7:8f:71:ef:a2:fc:3b:3c:b3:43:2d:87:b4:05:f6:a4:ab:
c2:63:83:18:f3:f3:44:7f:b3:ff:07:5d:53:4c:52:2c:32:10:
b5:38:ee:d8:3d:30:3a:02:35:cf:05:a8:6e:93:2d:43:06:28:
c3:ee:ab:e0:da:44:f5:4b:0c:9d:23:4a:b2:d1:91:e2:9d:da:
fa:36:87:d3:b7:93:88:f6:56:80:1f:f8:88:04:d5:8c:c1:d9:
58:db:f9:f5:42:47:1b:58:e3:48:39:7e:f4:5f:44:c4:0f:8e:
69:fc:52:76:6f:1d:c9:b3:26:35:58:ca:40:f1:80:d0:dc:15:
d8:70:ee:c0:ef:c7:1e:d8:3c:17:f3:20:37:b9:14:de:c6:7e:
80:0a:3b:b0:9c:a7:3d:81:db:f2:20:f2:01:25:70:9e:64:28:
21:98:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:18 2025 by rpki-client on console.sobornost.net