Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/bAVuGQzdPS5J99RRvauzI0lAXiI.roa
File: bAVuGQzdPS5J99RRvauzI0lAXiI.roa (raw, json)
Hash identifier: dsDh+rPTeqK66wBHssSWXI6rp+Bd6WWjab0BezgWtpw=
Subject key identifier: 6C:05:6E:19:0C:DD:3D:2E:49:F7:D4:51:BD:AB:B3:23:49:40:5E:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 0194266BD884BDCFBA60777FDA8099525600
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/bAVuGQzdPS5J99RRvauzI0lAXiI.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204949
IP address blocks: 185.219.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d8:84:bd:cf:ba:60:77:7f:da:80:99:52:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c056e190cdd3d2e49f7d451bdabb32349405e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d7:93:e5:b7:d7:d5:e3:18:cb:54:01:12:b0:
b2:be:1e:e0:8e:13:2a:cd:e1:48:9c:ff:64:68:70:
d6:2a:d9:60:d2:84:dc:23:c7:96:91:c3:cd:82:71:
02:85:5d:7c:c5:aa:84:f3:e1:2f:0a:af:3a:d0:b6:
34:ac:2b:5b:90:22:cc:82:87:98:aa:d7:7b:02:40:
db:b1:bc:7a:dc:4f:03:77:9f:3f:7a:8e:21:28:63:
5f:52:66:a6:07:53:9c:89:eb:bc:c2:78:a9:29:f1:
15:45:98:ac:fc:ba:92:47:05:c0:ac:95:39:82:8a:
b4:db:e4:e0:5a:b7:a4:44:9c:c3:2e:04:cb:ba:07:
fd:a5:62:61:b1:32:0b:b1:01:96:15:83:20:75:3c:
c1:66:dc:cc:91:76:71:7b:32:c4:97:53:be:8c:db:
bc:ed:8f:38:b2:bf:be:d7:e6:dc:b9:37:b9:d0:07:
79:a9:57:7b:80:27:ce:95:12:a4:b7:61:28:2c:67:
f1:c0:49:3c:f0:8e:62:ab:96:b1:f9:62:22:df:7b:
35:d2:c3:50:9e:0f:8a:d7:fb:8d:81:10:a1:d0:8d:
08:44:97:e9:38:57:06:5f:6a:3b:98:99:f5:74:72:
10:49:a2:62:31:bd:17:8f:a3:6b:6c:b6:dd:16:17:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:05:6E:19:0C:DD:3D:2E:49:F7:D4:51:BD:AB:B3:23:49:40:5E:22
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/bAVuGQzdPS5J99RRvauzI0lAXiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:26:42:42:f5:51:6c:e7:41:f4:c8:86:cd:52:97:39:f2:1d:
56:3f:92:93:6e:72:31:f9:31:23:79:ae:64:d0:5d:97:50:49:
53:57:c0:09:27:65:a9:f4:1a:71:5c:45:d5:30:5f:95:60:d7:
4d:1f:45:86:2f:e6:83:8b:e6:fa:89:ea:a6:32:24:b6:5e:4f:
cd:3b:ed:9d:d1:33:77:5f:bd:8e:ab:07:68:d4:43:f8:a2:3a:
f4:70:1b:77:93:f7:4e:cd:97:ce:d9:9f:4a:49:95:45:3a:71:
1b:49:2b:0a:05:4c:8d:de:76:bd:fd:8b:93:b6:74:77:5f:b4:
23:52:48:2e:08:b8:9f:3a:d2:bd:ef:86:ed:7c:5c:db:28:e8:
de:7f:c7:19:a1:40:03:12:ec:5b:d6:9c:e8:fe:09:54:3f:b6:
9a:fd:3c:ac:19:ee:20:56:eb:e6:47:64:a8:e9:f1:2b:d0:62:
9b:ff:b0:86:57:32:42:c9:79:6f:cd:a7:16:68:b0:b7:fe:c5:
53:a7:94:19:7e:57:97:9c:6e:e2:c2:80:11:f5:c1:df:3f:14:
34:4a:86:e5:c1:7c:b6:01:e9:f4:83:67:d5:3d:41:ba:e7:80:
87:f2:d4:b2:6f:71:16:32:1d:a2:c9:83:f8:a6:09:35:04:7b:
4a:b1:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net