Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BlHbHmS9mfkajRuSB3z2gulWa4w.roa
File: BlHbHmS9mfkajRuSB3z2gulWa4w.roa (raw, json)
Hash identifier: 2NYsBQd+cKdEzefz9xVkvbQtLnorX83b/kJ3iVuR3NQ=
Subject key identifier: 06:51:DB:1E:64:BD:99:F9:1A:8D:1B:92:07:7C:F6:82:E9:56:6B:8C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01947ACFCDEE6450CCA4D2FA8F447E28A166
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BlHbHmS9mfkajRuSB3z2gulWa4w.roa
Signing time: Sat 18 Jan 2025 19:07:06 +0000
ROA not before: Sat 18 Jan 2025 19:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
176.125.251.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:cf:cd:ee:64:50:cc:a4:d2:fa:8f:44:7e:28:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 18 19:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0651db1e64bd99f91a8d1b92077cf682e9566b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:cc:9b:89:81:04:a6:2e:f3:e6:6f:99:2f:
ff:97:6b:9f:0a:6d:7d:fe:cd:8d:ad:88:b6:11:67:
01:9b:73:ff:09:c0:6c:ac:fa:f1:8a:d2:c2:54:a3:
4c:9c:f0:bb:3f:53:23:73:55:14:9b:9e:4a:54:e1:
df:c8:97:9a:60:21:01:26:fd:84:0c:88:9d:f3:ea:
4c:f8:cd:4a:57:2c:14:87:9a:10:25:04:38:64:fd:
7e:39:15:17:a7:72:48:48:07:63:6b:e4:a0:e2:c8:
eb:be:01:29:ab:08:fc:7d:78:10:6f:2e:6a:0c:7b:
49:17:19:ec:49:d3:b3:23:85:7f:e0:1e:c1:56:cc:
ad:d7:5c:96:07:8e:40:12:33:1a:33:75:1e:f9:a3:
bf:e2:a7:9b:8e:98:7e:e0:09:94:61:34:90:87:b7:
98:cb:60:4e:fa:80:20:f3:22:df:a8:65:2f:80:7a:
08:88:31:55:f3:89:f4:99:c3:74:74:15:af:8b:c2:
b0:fa:fa:89:78:8a:6d:2b:e4:7b:9d:cf:71:77:b4:
8a:1d:42:a7:3c:f2:02:2d:51:0d:78:86:67:37:01:
39:60:a9:fe:fb:23:6e:fa:2e:85:82:d0:cf:b0:8e:
8d:76:03:40:5a:13:17:5e:2d:a0:0b:53:5b:ce:a5:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:DB:1E:64:BD:99:F9:1A:8D:1B:92:07:7C:F6:82:E9:56:6B:8C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BlHbHmS9mfkajRuSB3z2gulWa4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
176.125.251.0/24
185.199.213.0/24
185.221.26.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e2:07:6e:49:3a:c3:7a:70:bb:d1:13:13:25:48:01:22:88:
87:f3:7a:1c:43:2b:99:4d:24:3c:8b:21:fc:06:cd:2b:d1:ae:
2b:52:38:b8:99:35:a5:25:fa:0b:ed:10:30:e4:75:84:03:dc:
d0:3a:f4:91:f8:d4:a1:e9:b9:79:88:21:e5:e3:f3:db:be:bc:
92:38:6c:c7:b1:d7:6f:6b:21:21:07:27:e4:56:8b:38:d2:11:
8c:6f:0d:79:71:85:09:93:ff:bd:93:e8:50:a9:1b:b3:82:8a:
52:45:e8:d6:bc:57:ad:b8:34:c4:17:8f:3c:c4:f3:55:0c:de:
34:f3:3d:97:89:1a:77:6a:0f:a4:70:d6:87:14:8f:14:ae:48:
09:c6:a1:49:ce:39:06:df:19:16:14:01:b6:e0:52:e1:4f:09:
8d:45:8e:fd:56:db:20:ae:db:8d:13:ce:aa:a3:4f:86:4f:bb:
3b:88:da:d5:53:30:ab:51:22:b4:c1:19:fe:08:c7:7f:18:ef:
95:f3:4f:1b:78:bc:d0:9c:66:03:1e:2c:1a:e9:1b:7a:ef:20:
66:7d:99:e1:ef:25:49:00:1b:81:8c:cf:0b:df:68:ec:76:9d:
4d:7a:7d:8d:0b:cf:d9:db:d2:4c:c7:1b:97:9e:1a:fb:ed:58:
f7:8b:ee:a5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZR6z83uZFDMpNL6j0R+KKFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjUwMTE4MTkwNzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjUxZGIxZTY0YmQ5OWY5MWE4ZDFiOTIwNzdjZjY4MmU5NTY2YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut7Mm4mBBKYu8+ZvmS//l2ufCm19
/s2NrYi2EWcBm3P/CcBsrPrxitLCVKNMnPC7P1Mjc1UUm55KVOHfyJeaYCEBJv2E
DIid8+pM+M1KVywUh5oQJQQ4ZP1+ORUXp3JISAdja+Sg4sjrvgEpqwj8fXgQby5q
DHtJFxnsSdOzI4V/4B7BVsyt11yWB45AEjMaM3Ue+aO/4qebjph+4AmUYTSQh7eY
y2BO+oAg8yLfqGUvgHoIiDFV84n0mcN0dBWvi8Kw+vqJeIptK+R7nc9xd7SKHUKn
PPICLVENeIZnNwE5YKn++yNu+i6FgtDPsI6NdgNAWhMXXi2gC1NbzqUcQwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAZR2x5kvZn5Go0bkgd89oLpVmuMMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvQmxIYkhtUzltZmthalJ1U0IzejJndWxXYTR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALZv+AwQA
sH37AwQAucfVAwQAud0aAwQAufoaMA0GCSqGSIb3DQEBCwUAA4IBAQBP4gduSTrD
enC70RMTJUgBIoiH83ocQyuZTSQ8iyH8Bs0r0a4rUji4mTWlJfoL7RAw5HWEA9zQ
OvSR+NSh6bl5iCHl4/PbvrySOGzHsddvayEhByfkVos40hGMbw15cYUJk/+9k+hQ
qRuzgopSRejWvFetuDTEF488xPNVDN408z2XiRp3ag+kcNaHFI8UrkgJxqFJzjkG
3xkWFAG24FLhTwmNRY79VtsgrtuNE86qo0+GT7s7iNrVUzCrUSK0wRn+CMd/GO+V
808beLzQnGYDHiwa6Rt67yBmfZnh7yVJABuBjM8L32jsdp1Nen2NC8/Z29JMxxuX
nhr77Vj3i+6l
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:23 2025 by rpki-client on console.sobornost.net