Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BmRc3vRXaWW56t-nNSSPweNCiMs.roa
File: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (raw, json)
Hash identifier: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=
Subject key identifier: 06:64:5C:DE:F4:57:69:65:B9:EA:DF:A7:35:24:8F:C1:E3:42:88:CB
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 0194B9AC0874628687E745F9082DF6A88B74
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BmRc3vRXaWW56t-nNSSPweNCiMs.roa
Signing time: Fri 31 Jan 2025 00:04:06 +0000
ROA not before: Fri 31 Jan 2025 00:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 83.147.248.0/22 maxlen: 22
91.186.200.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:ac:08:74:62:86:87:e7:45:f9:08:2d:f6:a8:8b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Jan 31 00:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06645cdef4576965b9eadfa735248fc1e34288cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:5e:cd:11:f0:d4:12:a1:b8:2b:53:cd:be:
70:01:2a:9a:f6:a9:6a:33:25:65:04:64:0b:be:3d:
d4:69:98:3a:1c:89:83:cb:d0:0b:d8:0b:4f:0c:f3:
00:d7:42:41:8f:b1:07:1d:4a:e9:84:b4:9e:c8:48:
de:4e:f0:c6:61:78:70:61:87:56:bd:6c:6e:62:89:
2f:9b:b3:a3:12:10:94:61:7c:19:f1:f6:3a:ef:06:
b1:d0:0a:23:8f:c7:04:bf:ba:88:bc:9c:6f:2e:c2:
bb:67:fe:67:ff:04:3b:7a:2a:61:35:56:e4:c4:d6:
f4:0e:a6:ed:8f:c8:68:38:64:39:bc:f1:8a:e0:74:
c3:97:c7:bf:04:78:be:4a:21:bc:42:0a:78:67:49:
4c:03:3f:a1:c2:01:11:25:b2:82:ac:81:55:15:13:
da:5e:ca:89:f1:44:3d:62:eb:8b:82:30:3b:68:48:
0a:45:4b:29:1d:fb:79:9c:e6:cd:8d:f5:a4:00:85:
e4:e0:b4:59:0c:2b:c1:0f:7a:ae:72:39:29:af:a3:
ae:ea:9f:99:8e:5f:41:21:89:a4:8d:04:d1:2d:72:
eb:21:2a:46:d5:b5:16:2e:ce:4f:a7:c5:02:ed:75:
33:27:70:b7:d4:15:2a:39:f1:57:e1:99:ec:31:58:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:64:5C:DE:F4:57:69:65:B9:EA:DF:A7:35:24:8F:C1:E3:42:88:CB
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/BmRc3vRXaWW56t-nNSSPweNCiMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
48:46:40:99:37:c3:58:59:bb:7b:b3:2a:d4:51:76:8b:e3:5f:
2b:eb:78:11:8e:23:b4:3e:3c:c6:68:e5:6a:22:ae:34:3c:07:
2d:ec:9c:c2:2f:8a:50:44:08:4d:97:25:41:40:f9:2a:46:f3:
10:01:a1:fa:0b:e2:28:91:c2:e1:56:51:2e:50:12:a6:5a:1b:
d6:3f:f3:c2:bf:7b:b5:45:5a:e7:15:02:84:b1:68:dd:88:7a:
7a:24:9a:93:92:25:cf:33:a7:3e:42:e2:51:f5:c8:cc:63:5c:
48:7e:71:2b:35:a1:2c:68:aa:cf:01:72:3b:31:42:8b:35:e3:
36:5d:dc:9f:9b:64:c3:28:1f:02:ea:a6:50:d6:ff:f1:59:25:
6d:0f:6c:9c:c2:f3:5c:36:1d:87:45:8f:ce:a6:ce:19:af:2b:
04:ca:44:94:7d:70:73:ae:93:48:b4:34:b1:56:3e:ef:09:15:
8e:12:d3:ea:e1:91:28:b3:eb:0b:3f:3d:66:55:3c:4c:3d:74:
da:21:2e:e0:83:7f:44:62:f5:1d:56:10:36:89:2c:47:d4:3d:
db:46:fd:d1:e5:a5:0b:e8:20:99:86:8c:cd:f7:c3:5f:f2:e7:
2a:af:b8:99:0a:1a:b7:ef:2e:72:c5:7d:b1:92:02:46:4d:fd:
94:1c:b6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net