Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/ArxWoIoACVsuecj6oH-B8iFComg.roa
File: ArxWoIoACVsuecj6oH-B8iFComg.roa (raw, json)
Hash identifier: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=
Subject key identifier: 02:BC:56:A0:8A:00:09:5B:2E:79:C8:FA:A0:7F:81:F2:21:42:A2:68
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 0195F3491CEEF0A758A5475A5D5BB555AF97
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/ArxWoIoACVsuecj6oH-B8iFComg.roa
Signing time: Tue 01 Apr 2025 21:36:49 +0000
ROA not before: Tue 01 Apr 2025 21:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60908
IP address blocks: 185.251.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f3:49:1c:ee:f0:a7:58:a5:47:5a:5d:5b:b5:55:af:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Apr 1 21:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02bc56a08a00095b2e79c8faa07f81f22142a268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:e3:68:4d:e6:54:c2:4d:87:2e:10:d9:43:
07:ff:00:73:1a:dc:85:d2:a4:f8:3b:82:44:7a:cc:
66:d5:d4:b7:56:f1:08:6d:47:07:93:73:9e:d2:ef:
a9:6f:75:54:73:47:1b:25:63:0a:da:06:17:4c:3d:
eb:f6:2b:e5:c2:91:e0:24:29:1b:2a:64:17:36:e7:
c4:1c:f4:0d:6d:41:2c:91:a5:80:1b:f8:81:59:bf:
8a:a5:9d:58:99:64:2a:28:6f:68:db:1c:5c:be:34:
29:1f:7f:14:6c:c9:20:ff:68:73:f6:aa:06:1f:a4:
c1:f3:79:eb:9f:73:29:a8:e6:f0:ec:2f:2d:47:b0:
bc:84:fa:9f:63:73:c4:f2:5b:4c:f8:c7:ce:12:b4:
67:8f:e9:12:55:0f:4b:a9:46:5e:f8:33:b0:0c:a9:
1e:50:ba:f1:30:2a:2c:e9:0d:3d:71:18:d2:1b:91:
c0:c2:c9:82:06:a7:9a:e6:04:e0:41:fa:5c:55:a9:
1b:85:30:ca:93:99:09:7c:19:e8:b9:c0:1b:00:de:
99:0b:27:3d:27:55:3a:3e:31:6b:8b:dd:25:f8:3c:
9b:72:d8:ea:60:78:eb:8b:60:a6:87:a8:2a:83:4e:
30:c9:3e:cf:ee:df:c3:59:bd:e8:f6:83:df:18:9e:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BC:56:A0:8A:00:09:5B:2E:79:C8:FA:A0:7F:81:F2:21:42:A2:68
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/ArxWoIoACVsuecj6oH-B8iFComg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:72:a5:52:eb:18:fd:9b:fc:0f:4d:e9:7c:60:77:7c:e1:f4:
43:58:1b:f4:43:bb:75:71:13:3c:f6:6f:2b:e9:52:b5:29:75:
99:c0:a1:9a:67:60:26:01:51:fa:cd:5b:db:b7:76:5b:a1:c2:
9a:3c:1e:3c:2f:e3:3e:e2:c4:03:af:69:6f:78:8a:26:0e:02:
56:e5:f2:f3:af:e1:2d:a5:4c:cb:d3:37:08:9e:39:54:65:ac:
45:5d:d1:31:94:cb:a0:24:83:eb:60:d4:81:ab:ee:e4:3b:6d:
8d:aa:87:27:da:c6:45:94:c6:c8:3f:7c:d4:fa:3b:a4:4e:d2:
0d:a2:ee:1d:2d:82:54:ef:1b:b0:5a:4f:90:e9:ad:67:95:fc:
8b:dd:ab:08:77:b7:69:3a:01:07:77:51:2f:a4:83:82:d8:7c:
cf:02:69:cb:fc:bb:7b:a0:b1:13:5a:7c:0f:18:ca:26:30:e0:
42:97:a6:e3:f7:17:07:d2:76:0f:1e:92:35:63:e9:eb:7a:25:
cc:c9:79:52:97:34:2e:c5:2b:26:0c:d4:27:70:62:5f:ac:3d:
b4:c3:05:92:2b:ca:65:d5:79:2f:16:53:97:61:53:c0:7a:30:
5f:47:63:33:9c:a4:f4:cc:53:af:1b:5c:43:75:61:98:db:8c:
b8:e9:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net