Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/0geUHc19NNaDsvmjgLb1gNOrEbQ.roa
File: 0geUHc19NNaDsvmjgLb1gNOrEbQ.roa (raw, json)
Hash identifier: NWxuANUmBjc/z+ICKyxtOl6ZHIhQCmMbyKrbsYf09/k=
Subject key identifier: D2:07:94:1D:CD:7D:34:D6:83:B2:F9:A3:80:B6:F5:80:D3:AB:11:B4
Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial: 01942445599C5E81495CDD69B4CEE15C3445
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/0geUHc19NNaDsvmjgLb1gNOrEbQ.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202546
IP address blocks: 185.127.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:59:9c:5e:81:49:5c:dd:69:b4:ce:e1:5c:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d207941dcd7d34d683b2f9a380b6f580d3ab11b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:b3:12:7e:9b:7d:27:3b:31:ec:b8:42:21:
b8:12:37:64:5a:7a:29:4c:7f:10:04:35:7e:63:91:
ab:23:0b:aa:0b:9f:c6:d4:1d:0b:f6:71:4b:51:a6:
90:31:29:9a:69:c8:a1:b5:25:af:36:e4:98:06:e5:
72:a2:b0:ee:f2:ff:c2:2d:3f:fa:93:d3:a9:37:57:
7a:9a:fc:bf:c3:6e:87:05:ce:64:92:ec:c3:ba:8b:
a1:91:dc:fa:27:b0:d9:fa:a1:1b:37:9c:27:b5:f6:
07:3a:05:09:bc:e4:b3:81:a3:d6:e7:57:dc:ad:73:
79:72:fc:5c:39:fd:04:6c:e0:28:30:10:77:53:e9:
12:1f:a6:3d:7d:89:ed:d8:dd:60:eb:2e:76:f0:41:
78:ae:4d:54:ca:fc:91:82:a0:eb:d3:50:01:fc:7d:
36:c7:98:54:f2:20:95:0f:b7:f8:66:a5:e1:39:2b:
82:45:eb:7a:d2:2d:cc:99:9f:ac:eb:83:01:d9:14:
f4:05:d9:0b:7f:d1:ec:fa:ae:63:b1:aa:dd:90:a0:
ec:e7:3f:32:ba:13:d0:18:2b:d8:ca:86:bc:c2:13:
67:f3:49:94:de:57:80:d3:88:74:3f:d3:a2:22:c3:
c4:aa:ce:24:64:cb:b2:c0:b7:9b:9e:6a:47:4c:6e:
b4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:94:1D:CD:7D:34:D6:83:B2:F9:A3:80:B6:F5:80:D3:AB:11:B4
X509v3 Authority Key Identifier:
keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/0geUHc19NNaDsvmjgLb1gNOrEbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:6f:f5:20:b6:a5:e4:a2:9e:0d:8b:eb:1b:90:08:f2:95:fe:
86:c3:c2:e5:2c:24:db:db:9d:9c:6d:9f:42:74:da:15:39:e0:
9f:92:f5:b7:be:b4:f0:0b:e3:2d:21:10:7a:14:3a:b5:66:55:
b4:53:c1:58:f1:ff:86:f9:2d:17:19:6c:66:f4:24:ae:af:6b:
75:41:1e:11:a5:fa:dc:6c:d4:88:b7:dc:7d:94:e7:04:3c:83:
d1:81:b6:a5:e6:36:86:02:74:2c:f7:2d:f9:7d:46:a4:a0:08:
17:9a:21:d4:98:6d:b4:bd:d3:dd:94:0b:29:4a:96:0b:2e:98:
a3:e8:36:0c:f8:5c:57:e6:87:a2:81:a5:7f:0d:9e:06:ac:5d:
03:a9:75:5d:7d:13:39:df:5b:f9:0a:ac:69:0a:c8:14:90:36:
5b:a1:50:76:56:ee:bb:b2:43:7c:3d:39:44:2a:fc:c7:8e:28:
f9:d5:03:f6:85:22:5c:df:03:61:72:88:1d:45:22:85:db:bc:
89:cd:3d:00:41:51:52:3a:4d:1f:bf:32:f6:1c:54:32:f4:29:
ee:9c:2f:34:aa:76:30:c4:d6:0e:82:6e:7d:20:ff:08:fc:c0:
84:b4:18:48:88:e0:56:95:b0:81:e1:f1:bf:f5:21:bf:e3:b5:
7c:25:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net