Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/bHETVGvggsNe0a6WvXBELNSVwc4.roa
File: bHETVGvggsNe0a6WvXBELNSVwc4.roa (raw, json)
Hash identifier: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=
Subject key identifier: 6C:71:13:54:6B:E0:82:C3:5E:D1:AE:96:BD:70:44:2C:D4:95:C1:CE
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 019422FBB28D60327C27A923AF01930CBD8B
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/bHETVGvggsNe0a6WvXBELNSVwc4.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13135
IP address blocks: 185.132.220.0/22 maxlen: 24
192.76.134.0/24 maxlen: 24
212.12.48.0/21 maxlen: 24
213.238.56.0/21 maxlen: 24
2a00:14b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:8d:60:32:7c:27:a9:23:af:01:93:0c:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c7113546be082c35ed1ae96bd70442cd495c1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:52:92:0c:61:86:3c:d3:49:9a:9b:e1:57:
b6:c5:e4:a3:77:25:c5:92:2b:71:1c:3f:8c:20:0a:
fb:bc:c6:ea:dc:9b:39:14:ea:8e:f7:c2:42:70:af:
94:81:fe:13:13:5f:7b:92:fb:72:18:af:c4:81:d7:
0a:33:5a:1c:70:79:f5:b5:3d:93:7f:6a:2e:66:0c:
9d:5b:db:b2:c8:55:5c:24:f8:23:16:36:16:e0:08:
61:54:06:fa:d9:26:15:a6:9d:62:9b:fe:3b:b8:11:
55:b2:3e:84:5e:b3:44:dd:68:78:85:bc:29:ad:ee:
64:17:4a:ad:97:02:82:79:50:2c:97:e1:2f:a3:0c:
39:e3:4b:59:86:06:8b:84:c3:5d:ba:c6:33:80:0f:
c6:07:b4:53:68:80:a6:b2:c2:f8:78:c0:fb:50:e9:
80:d5:3c:2a:76:3a:13:92:89:c6:8e:79:de:a7:78:
58:b8:bf:b8:ad:7c:7f:69:86:23:35:c9:b8:19:48:
0b:10:4f:a5:bb:0a:c8:16:9f:29:90:d8:6b:68:16:
b2:14:06:00:ee:0c:1b:2e:7d:b0:45:d9:25:25:6f:
16:be:37:f2:5b:7a:f9:fd:90:65:5a:0b:e3:a1:16:
66:55:8c:b9:a2:a9:5c:97:96:1e:ce:00:dc:9d:73:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:13:54:6B:E0:82:C3:5E:D1:AE:96:BD:70:44:2C:D4:95:C1:CE
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/bHETVGvggsNe0a6WvXBELNSVwc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.220.0/22
192.76.134.0/24
212.12.48.0/21
213.238.56.0/21
IPv6:
2a00:14b0::/32
Signature Algorithm: sha256WithRSAEncryption
48:bf:c6:21:16:fc:9f:ed:b3:74:d5:9e:80:7c:18:6c:10:6d:
3d:bb:1f:c1:23:f6:32:2a:e4:44:4c:b4:5b:13:33:bb:33:00:
3f:5e:b9:0a:2c:0d:be:03:0b:b0:19:b0:2d:c5:5b:11:6f:2d:
09:02:75:07:06:57:8d:ac:0e:1e:7d:1d:39:ef:fa:9d:49:9f:
12:c6:1a:2c:2d:12:de:cb:3e:82:60:1d:06:1b:93:41:fb:06:
2c:13:9c:c2:d1:f9:1d:97:6e:4a:8f:7b:d6:a8:08:dc:5a:27:
f7:ee:8c:78:30:e8:22:e5:af:f3:ed:90:1b:39:a5:48:e9:f9:
77:a3:8e:3d:d4:dd:70:8b:56:33:ff:40:7f:c0:90:38:05:c6:
8c:10:e2:17:06:e0:aa:5d:87:f3:e8:43:65:13:30:c5:72:54:
ff:68:27:30:32:cc:2e:63:55:ea:fd:5b:d0:18:95:17:6c:7d:
bc:45:e1:cc:2b:19:d1:e9:51:17:a1:65:4a:0c:5b:e2:c6:d4:
a6:cf:81:10:70:83:3f:88:6c:ae:41:a6:4a:cf:b6:70:17:7b:
42:af:da:67:85:93:6b:6f:cd:03:de:fc:e1:e3:66:fa:a6:07:
fe:80:36:42:a1:95:c4:0d:e1:f2:e2:b5:e8:f3:a1:53:fe:58:
4f:2f:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:40 2025 by rpki-client on console.sobornost.net