Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/BDu8gHkIJBhIW0Nyvy93tO13Vbw.roa
File: BDu8gHkIJBhIW0Nyvy93tO13Vbw.roa (raw, json)
Hash identifier: mesD9Z1nKI/K1rkIHsybFebmCyFgzXAaO2iOcfuDPqM=
Subject key identifier: 04:3B:BC:80:79:08:24:18:48:5B:43:72:BF:2F:77:B4:ED:77:55:BC
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 0194266BEE04FBFDDA7B4448938DA480D9C9
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/BDu8gHkIJBhIW0Nyvy93tO13Vbw.roa
Signing time: Thu 02 Jan 2025 09:49:54 +0000
ROA not before: Thu 02 Jan 2025 09:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197882
IP address blocks: 31.25.136.0/24 maxlen: 24
31.25.137.0/24 maxlen: 24
31.25.138.0/24 maxlen: 24
31.25.139.0/24 maxlen: 24
31.25.140.0/24 maxlen: 24
31.25.141.0/24 maxlen: 24
130.255.92.0/24 maxlen: 24
130.255.93.0/24 maxlen: 24
130.255.94.0/24 maxlen: 24
130.255.95.0/24 maxlen: 24
159.255.160.0/22 maxlen: 22
159.255.160.0/24 maxlen: 24
159.255.161.0/24 maxlen: 24
159.255.162.0/24 maxlen: 24
159.255.163.0/24 maxlen: 24
159.255.164.0/24 maxlen: 24
185.14.248.0/23 maxlen: 23
185.14.250.0/24 maxlen: 24
185.101.236.0/24 maxlen: 24
185.101.237.0/24 maxlen: 24
185.101.238.0/24 maxlen: 24
185.101.239.0/24 maxlen: 24
185.184.198.0/24 maxlen: 24
185.184.199.0/24 maxlen: 24
185.212.33.0/24 maxlen: 24
2a03:bcc0:1::/48 maxlen: 48
2a13:ef40:1::/48 maxlen: 48
2a13:ef47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ee:04:fb:fd:da:7b:44:48:93:8d:a4:80:d9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=043bbc8079082418485b4372bf2f77b4ed7755bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:b9:90:6a:a9:f5:d6:67:24:d8:8c:63:aa:
60:f8:17:68:d1:df:48:bd:68:c5:53:04:6a:b9:00:
3b:9f:68:53:19:59:1a:ec:11:8a:c7:38:e3:aa:4e:
0b:fb:95:84:bc:62:61:f4:41:9c:d5:10:6d:6f:4c:
44:35:41:29:58:e1:1d:e9:7d:83:d6:f9:01:49:77:
2d:0c:b1:5c:ad:5b:72:3b:fa:d8:c1:f0:b4:7b:48:
74:48:db:b3:01:0b:6e:22:64:d2:98:8b:41:ad:b5:
3a:a9:6c:81:60:f5:7c:ac:22:ac:9a:c8:18:a0:cf:
32:c6:ec:8e:09:14:69:18:5e:41:97:26:0b:28:54:
88:68:7d:3b:3d:94:68:1c:11:63:f4:07:06:00:f3:
bb:65:60:d4:c0:d3:ba:cf:ad:93:62:7c:59:ca:8d:
2d:bd:6b:a0:ea:0d:c9:9e:f2:26:86:07:71:3c:7d:
82:87:f5:d6:33:77:a3:51:40:3c:01:c8:bb:5b:40:
1d:81:c3:a4:6d:5c:50:3d:82:46:02:16:ca:22:27:
87:05:ee:ca:ec:4b:56:67:3d:fa:72:fd:bd:dc:fe:
e8:4a:e8:59:26:b9:40:63:0b:47:e1:4f:0e:42:fd:
74:bf:0d:ce:e3:21:15:6b:63:4f:e3:ab:5f:54:f4:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:BC:80:79:08:24:18:48:5B:43:72:BF:2F:77:B4:ED:77:55:BC
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/BDu8gHkIJBhIW0Nyvy93tO13Vbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.136.0-31.25.141.255
130.255.92.0/22
159.255.160.0-159.255.164.255
185.14.248.0-185.14.250.255
185.101.236.0/22
185.184.198.0/23
185.212.33.0/24
IPv6:
2a03:bcc0:1::/48
2a13:ef40:1::/48
2a13:ef47::/32
Signature Algorithm: sha256WithRSAEncryption
96:f6:cb:6d:b1:67:c9:4d:a7:91:1a:36:bb:70:c3:19:76:58:
6f:d7:29:5e:41:e7:c9:7d:66:ff:67:04:44:86:e8:32:16:a0:
e8:1f:46:5f:e3:13:08:67:e5:1e:cd:ec:13:f4:3b:7f:d6:f3:
a3:09:0d:05:3d:74:49:ca:36:f7:8f:59:fe:35:ea:cd:4f:36:
23:0d:f4:88:6a:0b:71:df:06:f9:9c:f9:9f:1c:3e:77:57:f8:
fe:b7:f5:b1:78:34:ae:bd:1b:af:2d:31:50:15:48:e6:da:ed:
a1:73:27:25:c1:42:14:50:69:4b:82:72:c2:81:c5:31:1b:f9:
2b:92:f9:37:f7:cc:b8:f6:1b:1e:96:d6:2f:c4:e7:69:c4:36:
e4:b2:0c:c0:b1:ea:95:33:e4:8c:68:f9:ba:27:f3:15:be:4e:
8c:fa:16:84:90:37:f2:eb:2f:2f:4a:f7:63:41:76:43:a2:9e:
15:67:a4:2d:1b:9b:a5:48:dc:ee:3d:09:f0:47:c5:ce:99:89:
60:2e:c1:8b:ec:9d:62:1b:e0:1e:2a:eb:be:34:8a:32:52:07:
04:89:cf:89:e5:b1:a8:8e:00:1b:d0:8e:c2:fb:fd:85:ee:bb:
7c:51:d8:4a:66:0e:77:07:d2:ca:64:aa:f5:16:9f:f2:5f:fa:
80:21:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:46 2025 by rpki-client on console.sobornost.net