Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa
File: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (raw, json)
Hash identifier: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=
Subject key identifier: 06:6E:1F:58:38:80:82:D4:A0:10:40:EC:A2:A5:69:D2:16:6C:FB:55
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 019422FC4C28EB8BDF4D6777616A87FF405B
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201241
IP address blocks: 185.81.32.0/22 maxlen: 22
185.81.32.0/24 maxlen: 24
185.81.33.0/24 maxlen: 24
185.81.34.0/24 maxlen: 24
185.81.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4c:28:eb:8b:df:4d:67:77:61:6a:87:ff:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=066e1f58388082d4a01040eca2a569d2166cfb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:58:3f:a6:1e:85:8c:6a:3b:01:87:c4:e1:
6c:4d:2b:ec:9f:43:d0:5c:04:22:da:e0:31:eb:da:
af:17:b6:6b:f9:c2:53:b9:31:cb:19:64:be:eb:71:
2c:75:48:fc:cb:e9:f6:d7:e1:ee:36:7a:8b:ab:50:
df:94:f9:46:e5:fb:21:6b:11:6f:35:15:77:43:9b:
0a:65:31:29:78:9d:9b:0d:85:45:c4:e4:82:f1:60:
7a:6e:40:9b:cb:88:7c:4b:55:87:30:d6:db:9d:33:
9c:3d:c8:47:5e:82:3f:9d:31:be:1f:8c:95:ea:09:
16:8a:6f:77:0d:89:73:55:06:6e:5e:f5:e9:24:18:
5f:5f:6e:7a:f5:fd:79:28:d5:fc:a4:94:e8:91:83:
a6:2d:8a:e6:e4:e0:d5:86:ec:da:5c:2b:10:8f:cd:
13:26:4e:be:b7:f7:47:66:b9:2a:98:09:f6:80:94:
4d:6c:44:f5:c3:82:c7:80:03:60:5c:49:04:db:4c:
1d:97:3a:47:5a:8a:e3:cf:57:d7:04:4a:d6:ce:c9:
d7:f5:aa:79:16:94:5c:75:21:e6:3a:c1:5b:6a:98:
38:d3:29:d9:b6:b5:d6:02:09:4f:ca:d2:e3:cd:fb:
b7:4f:04:c2:4c:51:c9:9b:7d:b3:85:b2:f6:71:f7:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:1F:58:38:80:82:D4:A0:10:40:EC:A2:A5:69:D2:16:6C:FB:55
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:f0:79:84:32:a0:09:db:b1:76:fe:7c:96:df:ac:05:64:94:
0c:e1:a2:18:5f:e2:f0:3d:55:84:0f:78:1e:65:d7:07:ba:31:
91:ac:46:09:3f:27:91:d5:45:ad:f1:8b:21:1f:b2:4b:b6:46:
c3:d6:36:8c:62:bb:41:9f:c0:2b:fd:c5:29:a5:e6:89:e8:1f:
9f:07:b8:51:48:72:ab:18:b3:f9:bb:a8:79:93:07:57:00:4b:
a5:b8:ee:d6:a8:8a:89:4b:73:dd:41:3f:9f:ac:06:92:81:9f:
1d:0d:37:84:0c:df:e1:5c:7d:33:7a:8a:5d:04:60:00:39:4a:
04:59:05:87:cd:cb:93:7a:14:f2:d4:72:33:0a:c7:06:e3:96:
52:0b:e0:0d:1f:b3:e4:93:41:35:b5:32:ff:52:01:36:f9:41:
aa:44:47:dd:2e:b3:50:2a:e3:70:24:c0:82:cb:2e:a5:9e:19:
43:6d:d3:51:19:87:43:6e:ea:30:8c:3c:40:f9:4c:ee:04:89:
07:86:ef:65:1f:d4:15:e1:df:3c:2c:c0:38:d6:ae:b3:f7:13:
7d:44:b4:b0:8b:86:6d:55:09:8f:2e:40:89:74:63:c0:07:98:
53:67:c3:4b:d9:fd:3c:06:5f:e2:21:bd:cd:39:7f:81:76:6a:
e7:b3:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:58 2025 by rpki-client on console.sobornost.net