Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa
File: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (raw, json)
Hash identifier: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=
Subject key identifier: 06:56:66:D2:C6:12:88:85:35:8D:9A:CD:60:AD:CB:DA:FD:F1:E1:53
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 019427B52D1A3609BCB388841B88CB68B1EA
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa
Signing time: Thu 02 Jan 2025 15:49:32 +0000
ROA not before: Thu 02 Jan 2025 15:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202837
IP address blocks: 185.198.4.0/24 maxlen: 24
185.198.5.0/24 maxlen: 24
185.198.6.0/24 maxlen: 24
185.198.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:2d:1a:36:09:bc:b3:88:84:1b:88:cb:68:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Jan 2 15:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=065666d2c6128885358d9acd60adcbdafdf1e153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:d5:cb:ef:25:ee:66:5e:32:13:57:ea:81:
6c:f2:29:0f:d6:d2:85:b8:25:96:74:56:88:64:d2:
76:65:bf:6b:17:fe:39:0a:d6:72:d7:c8:ae:43:07:
4a:f2:e7:82:e2:aa:97:92:4c:7c:28:43:57:90:f5:
3f:da:25:f4:ae:89:09:f9:29:0d:e5:05:46:14:3a:
69:e3:30:fc:43:03:b5:7b:f3:0a:fd:9c:95:e4:f8:
1b:fa:30:f6:b2:81:5b:75:f4:1b:7d:bc:2e:d1:51:
16:2a:6d:0a:d5:fb:36:3f:ef:8a:7c:be:11:f8:70:
43:0f:1b:7f:17:12:e1:f0:07:34:ed:e7:19:6d:8c:
f8:5a:8a:cb:9c:76:f0:22:78:e0:58:f2:92:c9:9e:
d4:a3:12:6c:31:f8:be:97:dd:06:f9:72:88:3d:1d:
cb:35:08:16:d1:e6:b5:0a:35:49:f9:07:2e:1a:a3:
de:62:d8:97:4a:ae:89:d9:54:26:77:b5:bc:4f:7c:
97:47:c9:d3:3d:c2:2b:7e:98:f3:bd:a8:97:36:9f:
cc:1f:c4:04:ab:d3:4b:e0:27:bc:90:f1:a2:7b:e4:
b0:82:28:0d:ad:22:26:6d:ce:16:c4:c6:40:73:df:
b2:be:4f:8b:df:bc:17:1c:ae:13:d1:9a:51:d3:f7:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:66:D2:C6:12:88:85:35:8D:9A:CD:60:AD:CB:DA:FD:F1:E1:53
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:1c:2a:41:93:19:55:d3:70:16:e5:24:0a:a5:70:c6:75:6e:
82:79:ed:8a:30:47:70:cb:f7:ac:6f:6f:6b:c1:b8:e5:d3:86:
49:4c:1e:41:76:ed:99:83:c9:7f:96:1e:aa:6f:91:d2:ca:58:
0e:15:98:79:24:f9:8e:93:e0:1a:98:57:1f:15:ab:4a:c4:af:
29:bf:eb:25:3b:dc:51:f2:a3:ea:a4:6d:1b:13:ec:e9:5f:c3:
84:b2:ad:e7:1f:bf:75:d7:c0:3a:1d:65:cb:4d:a2:26:9a:13:
01:c8:e3:f5:3f:61:01:66:5d:0b:9d:07:ee:5b:f7:a3:70:5a:
d2:1d:9a:1d:6a:6b:0b:1f:a1:8f:8b:77:da:4a:0e:10:12:c0:
fa:73:a8:89:ec:b4:9d:c9:91:ca:39:ee:b3:e1:58:cf:b6:b1:
5d:c6:13:42:22:1c:19:4e:ee:a1:0a:2c:35:17:af:f7:0c:00:
ee:d3:c4:e2:06:fa:b6:e5:65:58:76:b8:c4:e9:28:0c:13:90:
8a:db:db:00:de:fb:f3:ad:aa:ea:cf:71:05:ab:7f:ae:c3:32:
0a:7f:f0:e7:38:b1:e0:b2:f9:7a:95:77:50:1d:fb:8a:00:53:
e9:a9:76:31:8e:5a:3b:9d:81:61:41:99:c9:f3:a3:b0:ea:cd:
31:5f:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net