Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/br9nNW8HTMSPThu0IYs9YJPit9M.roa
File: br9nNW8HTMSPThu0IYs9YJPit9M.roa (raw, json)
Hash identifier: +GZtKTMjwkIHJlC7o9X+rvG+Xi3NBXRyc3GslA3d0UQ=
Subject key identifier: 6E:BF:67:35:6F:07:4C:C4:8F:4E:1B:B4:21:8B:3D:60:93:E2:B7:D3
Certificate issuer: /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial: 0194228DD0B23C6FF9887040A69FBFEA4F30
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/br9nNW8HTMSPThu0IYs9YJPit9M.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28928
IP address blocks: 194.11.172.0/22 maxlen: 22
194.11.176.0/21 maxlen: 21
194.11.184.0/23 maxlen: 23
194.11.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d0:b2:3c:6f:f9:88:70:40:a6:9f:bf:ea:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ebf67356f074cc48f4e1bb4218b3d6093e2b7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:99:8d:8a:62:a1:e4:dc:2d:5d:f1:03:88:
37:ea:c8:04:f0:13:c8:e9:9f:5a:1b:9e:34:ce:0a:
19:16:b6:0f:9d:1a:79:20:7b:56:ea:cc:61:b0:9a:
cc:42:6c:33:ea:71:6d:62:22:28:09:e5:2f:1e:0c:
78:0d:26:2b:e6:14:b8:b0:0e:aa:c8:16:4b:f9:51:
c5:38:b2:52:01:d9:99:e0:f9:88:e9:3e:dd:d9:0f:
63:d0:e0:54:72:64:ac:3d:35:14:c2:5c:52:f2:ed:
63:bb:d8:0d:7f:c4:30:46:9b:44:2c:44:e3:bf:2e:
52:21:af:75:db:38:31:67:a9:12:64:e1:9a:97:d4:
e8:b4:a0:eb:73:ef:4a:24:d0:b2:d2:84:f1:66:94:
84:04:91:25:a3:9b:2f:e6:30:dc:74:e0:71:c6:84:
b9:30:80:b1:10:41:8b:c9:7b:8e:65:90:d8:25:cc:
68:bc:d3:82:3e:3a:a6:20:fd:d4:28:3a:5e:6d:c8:
73:76:8b:27:b1:b1:ba:3d:c8:c1:b0:85:9c:7d:c8:
f3:13:2d:c8:77:c3:7e:f2:b0:28:35:92:36:3b:ee:
3e:a0:35:df:88:7d:09:34:37:4e:a4:6f:d6:b9:91:
63:56:95:6a:f5:d2:b8:d2:6c:e9:00:86:06:ed:cd:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:67:35:6F:07:4C:C4:8F:4E:1B:B4:21:8B:3D:60:93:E2:B7:D3
X509v3 Authority Key Identifier:
keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/br9nNW8HTMSPThu0IYs9YJPit9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.172.0-194.11.186.255
Signature Algorithm: sha256WithRSAEncryption
09:93:f5:28:d2:da:50:b5:c8:1c:37:63:7f:cc:9e:a8:0d:c5:
b0:b6:63:5f:9c:bd:cc:88:7c:b8:e2:49:11:74:3c:b8:f6:31:
dc:bb:37:50:63:72:f0:34:1c:44:38:ab:83:f4:34:20:00:16:
02:e2:ab:fb:99:d2:22:08:ad:4c:a1:f7:31:9f:95:d0:0a:c6:
00:03:26:45:68:a6:28:1e:16:3a:6e:4e:e8:2f:6a:ab:56:83:
59:20:51:cb:5f:5f:87:77:c7:90:d9:b4:6b:bc:18:56:8e:73:
2e:42:18:5c:cb:d3:23:f6:a0:09:bd:ed:51:71:8f:0d:b3:32:
b3:74:21:5f:49:d1:a1:b3:55:49:7a:fa:39:8a:ec:54:23:4b:
28:d4:9e:a4:d9:b5:5a:ec:5e:08:b6:ef:57:60:c6:c4:ae:39:
52:94:c4:66:ad:4e:b1:48:4d:8e:b5:f6:f8:cf:c6:25:a2:ca:
bf:fa:59:c9:4f:ff:e9:64:77:61:41:b1:06:fe:67:21:94:f6:
f5:fe:95:5c:1d:fa:62:dd:a0:45:83:df:ef:67:01:8c:0c:48:
32:63:77:f1:78:61:7d:05:f4:f3:9c:26:45:7f:10:69:b9:43:
87:a2:3b:3a:01:03:ef:ef:96:f6:b4:7f:8e:16:7b:66:87:68:
88:ba:a2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net