Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/BnrxL-Ur42kihA32O4JXiXZBN8E.roa
File: BnrxL-Ur42kihA32O4JXiXZBN8E.roa (raw, json)
Hash identifier: au6tBTrdwYycWLV+cOCZ8jXfmlb22WJOhmDS5f3OYxY=
Subject key identifier: 06:7A:F1:2F:E5:2B:E3:69:22:84:0D:F6:3B:82:57:89:76:41:37:C1
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 01956C7545F25D4EDBE77792658463C0048F
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/BnrxL-Ur42kihA32O4JXiXZBN8E.roa
Signing time: Thu 06 Mar 2025 17:16:19 +0000
ROA not before: Thu 06 Mar 2025 17:16:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199878
IP address blocks: 185.42.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:75:45:f2:5d:4e:db:e7:77:92:65:84:63:c0:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Mar 6 17:16:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=067af12fe52be36922840df63b825789764137c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:ab:94:0f:7b:20:05:cc:aa:54:cc:a3:bd:
61:9c:61:d7:80:23:b0:31:43:bf:08:d8:72:ed:23:
e6:91:da:8e:6d:77:04:27:b0:71:50:c2:42:05:99:
83:f6:ca:50:21:26:91:6c:97:2a:8c:d5:3d:f0:a3:
74:c4:87:78:d7:1f:ab:b2:8f:59:2a:66:d1:0f:eb:
44:1d:21:57:3d:89:ee:59:47:59:fe:bd:1e:44:8a:
fb:15:58:6f:0a:cc:9b:c1:f4:9f:0b:67:0f:c8:2d:
eb:8c:0d:81:ca:b0:0a:20:08:e9:a3:7a:e8:30:90:
86:88:7e:03:89:08:20:78:b4:fc:63:cf:d3:a7:0c:
0a:32:06:89:7a:25:28:d9:1a:73:5d:eb:41:c1:a1:
66:b1:77:91:4d:e7:2b:fa:93:fa:f0:9f:19:d7:71:
63:24:3c:92:d3:98:3b:e1:59:be:6c:30:21:e2:d5:
a6:6d:60:b3:27:38:dc:31:ab:81:6c:2e:62:90:e7:
69:3a:18:2f:30:8f:35:f8:4b:fe:af:80:a1:93:58:
3f:ff:39:c0:8f:e4:28:01:36:39:9d:b4:9f:67:a6:
2e:09:fd:0b:77:32:25:06:45:fd:2c:87:27:54:72:
b1:9f:fb:9d:ef:15:c1:17:60:31:b8:be:6d:bd:1b:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7A:F1:2F:E5:2B:E3:69:22:84:0D:F6:3B:82:57:89:76:41:37:C1
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/BnrxL-Ur42kihA32O4JXiXZBN8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.141.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6f:8a:02:4f:32:bf:c0:c8:49:1e:e0:42:31:b9:8e:09:d9:
9e:82:92:e7:a6:f3:e9:54:a7:ab:6e:1c:5c:fe:cd:16:3c:bf:
f3:90:e1:1a:0f:03:5b:e6:ce:17:80:96:dc:1c:17:c8:d4:35:
76:54:f5:5b:7d:4e:b2:59:08:54:22:23:10:70:47:72:3b:65:
c8:da:dc:b8:4f:bc:f0:1d:1e:a8:c0:c1:12:69:19:34:3d:ae:
d5:67:d3:38:3a:cb:2a:ef:46:1a:87:7a:85:9e:5e:9a:6b:12:
03:bf:b5:da:98:80:db:9e:f7:27:eb:e1:a9:e8:f6:46:75:76:
e3:d7:c0:e7:1f:c0:f7:5d:a9:34:02:ee:b0:a6:ea:8c:14:ba:
78:6d:fc:30:26:a8:ea:2c:f0:98:2c:78:78:93:49:79:20:8e:
d8:75:29:2d:a4:e3:21:36:9d:55:33:9a:bf:a2:24:5d:17:f1:
d9:26:ee:6f:1b:13:fd:7a:f3:df:bb:37:ac:72:c8:3f:3b:8a:
f4:be:93:eb:b5:7b:54:43:65:24:19:de:85:7d:71:3b:38:0a:
0e:bb:75:e8:1f:5c:db:8d:ea:75:c1:1b:c9:7a:a7:34:ed:ea:
fe:01:71:6c:12:b8:8b:35:fd:a5:d3:9b:f8:16:07:14:31:ee:
55:86:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net