Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7L1BVXVOnkuFE-ukpUlYeb0oaE.roa
File: b7L1BVXVOnkuFE-ukpUlYeb0oaE.roa (raw, json)
Hash identifier: ebhWbVi3pqdJGhpytj7RzZG7COftl7jlFC0AgSJrfK4=
Subject key identifier: 6F:B2:F5:05:55:D5:3A:79:2E:14:4F:AE:92:95:25:61:E6:F4:A1:A1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0195F7B94861E819669FFFECCABAC33CF50A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7L1BVXVOnkuFE-ukpUlYeb0oaE.roa
Signing time: Wed 02 Apr 2025 18:17:49 +0000
ROA not before: Wed 02 Apr 2025 18:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11798
IP address blocks: 185.176.94.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:b9:48:61:e8:19:66:9f:ff:ec:ca:ba:c3:3c:f5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 2 18:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fb2f50555d53a792e144fae92952561e6f4a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:9a:7b:4f:4f:2d:1c:47:c0:22:fa:e6:60:
c3:cc:23:5f:de:1c:dd:b4:51:e4:22:c4:98:f8:82:
52:88:70:91:0b:64:3d:f6:7e:ca:0e:c7:cb:99:72:
b3:ad:a6:51:d0:f7:42:f6:76:ee:38:37:22:d5:b5:
4b:9f:10:c9:21:fb:bd:59:bd:55:e9:f8:be:d2:4a:
16:46:01:d2:28:e6:dd:4d:6f:d2:78:ac:1a:df:8c:
dd:80:a3:05:81:b1:36:12:55:b4:57:73:67:63:ba:
3e:5f:18:0e:4a:e4:02:34:5d:2b:5b:1f:5e:73:7c:
f7:14:0e:11:0b:90:4b:ac:df:48:5c:b1:ed:1f:33:
26:09:4e:d8:32:4f:ce:1f:4b:0f:14:55:89:40:67:
c5:d8:a8:b1:3d:f0:77:ec:cd:c2:3b:e7:a6:77:4c:
fe:db:cb:5a:73:d7:31:e3:7f:b4:f2:f6:5f:c6:61:
2a:be:9a:77:02:61:07:b7:a6:06:3a:ef:93:4b:07:
ad:13:8c:b0:fc:06:fd:c0:52:ba:de:21:34:8d:ca:
86:7e:85:0e:4b:c9:06:f4:fd:63:26:a5:21:ad:c3:
f8:ac:6a:9c:99:24:3c:52:05:94:66:d7:a8:f8:00:
9d:5a:f8:bd:19:63:b9:05:20:4d:35:7c:58:52:57:
ff:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:F5:05:55:D5:3A:79:2E:14:4F:AE:92:95:25:61:E6:F4:A1:A1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/b7L1BVXVOnkuFE-ukpUlYeb0oaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.94.0/24
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
32:cd:3e:2e:a9:9f:65:21:11:ac:ae:65:1e:91:0e:04:19:1c:
fb:b3:88:05:c0:aa:be:85:cb:da:a9:ad:22:26:8a:46:93:0e:
f2:6f:de:39:80:c0:13:a7:69:ae:81:ee:51:bc:14:ac:14:07:
a7:03:aa:94:f3:3c:b0:fb:7a:c9:57:7b:e0:61:bb:14:32:5f:
41:91:f0:46:47:7c:16:20:45:fb:24:1d:72:46:ab:b9:84:18:
cf:be:4d:f4:e8:13:a3:c1:a0:24:5d:44:14:0d:7c:40:26:8b:
57:48:6b:df:02:99:47:58:cf:0d:23:36:fa:95:c3:4f:c5:97:
f0:f2:ae:1d:2b:ae:4f:59:4c:9d:88:a6:5c:7f:d8:41:53:b2:
0f:62:b2:b1:28:1c:7f:fa:64:a0:51:56:4e:c3:bc:21:c1:76:
e8:d9:93:d7:55:2a:af:4a:56:0f:29:95:19:78:b3:42:c8:f7:
ca:bb:0a:a0:65:00:6e:ee:70:46:c6:4a:b0:c9:78:44:3c:82:
63:28:48:15:af:33:6e:20:8b:8f:44:a6:a0:c8:67:48:6c:66:
d6:32:7c:6c:5c:c6:f1:03:8c:fb:f2:16:b4:46:c8:8a:73:f9:
2c:a2:39:c3:b0:34:54:b9:e6:bb:13:85:ec:b0:c6:9f:af:33:
59:b8:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:58 2025 by rpki-client on console.sobornost.net