Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/BmvH7Z7uqcJeleMQ8G7clQImys0.roa
File: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (raw, json)
Hash identifier: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=
Subject key identifier: 06:6B:C7:ED:9E:EE:A9:C2:5E:95:E3:10:F0:6E:DC:95:02:26:CA:CD
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 0194DA9C836DE75FA2CFAFE47B5B92287A44
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/BmvH7Z7uqcJeleMQ8G7clQImys0.roa
Signing time: Thu 06 Feb 2025 09:34:37 +0000
ROA not before: Thu 06 Feb 2025 09:34:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200937
IP address blocks: 185.90.148.0/24 maxlen: 24
185.90.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:9c:83:6d:e7:5f:a2:cf:af:e4:7b:5b:92:28:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Feb 6 09:34:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=066bc7ed9eeea9c25e95e310f06edc950226cacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:2b:47:09:08:0c:83:66:8c:8a:80:68:98:
69:5a:51:cb:c1:8b:31:ed:c0:99:8a:99:98:f8:79:
00:92:12:38:06:81:98:ea:cb:77:5c:18:e4:36:51:
f8:ec:78:e6:dd:5e:58:fe:01:46:b4:08:f2:e8:1a:
27:c6:22:5c:fb:3c:03:e7:c7:33:82:23:92:eb:6c:
fe:63:29:88:1f:f3:30:10:8e:5e:c6:a6:f0:69:53:
a0:0f:fb:aa:cd:27:76:56:22:77:2d:bb:4a:d9:af:
00:66:f2:23:1f:e3:b9:b5:f2:19:48:76:b3:97:37:
b0:66:11:ff:df:49:c5:93:58:78:0f:d4:16:64:92:
8a:94:ac:7f:3f:2b:4f:c8:9d:ee:cd:34:14:f1:4c:
82:78:0f:4e:76:bc:57:e2:1f:fd:59:d0:b0:18:7d:
b3:bf:36:d3:d6:14:68:f2:ef:0f:51:1c:ee:d9:c5:
db:61:68:6f:65:5e:19:e3:95:d4:10:11:30:15:92:
ff:f8:67:29:fc:63:28:a3:01:71:c9:e1:aa:90:3d:
98:ff:59:37:e9:3c:76:a4:bc:61:cf:89:70:e5:21:
44:6f:e2:25:1c:1d:4a:c6:d2:24:d2:17:db:50:84:
d6:8e:82:51:97:92:4f:f6:a8:7e:d7:7a:c7:5b:72:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6B:C7:ED:9E:EE:A9:C2:5E:95:E3:10:F0:6E:DC:95:02:26:CA:CD
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/BmvH7Z7uqcJeleMQ8G7clQImys0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:48:27:bb:68:40:19:10:45:76:bf:f1:c5:8d:17:8a:b9:e9:
af:71:71:ad:85:43:68:9d:d1:1e:31:03:5a:a1:ca:ab:62:5a:
79:3c:8f:d8:cf:9c:3a:8a:92:04:85:8b:9a:c6:35:36:ba:34:
20:df:4a:b1:37:cb:e6:cd:f9:1e:d6:a1:07:53:fc:d9:2c:26:
6e:e0:44:f7:e4:09:ee:d5:b0:d8:ca:af:46:a9:64:e9:bc:ad:
e5:14:e3:77:b8:8e:8c:6a:25:30:d1:f9:bb:21:35:fa:70:e8:
53:ae:6a:9b:49:39:98:9f:a7:3d:ff:ca:69:de:9f:2f:88:20:
1a:c9:a7:18:7b:d3:a8:00:6e:bb:3d:61:97:90:64:80:7a:b5:
8b:6f:58:85:33:84:c2:74:1c:85:ed:be:86:98:ae:4c:4b:11:
a0:2d:9c:65:76:ac:f8:a1:ca:53:32:0a:65:a3:63:1b:91:ed:
e8:ca:a9:10:8f:a8:40:b9:e3:ae:65:9b:4d:cd:49:95:43:22:
20:18:26:6f:a4:15:c0:f3:fb:b1:38:42:b4:99:11:83:7c:ef:
81:97:8a:4e:f9:f2:86:26:b4:45:ae:7e:39:0e:42:c0:28:9b:
f3:3b:06:29:47:dd:2a:e1:d6:2b:0e:d6:f5:c4:a7:c6:16:c3:
f3:61:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net