Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/6BgZvuvQdTTnHkpFXfURizE8XGQ.roa
File: 6BgZvuvQdTTnHkpFXfURizE8XGQ.roa (raw, json)
Hash identifier: 78Xx7tAnFjhWDtWYiSHC9JJs2O6w1we6/J46orAWVbc=
Subject key identifier: E8:18:19:BE:EB:D0:75:34:E7:1E:4A:45:5D:F5:11:8B:31:3C:5C:64
Certificate issuer: /CN=b5253c2552d4403f43b83c25e762238df12dae81
Certificate serial: 0195F55D08EF1C9F74458CAEC254FF5ECCA4
Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/6BgZvuvQdTTnHkpFXfURizE8XGQ.roa
Signing time: Wed 02 Apr 2025 07:17:49 +0000
ROA not before: Wed 02 Apr 2025 07:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203419
IP address blocks: 185.135.112.0/24 maxlen: 24
185.135.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:5d:08:ef:1c:9f:74:45:8c:ae:c2:54:ff:5e:cc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81
Validity
Not Before: Apr 2 07:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e81819beebd07534e71e4a455df5118b313c5c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:11:5f:94:c0:ce:00:1e:55:72:b5:12:68:
62:d8:17:c4:3e:18:02:5c:28:2a:a0:32:b9:3a:65:
38:8c:7a:12:0f:96:f2:f2:07:2b:07:b9:d9:2e:1b:
06:0f:69:e4:3a:7c:4a:ac:74:77:98:32:9f:f9:c3:
dc:45:b3:43:7e:2f:47:e7:df:47:24:ef:fb:9d:fc:
8f:ee:73:6d:74:07:54:bd:e6:cf:f8:12:2f:7e:ed:
20:9a:56:45:6d:b0:43:d2:6b:91:44:89:f3:e4:8d:
1e:4d:20:0c:1d:55:d0:74:ff:8d:79:85:cc:86:1a:
85:e0:d1:27:b7:3e:2a:52:6f:00:4d:3d:e9:b1:5b:
cc:9b:50:e8:46:6f:7a:f7:4e:9c:8c:60:88:80:9b:
14:bd:78:5e:9d:93:e0:8f:ce:f4:48:2b:39:62:0c:
5c:6b:9b:fa:c4:b0:b5:ea:b5:1e:d7:ef:12:31:d1:
1a:b7:38:61:1e:d3:80:8d:8b:92:48:f2:62:3d:7f:
ac:4a:c6:ef:6b:d4:52:fd:73:ca:b5:fa:d0:f2:1a:
8e:1e:2a:be:45:42:31:c9:a0:d1:25:88:e0:b9:a2:
a2:2f:bb:dd:c3:eb:1b:c0:f3:88:0c:45:1f:9d:42:
e2:72:c6:cf:7e:1a:0d:e8:63:f5:73:e2:4e:91:b2:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:19:BE:EB:D0:75:34:E7:1E:4A:45:5D:F5:11:8B:31:3C:5C:64
X509v3 Authority Key Identifier:
keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/6BgZvuvQdTTnHkpFXfURizE8XGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.112.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:05:0a:d6:98:56:59:b9:93:e2:f8:cc:cd:2d:47:02:a0:6c:
b8:52:90:f3:7c:83:4b:e9:61:10:95:38:a6:03:d2:c4:16:a7:
96:f0:03:7a:d1:24:42:e1:46:66:23:e8:6f:c6:47:3f:81:c6:
6c:b1:4a:70:6e:83:1f:c9:a7:47:6d:84:f6:88:79:3d:71:40:
a2:32:97:93:22:7d:ae:d7:f9:b0:35:28:7c:0d:f7:90:cc:3c:
8f:d2:b4:54:3f:a1:6d:fe:02:6a:21:f5:bb:eb:03:89:0c:ac:
b2:bd:7c:93:b1:02:4a:1b:ad:38:91:61:53:ec:4a:bf:1f:a4:
6c:20:60:7f:f4:55:6f:7e:02:d5:e3:dd:c6:1a:94:c9:67:69:
bc:c8:96:f2:cf:98:bb:12:7b:d3:aa:63:69:09:1e:46:fc:72:
1f:bd:49:c8:76:a5:81:7c:91:09:d7:4a:dd:98:9b:9f:c7:01:
fc:31:5c:a1:fc:d9:43:b1:a6:c7:fa:ed:c4:24:ac:8c:12:6a:
83:7d:22:4f:fb:75:2e:ec:7c:00:07:84:82:46:15:da:00:f1:
fa:45:64:37:70:8b:f1:68:9b:f3:02:1b:bd:2c:d3:1a:ef:ae:
63:c1:3b:9c:c2:94:c1:54:0b:97:4e:3a:f8:58:4d:16:02:f7:
3d:a8:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net