Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa
File: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (raw, json)
Hash identifier: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=
Subject key identifier: 06:56:2A:5C:FB:DC:88:F7:DD:C8:9F:86:41:46:4E:B0:FE:23:A4:B2
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 01942521B4A25A4313E99EA4AB29E6E1F5C6
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa
Signing time: Thu 02 Jan 2025 03:49:13 +0000
ROA not before: Thu 02 Jan 2025 03:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200713
IP address blocks: 185.66.108.0/22 maxlen: 22
185.117.168.0/22 maxlen: 22
2a0e:f0c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b4:a2:5a:43:13:e9:9e:a4:ab:29:e6:e1:f5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06562a5cfbdc88f7ddc89f8641464eb0fe23a4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:c6:0d:e5:7c:a8:7b:e6:04:91:ac:4a:73:
d4:40:63:98:5b:51:e9:84:c5:ef:38:70:64:29:df:
f6:b2:f5:28:e1:2b:7e:11:fb:13:f8:ca:d0:03:31:
4e:68:fb:2d:72:5d:a2:0f:d0:d8:ee:fa:6b:7a:f7:
d1:7d:a0:68:71:d6:88:b6:1c:3e:22:fb:f4:91:76:
ee:70:b8:a3:b5:fc:02:a1:27:e7:b7:49:8c:74:04:
12:1b:70:c3:09:13:68:41:f0:9e:ee:81:ff:ce:c1:
ef:ec:39:f9:bc:0e:68:70:dd:be:c6:e0:44:90:e0:
2d:d3:ef:42:9e:8b:3d:fe:d9:3c:6a:99:b4:5e:20:
c2:aa:09:c4:64:31:6d:3d:fb:0f:cd:2a:ee:d2:d9:
3b:fb:2a:46:d5:c0:ea:3a:26:1b:b5:53:fc:98:01:
4b:34:cf:86:e9:d1:1a:88:f2:02:6a:28:1a:c9:78:
05:5d:87:c9:e1:01:a5:5d:04:2e:6c:2c:31:de:6a:
3a:3b:74:a0:93:71:6a:74:d6:54:f1:0b:60:c4:c0:
09:5c:b1:00:d5:48:be:13:dd:02:c0:a6:fd:78:d3:
0b:9b:d0:d7:a3:9f:a7:ec:d0:0d:ce:f0:c7:9c:50:
78:09:d4:2f:aa:48:4e:ef:ed:31:32:12:fe:b1:84:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:2A:5C:FB:DC:88:F7:DD:C8:9F:86:41:46:4E:B0:FE:23:A4:B2
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.108.0/22
185.117.168.0/22
IPv6:
2a0e:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:3f:54:16:15:cb:6f:36:7e:b6:79:8f:3a:d9:58:9c:32:6e:
98:d4:70:34:53:cc:cb:60:b6:6d:5b:dd:5c:b1:bf:0c:74:28:
44:7a:62:59:d5:4b:64:45:88:27:35:b7:f7:d6:3d:f5:b7:59:
4d:b4:65:9b:bb:04:8f:9c:ad:45:f2:d2:f2:bd:39:10:eb:ee:
53:5f:6b:a6:ea:5a:ff:8f:4e:32:48:e5:dd:24:6a:9a:96:7a:
53:41:b5:1e:cd:29:70:6b:e5:48:af:0b:a0:32:d9:b2:77:c5:
3c:d6:a5:07:83:50:47:18:3d:2a:30:fa:de:2b:75:5e:f6:f8:
ca:25:79:0d:af:1f:e7:6e:b5:b7:be:d1:a4:49:76:99:8d:ca:
8b:69:5f:cd:6a:2c:a9:6a:9d:ad:fe:b5:80:af:bb:8c:f0:da:
6d:b0:bb:ac:59:ed:2c:61:41:ab:08:fb:05:16:a9:65:72:03:
f6:f5:0f:7b:03:77:40:7b:ad:0e:66:0f:1d:d6:9d:ab:f0:57:
0b:be:3c:13:15:11:76:ae:22:12:e9:ed:c8:cd:13:b6:2e:1a:
27:dd:a2:ab:d3:d3:0f:e2:50:ad:62:ab:f5:d3:e1:53:ce:ca:
6f:11:9e:d0:6e:61:92:72:b9:43:36:e6:fe:e9:7b:7f:c2:3b:
c2:49:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net