Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/BMtrajiT8kc1Pg7kzTaWX9dZggk.roa
File: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (raw, json)
Hash identifier: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=
Subject key identifier: 04:CB:6B:6A:38:93:F2:47:35:3E:0E:E4:CD:36:96:5F:D7:59:82:09
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 019422FC098F25AEA2F36EC49CB1F192C85A
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/BMtrajiT8kc1Pg7kzTaWX9dZggk.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213089
IP address blocks: 185.133.232.0/22 maxlen: 24
193.178.128.0/24 maxlen: 24
193.178.137.0/24 maxlen: 24
193.178.139.0/24 maxlen: 24
193.178.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:09:8f:25:ae:a2:f3:6e:c4:9c:b1:f1:92:c8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04cb6b6a3893f247353e0ee4cd36965fd7598209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:1e:62:24:ec:31:c7:98:62:b1:56:e0:28:
b4:37:4e:18:f7:69:08:a8:e9:a0:18:aa:47:01:99:
4a:b4:7a:ff:47:6e:41:67:0b:0d:3c:76:25:45:10:
a2:32:37:b7:09:55:ac:ec:ea:af:9a:f1:92:bc:38:
ec:c1:5b:99:49:21:4c:da:85:83:cb:fc:f9:c6:22:
52:db:13:64:ed:81:b4:c8:c3:41:ea:65:92:34:ce:
31:25:cf:c8:88:1b:f6:1f:c1:6b:6f:b7:5e:b5:af:
d4:58:52:d2:65:56:2e:92:59:07:73:34:98:91:04:
a8:32:54:67:3a:96:a4:59:ab:67:ed:af:73:67:11:
14:c7:98:43:56:34:70:70:ad:81:23:5c:0d:e4:40:
60:ad:0a:af:62:19:fd:e3:d8:19:ff:f1:3f:80:7c:
8b:d5:8b:19:87:57:e4:a5:58:2d:4d:78:68:32:fc:
be:5f:8e:b3:1b:fc:2b:cc:02:43:2c:55:23:ca:24:
b1:59:6f:4f:0b:f9:43:2f:c7:9e:41:ed:89:f4:2d:
2a:a6:4e:f2:e9:06:f9:40:02:2c:f7:4e:09:6c:10:
80:96:4d:97:c4:7e:02:f2:93:3a:9b:95:67:f9:ad:
a1:0e:e8:58:2f:1f:69:03:0a:d7:da:fc:fd:d0:d2:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:6B:6A:38:93:F2:47:35:3E:0E:E4:CD:36:96:5F:D7:59:82:09
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/BMtrajiT8kc1Pg7kzTaWX9dZggk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.232.0/22
193.178.128.0/24
193.178.137.0/24
193.178.139.0/24
193.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a0:ff:e4:64:58:51:f1:32:e3:35:ef:fa:55:c0:b8:11:6b:
21:20:76:cd:d5:64:56:d6:69:6e:fe:35:d2:c4:f5:b6:f9:c2:
1b:f2:c5:61:3d:3d:9e:d8:88:48:28:86:7c:4a:28:b0:4c:1e:
0b:76:84:54:eb:14:68:db:0b:97:14:7a:be:73:cc:0b:ee:fd:
c5:25:55:b1:0b:70:8e:38:cc:d6:92:68:bb:9d:aa:cc:58:b9:
38:32:5d:66:54:51:97:cc:06:bc:1b:01:01:05:73:5e:f3:8d:
bb:35:a1:f4:9a:0a:ce:61:90:3e:f3:ee:ce:d6:72:ca:41:3f:
27:ac:3c:ec:19:9a:e6:21:59:68:c8:ba:10:d1:1e:6a:ce:93:
a2:d8:ac:91:99:6a:66:c9:1d:df:88:d3:27:a4:83:c3:c4:d2:
45:7b:11:31:f0:00:67:c5:f9:c3:0d:08:97:f0:83:4d:1a:22:
35:aa:fd:e5:ca:42:94:2c:74:ce:23:e3:28:2f:9d:23:6b:57:
38:ce:bf:f7:e6:dc:ab:cf:a9:74:61:93:78:8e:01:f1:53:d3:
d6:96:4d:87:69:4e:97:2a:43:2a:40:61:d9:99:f8:7c:58:6a:
e1:fa:c2:11:42:1c:09:6c:7b:23:c6:d7:a7:01:74:02:ad:76:
4b:33:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net