Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/x7nag32IyNnlFvyFy7NPeL9JFa8.roa
File: x7nag32IyNnlFvyFy7NPeL9JFa8.roa (raw, json)
Hash identifier: +2ZAiMPYUTAYJfamwFwTVD0PhMsB/YmyA4l6UGyxbuo=
Subject key identifier: C7:B9:DA:83:7D:88:C8:D9:E5:16:FC:85:CB:B3:4F:78:BF:49:15:AF
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 0194258F4027D811C29AE1AD714A41ECA3C8
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/x7nag32IyNnlFvyFy7NPeL9JFa8.roa
Signing time: Thu 02 Jan 2025 05:48:52 +0000
ROA not before: Thu 02 Jan 2025 05:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.112.188.0/24 maxlen: 24
185.112.189.0/24 maxlen: 24
185.112.190.0/24 maxlen: 24
185.112.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:40:27:d8:11:c2:9a:e1:ad:71:4a:41:ec:a3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7b9da837d88c8d9e516fc85cbb34f78bf4915af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:91:71:05:42:97:5f:04:82:68:a2:c8:36:
c8:2c:dd:5a:55:ec:bc:c2:cf:94:c4:84:43:fb:ab:
83:c6:77:96:82:95:86:3f:33:dd:a4:95:53:70:cb:
c3:e7:39:34:20:85:e2:0d:e0:1f:7e:4b:ab:e5:bc:
96:0e:eb:c9:83:2e:f9:ef:ef:50:02:ba:34:6c:90:
01:95:3a:b8:0e:0e:78:21:39:56:52:df:1c:fe:b4:
c6:1d:cf:12:42:c7:6e:16:e8:98:bb:a6:ae:24:b2:
3e:81:f1:c6:76:05:92:fc:97:b7:2c:20:52:4e:d1:
d7:a6:a1:a7:d9:aa:0c:ba:58:02:ea:f3:6a:37:9b:
7c:91:ae:88:80:86:91:c1:c9:d2:86:57:48:81:ef:
1a:f6:8f:26:83:92:ac:c1:56:6a:9f:8b:74:cc:9e:
cc:49:1a:24:51:da:46:7f:cb:a3:84:aa:59:5b:04:
9e:a6:d5:22:6d:07:74:da:69:e4:3f:4f:56:f5:bc:
33:f6:5f:50:5e:c0:4c:f2:b7:b3:90:11:c5:85:91:
5f:d8:4f:5f:25:a2:85:f0:ed:0d:80:33:56:b5:d6:
fc:fc:5d:a8:99:63:18:44:81:dd:7b:ec:43:9e:62:
55:49:f8:5d:e6:99:04:00:1d:6d:96:f9:ac:03:3e:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B9:DA:83:7D:88:C8:D9:E5:16:FC:85:CB:B3:4F:78:BF:49:15:AF
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/x7nag32IyNnlFvyFy7NPeL9JFa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.188.0/22
Signature Algorithm: sha256WithRSAEncryption
86:61:73:ce:f1:41:5b:ff:d3:a5:68:16:0d:e8:9d:62:f6:1c:
53:10:a2:43:57:0f:e0:ab:e2:cc:8a:cd:4d:a2:09:9f:1e:15:
7a:9e:78:22:5c:8a:94:09:06:e2:c6:59:6b:77:29:d8:c8:a7:
74:27:b4:ff:b6:b1:fc:a5:bc:83:7e:60:d1:9a:c7:d7:f3:0c:
37:a4:48:fd:91:6f:0a:75:f3:7b:d0:cd:28:47:5e:66:12:da:
be:4b:62:8f:76:21:73:8f:68:ad:7c:aa:6d:1c:c5:1b:8e:28:
4c:39:d8:25:1c:1b:b3:2f:2e:e1:b7:a8:13:7f:fe:e3:be:69:
25:93:06:91:ab:f5:16:4c:39:a9:b9:f2:9b:da:f9:52:41:76:
25:63:31:9a:c5:65:77:d0:13:5a:14:72:a1:ef:48:24:0a:67:
ce:f6:94:b1:43:3f:da:22:5f:1c:97:28:8e:11:10:1d:f6:71:
56:64:ad:73:21:b8:3e:dc:8f:fd:7c:95:02:d9:f3:bb:8a:f4:
86:39:1d:86:dc:24:98:1a:0d:fd:89:47:8a:88:61:37:50:b5:
3d:34:b3:65:fb:fe:81:74:bc:22:90:02:ed:0d:e1:4a:99:2b:
ae:55:39:d6:5e:68:f3:68:4a:d9:c2:0a:47:10:6d:88:db:eb:
6d:ad:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:15:58 2025 by rpki-client on console.sobornost.net