Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa
File: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (raw, json)
Hash identifier: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=
Subject key identifier: 69:28:DA:10:F2:55:3C:95:FA:EE:6B:F6:7C:7B:22:18:76:BF:3E:3B
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 019425FBF8CF27324A49073613B7A690CD6B
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa
Signing time: Thu 02 Jan 2025 07:47:37 +0000
ROA not before: Thu 02 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58080
IP address blocks: 185.128.154.0/23 maxlen: 23
185.128.164.0/22 maxlen: 22
185.136.192.0/22 maxlen: 22
185.136.192.0/24 maxlen: 24
185.136.193.0/24 maxlen: 24
185.136.194.0/24 maxlen: 24
185.136.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f8:cf:27:32:4a:49:07:36:13:b7:a6:90:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 2 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6928da10f2553c95faee6bf67c7b221876bf3e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:49:f3:69:0c:a1:22:2c:cf:cb:87:3b:fc:
94:0b:75:97:7f:20:ff:3e:a9:d0:3a:c4:be:36:ad:
be:de:b3:40:c0:e7:79:d5:b7:d3:75:42:1d:d8:f4:
dc:bc:31:f2:26:17:86:08:d0:0f:67:e6:dc:4d:30:
7b:36:8a:63:66:4a:85:9d:2a:c6:c6:c1:3e:10:d1:
22:3b:25:06:b2:92:27:28:a3:a3:9a:55:af:22:38:
14:79:01:84:e8:9e:8a:72:5c:ea:6e:98:c5:c4:8a:
50:96:74:62:31:d6:f9:0d:83:16:3b:97:40:03:9e:
de:0a:f0:3b:46:d6:7f:9a:3c:25:e8:9c:25:48:91:
dc:66:df:ed:3a:56:a7:2b:74:35:ce:53:b3:3f:64:
c9:cd:1e:34:fb:c6:8c:e4:07:2c:8c:ad:79:f7:e5:
82:cd:b5:f6:fc:29:a9:94:5a:bc:30:b1:86:21:18:
93:7e:3a:fc:a0:00:05:94:86:d8:41:ff:a7:40:9d:
8d:9f:49:c6:5c:cd:3f:01:04:70:0f:e0:e5:8e:bd:
c9:24:29:fd:4b:0d:64:c4:92:83:b9:43:d2:7e:39:
30:e0:75:ad:d2:71:19:13:b2:43:91:ab:2d:9c:89:
6d:aa:24:5e:d9:42:f0:88:43:65:c0:99:9b:3e:b2:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:28:DA:10:F2:55:3C:95:FA:EE:6B:F6:7C:7B:22:18:76:BF:3E:3B
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.154.0/23
185.128.164.0/22
185.136.192.0/22
Signature Algorithm: sha256WithRSAEncryption
75:e2:b6:bd:35:15:d9:f3:45:12:8c:99:82:67:a3:98:c4:45:
a9:df:09:b9:fa:f7:82:bf:93:ee:41:7e:2d:bb:19:dd:4e:d2:
6c:22:cf:63:3e:e1:d7:23:c5:ea:39:67:cb:dc:94:45:e7:4e:
e5:1f:ce:fe:21:39:90:35:52:8a:75:01:e7:dc:42:26:7d:0e:
e0:cd:e9:34:e8:5e:67:7c:75:f9:6e:f3:4e:9d:24:e5:7a:bb:
c6:77:10:36:58:1c:d8:92:59:cb:21:82:70:47:2e:3f:00:15:
bd:1f:0e:1e:20:45:fb:1f:ab:0c:9d:45:ac:89:d1:16:3f:e3:
d3:64:33:8a:3a:a3:c0:51:8e:a3:18:e8:d4:df:9a:15:9d:ec:
d5:12:e2:31:53:78:af:c6:a2:40:ed:eb:99:98:de:5a:4f:be:
0f:a6:bf:76:f4:d7:78:07:6e:9d:1d:ab:63:4b:6f:13:12:73:
32:8d:7f:d4:6b:8e:62:b5:5e:95:7b:17:43:07:fd:c1:65:38:
62:88:c8:89:37:97:5e:73:cf:e2:21:da:88:d5:67:9e:4f:5e:
50:ed:b2:72:36:d5:05:c9:40:bc:71:8b:97:e9:a9:e0:f9:e3:
03:14:1b:6e:67:53:8c:64:ca:28:1a:7e:66:0f:62:f4:a8:ed:
4b:c0:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net