Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/6bzbASHngssrN7btwpb15ed6SJ0.roa
File: 6bzbASHngssrN7btwpb15ed6SJ0.roa (raw, json)
Hash identifier: +yr1O91CJsmaXdI79v+P+t8OO+AotZIupB4bcr+PAhc=
Subject key identifier: E9:BC:DB:01:21:E7:82:CB:2B:37:B6:ED:C2:96:F5:E5:E7:7A:48:9D
Certificate issuer: /CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Certificate serial: 019421441D563B3D3102CEA71E21614249D9
Authority key identifier: 37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/6bzbASHngssrN7btwpb15ed6SJ0.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39232
IP address blocks: 178.237.64.0/20 maxlen: 20
178.237.64.0/21 maxlen: 21
178.237.72.0/21 maxlen: 21
185.81.84.0/22 maxlen: 22
185.81.84.0/23 maxlen: 23
185.81.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1d:56:3b:3d:31:02:ce:a7:1e:21:61:42:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9bcdb0121e782cb2b37b6edc296f5e5e77a489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:7f:e4:39:9f:24:5d:86:f6:87:a1:4b:6b:
f0:f1:10:26:0d:5c:24:81:fe:4c:d8:f2:17:16:cf:
f1:8d:2d:01:c3:a5:63:da:a4:a3:12:79:84:9b:90:
57:55:e8:89:1d:97:8c:b8:ea:78:e6:87:cc:3d:db:
8b:e3:d4:35:0a:4b:31:40:8f:98:3f:a3:9a:35:28:
2e:80:70:f7:7a:b4:eb:d5:30:cb:a7:e7:71:37:7c:
2c:6f:88:17:3f:1c:c1:f0:ce:ff:db:25:e9:d1:86:
87:fa:a6:d5:9e:a7:64:e6:aa:9a:97:80:c4:3a:50:
8d:5b:14:62:96:f6:cc:12:df:06:c2:8f:ca:1b:17:
d8:7a:6f:ad:c3:0a:30:d0:f8:51:d4:b1:9a:65:6e:
4b:77:4b:48:28:fe:cb:49:11:f3:7d:c3:ef:32:e7:
e9:ec:da:41:94:7c:57:b5:40:42:e6:8d:82:e4:02:
f1:83:2d:4c:9e:b0:59:50:74:d8:18:aa:f2:34:53:
77:88:d1:0e:4f:8d:f9:8c:92:81:ee:12:17:a2:88:
01:47:cc:22:8a:c7:e3:1d:3d:54:53:b5:84:20:be:
75:77:2d:08:38:a7:5d:29:95:a8:5d:a0:bb:03:62:
47:84:63:19:54:bc:f0:d0:5e:9e:d9:4f:6d:1c:53:
c3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:DB:01:21:E7:82:CB:2B:37:B6:ED:C2:96:F5:E5:E7:7A:48:9D
X509v3 Authority Key Identifier:
keyid:37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/6bzbASHngssrN7btwpb15ed6SJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.64.0/20
185.81.84.0/22
Signature Algorithm: sha256WithRSAEncryption
99:48:cc:b8:82:97:ee:fd:b4:ce:e7:7d:81:dd:62:df:d1:82:
8e:02:9b:8b:e3:91:52:b1:f3:a8:72:4d:07:7d:cf:d5:f1:bc:
b0:b5:55:90:74:5f:dc:0e:3e:7c:62:4a:82:63:4f:ae:a1:69:
5c:39:17:d2:bb:dc:ce:f0:6e:a7:9f:fe:3b:06:2b:61:22:cb:
ea:11:db:73:39:80:d2:ac:0b:ef:b1:c2:82:dd:07:60:b4:59:
b1:f9:cd:36:20:ed:77:9c:9a:ee:c3:2a:94:68:d2:77:1e:70:
24:85:e3:b7:32:9d:3a:db:83:94:d3:05:af:e5:dc:15:d6:14:
4d:60:96:3f:7d:39:fb:8f:be:be:a6:16:df:5b:f6:71:15:bf:
df:7c:14:6a:83:ee:b4:9b:5c:4e:b6:66:ed:d1:9a:4f:58:86:
3b:e8:3f:9a:c6:99:b3:71:5f:92:6a:72:81:0c:9d:ae:ed:08:
fc:02:06:f7:56:78:6c:10:dc:f6:4d:70:7b:2e:ca:32:15:1f:
bb:91:63:2a:0f:e3:b1:04:83:11:34:5c:52:3c:fd:bd:08:46:
53:e2:27:8a:4a:e1:0b:32:b6:cc:47:af:7f:6c:f4:a4:92:66:
cb:29:b1:a6:d8:6a:6d:82:86:49:dc:af:f2:e9:06:2f:e7:c7:
1f:b3:cf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net