Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/vBbw-4MxcReP3ao6MqHjBCu3GcI.roa
File: vBbw-4MxcReP3ao6MqHjBCu3GcI.roa (raw, json)
Hash identifier: W28uSnDMlGVkrCQsXwIvXwkvC/TrS+441MfK9XqL5Zo=
Subject key identifier: BC:16:F0:FB:83:31:71:17:8F:DD:AA:3A:32:A1:E3:04:2B:B7:19:C2
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 019421B2325B4C29B84557DD8B99237C96C7
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/vBbw-4MxcReP3ao6MqHjBCu3GcI.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49535
IP address blocks: 185.151.124.0/22 maxlen: 22
185.151.124.0/24 maxlen: 24
185.151.125.0/24 maxlen: 24
188.94.192.0/21 maxlen: 21
188.94.192.0/24 maxlen: 24
188.94.193.0/24 maxlen: 24
188.94.194.0/24 maxlen: 24
188.94.195.0/24 maxlen: 24
188.94.196.0/24 maxlen: 24
188.94.197.0/24 maxlen: 24
188.94.198.0/24 maxlen: 24
188.94.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:5b:4c:29:b8:45:57:dd:8b:99:23:7c:96:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc16f0fb833171178fddaa3a32a1e3042bb719c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:74:ad:60:f9:13:60:f0:48:44:7d:8c:13:
0f:c3:3e:ac:b4:8a:50:02:4e:98:7e:31:35:5b:4d:
e7:e6:55:cc:19:e1:21:5e:d0:d0:0e:62:b5:66:fb:
9e:08:2a:12:9c:b0:1c:82:70:dc:33:59:a9:92:d6:
62:94:01:21:4a:6b:a4:6b:26:fc:30:74:a9:f7:78:
ee:53:46:f7:b9:6f:17:c3:1b:9d:d8:23:8a:a4:85:
5d:89:11:6d:79:2f:4d:db:b3:7a:99:02:e3:aa:f6:
66:cd:47:f1:58:44:53:26:93:4b:2a:1b:74:fc:29:
0b:f2:7a:c2:07:01:a1:b5:0f:0b:25:3b:b5:bb:92:
1f:57:c0:a8:41:08:29:9a:f6:70:37:0c:ed:43:ea:
81:ea:82:f4:9c:39:d5:81:29:d6:00:6c:8d:05:b9:
29:64:c5:94:b4:dc:c3:ca:d0:11:f6:6d:aa:ba:4e:
4f:37:eb:c5:b0:64:2b:a4:9a:59:63:99:95:20:81:
e4:2e:e8:ec:9b:d3:36:b7:41:a3:06:98:b6:2a:c9:
0a:51:15:9f:f0:01:36:62:ef:ae:29:3c:83:cf:54:
ee:4d:01:e3:85:0e:60:7d:51:37:dc:83:a6:5d:3a:
48:8b:06:50:ce:ae:de:42:1b:e4:43:52:43:1f:bb:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:16:F0:FB:83:31:71:17:8F:DD:AA:3A:32:A1:E3:04:2B:B7:19:C2
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/vBbw-4MxcReP3ao6MqHjBCu3GcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.124.0/22
188.94.192.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:f9:af:5c:fb:28:7d:4c:79:70:4b:7c:e5:35:13:57:ab:71:
98:90:00:0b:04:52:cf:68:a6:5c:41:99:11:73:9e:3e:95:85:
d7:ab:25:46:bc:16:ab:6b:a3:44:9e:bf:1a:de:a3:89:d1:b7:
82:11:be:eb:5c:6c:67:2f:25:18:e0:76:ea:bc:9a:c1:1f:b7:
0a:40:8d:8f:46:2c:cd:9f:b5:38:07:b8:6f:53:3e:9d:cb:75:
d9:72:70:20:5d:2b:a4:a9:a8:b6:8f:66:c7:03:e8:c3:b7:c1:
7a:d8:af:fa:0c:08:ae:81:ed:0d:70:37:0e:69:c9:f5:ff:a8:
9c:66:df:83:8e:e4:c2:31:93:bb:88:bf:37:e5:34:71:79:b1:
50:e1:3f:cd:fa:32:9c:92:61:cb:c2:5b:3d:df:c1:30:50:ab:
2c:d9:f3:80:6d:30:f0:89:8e:b6:07:2e:02:c8:67:ee:b3:a8:
6f:a4:5b:b9:4b:ef:e0:2f:ec:fd:53:75:f1:74:7b:9e:ac:d4:
6c:69:69:2b:87:d1:3d:ee:24:07:48:3b:4f:6a:73:ba:42:1f:
2e:88:50:dd:20:df:bb:89:07:79:bd:3c:21:ef:d2:fb:f7:33:
3e:fc:fb:02:22:e3:33:b0:0e:c9:c5:6a:88:95:99:5b:b4:0d:
f3:6c:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net