Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa
File: 6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa (raw, json)
Hash identifier: LIMmkOw4HP8z7A8TqIJ9/r7g9X4ISQkmNHzzK5GwkoA=
Subject key identifier: E8:17:06:F1:B6:F5:CF:F3:78:B6:FB:D4:77:51:B1:E4:8F:25:9B:05
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB81BCD6FF21CA8C5C9887C199F52
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa
Signing time: Wed 01 Jan 2025 01:48:23 +0000
ROA not before: Wed 01 Jan 2025 01:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201337
IP address blocks: 86.105.28.0/22 maxlen: 24
86.105.28.0/24 maxlen: 24
86.105.31.0/24 maxlen: 24
86.106.184.0/22 maxlen: 24
89.47.4.0/22 maxlen: 24
89.47.6.0/23 maxlen: 24
185.75.200.0/22 maxlen: 24
185.77.168.0/22 maxlen: 24
188.240.204.0/24 maxlen: 24
188.240.205.0/24 maxlen: 24
188.240.206.0/23 maxlen: 24
188.240.206.0/24 maxlen: 24
195.82.120.0/22 maxlen: 24
195.82.120.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b8:1b:cd:6f:f2:1c:a8:c5:c9:88:7c:19:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e81706f1b6f5cff378b6fbd47751b1e48f259b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:97:f4:a8:30:d8:b5:8f:47:3f:9e:b0:e9:
0e:45:72:20:66:d1:c0:e0:82:04:1b:7b:da:68:da:
90:bc:e7:61:74:93:9b:0a:f2:68:01:6f:0a:e7:a5:
bd:2b:a1:a8:d7:9c:77:8a:9b:34:98:a5:b7:d7:29:
67:7a:35:9b:88:da:f3:90:31:c7:45:eb:a5:61:e0:
09:82:20:63:10:09:04:28:9a:57:bb:3e:4c:8e:b0:
a5:35:b7:75:96:cc:13:ec:9c:b9:71:64:e1:70:0e:
f8:cb:1d:7d:f1:42:f2:f9:eb:b5:e8:81:f5:2b:b0:
53:5a:b3:9d:2f:a5:f7:6a:92:ef:d0:8f:d6:7d:22:
a2:91:35:0f:cc:48:a4:8a:64:4f:5c:3a:7f:52:44:
cf:9c:b9:a0:05:75:95:fe:ea:93:e3:53:08:41:23:
18:1e:24:6b:23:b7:19:ae:31:69:29:b0:e5:ab:2f:
01:06:2a:a9:a0:bf:93:55:fd:10:5c:03:f9:e2:02:
81:98:cd:6f:c9:60:8f:be:0e:6c:a6:5e:53:3f:c9:
28:23:c4:cd:72:32:06:9f:fc:7a:d5:c0:10:00:50:
ef:51:e5:2e:fc:da:ae:88:62:20:5b:f0:26:b8:ef:
b9:b6:90:c1:c0:88:2d:4f:01:8c:b8:7b:12:9e:21:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:06:F1:B6:F5:CF:F3:78:B6:FB:D4:77:51:B1:E4:8F:25:9B:05
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/6BcG8bb1z_N4tvvUd1Gx5I8lmwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.28.0/22
86.106.184.0/22
89.47.4.0/22
185.75.200.0/22
185.77.168.0/22
188.240.204.0/22
195.82.120.0/22
Signature Algorithm: sha256WithRSAEncryption
13:52:5b:cf:41:14:1b:49:b9:74:2f:8f:94:a1:9b:90:14:e9:
c4:6b:ef:fd:57:a1:55:37:92:55:1d:96:fe:65:c6:f9:b5:9b:
08:79:7d:e9:87:36:3c:b7:d6:ee:06:a7:e9:50:c1:de:a8:a2:
f5:05:09:2b:32:60:4d:f7:25:08:17:06:a8:48:30:71:ca:2c:
9d:d3:b8:23:18:69:74:fc:1d:76:0d:06:0d:26:d3:cc:93:41:
98:35:6e:48:c7:f8:1a:b3:b5:97:6f:82:3f:46:85:bf:21:49:
1a:70:8e:e4:29:34:ee:bc:8a:ed:4f:33:a0:49:de:77:14:c3:
83:f1:ec:0c:2e:f4:cb:46:d1:52:0c:06:67:2b:25:ce:52:32:
7d:c4:79:4d:ba:b6:8e:cd:26:19:6d:1d:89:66:b5:66:7e:14:
f7:2f:0a:8a:2f:d6:b3:0c:40:3a:28:3f:d6:c6:57:34:ea:d0:
94:65:64:34:d8:a3:dc:1b:30:48:1b:15:be:40:48:15:2f:e7:
e9:38:f8:f4:22:e8:55:b0:21:6a:21:0e:3a:6a:67:ff:8f:3f:
3d:64:3a:8c:48:e4:f5:21:54:3a:e2:ab:c4:a1:14:36:dd:74:
3f:e4:c8:ab:fb:1a:e1:b9:f6:d1:80:7b:f4:9e:ff:42:75:75:
db:ca:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net