Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/bpOMGbazzT-BkrDmumTqfQYBlb0.roa
File: bpOMGbazzT-BkrDmumTqfQYBlb0.roa (raw, json)
Hash identifier: l6XZ6lFWNL3LE9dGosqgBQ/Pd0UpxiEBjNXYRa8ne5I=
Subject key identifier: 6E:93:8C:19:B6:B3:CD:3F:81:92:B0:E6:BA:64:EA:7D:06:01:95:BD
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 0194282694EDA64377BE1CD0DDC6F9B8A256
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/bpOMGbazzT-BkrDmumTqfQYBlb0.roa
Signing time: Thu 02 Jan 2025 17:53:24 +0000
ROA not before: Thu 02 Jan 2025 17:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41227
IP address blocks: 194.34.160.0/24 maxlen: 24
194.34.161.0/24 maxlen: 24
194.34.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:94:ed:a6:43:77:be:1c:d0:dd:c6:f9:b8:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 2 17:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e938c19b6b3cd3f8192b0e6ba64ea7d060195bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:3f:a7:c7:e9:2d:dc:85:49:d3:7a:0d:0d:
b6:f8:31:1e:bc:21:67:31:83:e5:d3:3d:75:e2:97:
e1:c0:ab:35:a0:16:02:83:8c:c0:74:ae:22:a1:ea:
86:d4:ea:49:74:aa:5a:b6:5f:89:58:e0:6c:85:22:
5c:b1:57:9d:50:e3:fe:5e:35:5c:56:3f:ac:82:98:
15:52:df:79:f1:da:17:2e:27:de:73:0f:a7:72:43:
f6:8d:21:31:68:12:b7:3d:39:67:28:42:01:7c:1a:
84:c1:19:dc:16:bb:3e:d1:a8:93:ab:60:ce:fe:9d:
49:31:de:a5:3f:5d:99:36:ec:73:6e:3c:4b:45:51:
70:56:e7:1b:cb:05:8b:5b:82:a6:e4:75:ef:be:ad:
e3:03:80:64:5f:89:22:54:ca:59:98:c3:24:c1:3e:
14:6e:3c:8c:f1:da:c1:e8:9e:4e:82:63:c2:78:c8:
b6:00:a5:4e:43:5a:e0:5b:09:56:ed:d1:e3:8b:9e:
b0:1b:9f:9b:2c:de:35:6a:df:47:34:39:53:69:8c:
a7:70:9d:40:35:34:ce:2c:69:ea:76:c2:0d:c1:2e:
02:fc:13:d6:6c:b6:9b:0a:8e:e5:c8:cc:32:0e:cf:
18:77:d5:f2:f3:bb:8c:57:54:7c:f7:97:f5:ef:e0:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:8C:19:B6:B3:CD:3F:81:92:B0:E6:BA:64:EA:7D:06:01:95:BD
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/bpOMGbazzT-BkrDmumTqfQYBlb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.160.0-194.34.162.255
Signature Algorithm: sha256WithRSAEncryption
19:0b:5b:35:10:9a:82:88:8a:ac:00:08:04:17:68:af:e2:db:
58:76:c4:ef:39:28:04:84:0e:a4:f4:d2:f2:6a:02:ec:e8:8b:
3e:0b:b9:79:0e:6a:9e:19:b4:a7:47:d8:13:17:bb:ab:ec:76:
87:c1:cf:66:14:ec:1f:c8:b4:69:0a:bc:8e:79:dd:1e:fa:a6:
14:11:fd:fb:b2:9d:d9:3a:76:7e:46:3c:88:71:52:a1:e9:dd:
7f:48:1d:88:bf:f4:04:f8:32:98:3f:e6:9e:ff:e2:82:ab:2f:
b6:d5:9d:5d:b0:66:2a:08:82:7a:a7:c9:2d:c8:08:ab:d5:a1:
f4:de:d5:51:f7:a3:3f:5f:12:f0:1e:8a:21:95:25:a5:13:0d:
c7:44:3d:0f:6a:16:b1:02:d9:ee:b6:02:8d:9d:fa:af:af:e1:
cf:66:06:ea:d3:38:cd:9d:7d:0a:84:a6:84:c5:1e:5b:62:05:
30:96:b1:e7:30:04:67:e2:1e:94:92:df:13:02:ee:04:ba:24:
fa:1d:78:f9:11:65:72:fa:e2:8c:b6:1e:1e:59:22:13:ca:4c:
65:b7:d2:bd:fe:55:49:95:97:98:0c:d4:23:a6:7d:fc:f1:d6:
d7:e8:f3:2f:dd:d2:b2:66:4c:ac:52:25:9b:82:11:24:d8:3a:
b0:7a:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net