Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa
File: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (raw, json)
Hash identifier: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=
Subject key identifier: 06:1B:EA:02:3A:76:14:5B:13:76:81:84:FF:A5:33:3C:15:33:81:45
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019425218C97E3DF7D85AE956086C32158D5
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208871
IP address blocks: 185.156.24.0/22 maxlen: 22
185.156.24.0/24 maxlen: 24
185.156.25.0/24 maxlen: 24
185.156.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8c:97:e3:df:7d:85:ae:95:60:86:c3:21:58:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=061bea023a76145b13768184ffa5333c15338145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cd:61:38:5b:c4:c3:61:56:53:66:73:e3:5d:
69:89:55:9b:3f:5a:97:5e:4f:bb:92:2f:d5:84:66:
30:16:0a:82:3e:a6:79:80:17:32:a2:55:95:c3:29:
82:0b:18:f1:f0:7d:70:45:39:6f:7b:1a:ae:45:50:
63:d6:11:72:bf:bc:e4:f4:50:18:96:cf:9b:45:00:
df:31:fc:52:dc:04:f4:b2:b0:df:d3:33:85:b3:1f:
93:89:47:05:c7:9d:79:fb:39:2a:d1:f9:72:7d:4c:
ad:03:f8:fe:4e:59:3f:97:30:c4:b6:71:b7:f6:32:
ef:3f:c8:9a:47:7c:dd:9a:92:f6:f6:50:03:4a:08:
2f:8d:3f:02:92:d0:73:fa:b8:6c:2c:13:f2:46:6d:
f0:5c:28:54:7e:04:75:53:2c:04:5c:9d:13:b5:06:
ff:6e:92:b7:de:ad:ca:96:0c:f6:cc:6d:57:15:05:
7c:b1:01:f4:9d:c4:27:7b:a7:a9:d0:2f:c1:ef:ec:
cc:5b:a6:c4:03:17:97:5a:1e:9d:b9:35:1e:57:ad:
e8:2a:57:15:07:69:9a:80:58:77:ff:16:fa:b3:68:
ca:10:cf:63:a3:c1:b8:ef:5f:d8:d2:d4:68:4e:ac:
c4:0c:61:8c:8a:df:2b:f3:ef:6a:f4:e3:fa:41:4d:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1B:EA:02:3A:76:14:5B:13:76:81:84:FF:A5:33:3C:15:33:81:45
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.24.0/22
Signature Algorithm: sha256WithRSAEncryption
25:45:fc:00:75:7e:0e:92:d6:30:cc:d0:cc:98:c4:41:2c:2c:
cc:d2:d9:33:99:dc:8b:1b:a8:f7:f4:0d:1b:2e:22:8d:6a:ba:
48:33:82:af:9f:97:5d:ac:4f:50:ac:1c:27:9e:da:6f:b9:0c:
5a:57:f8:03:8f:ac:07:ea:21:86:3b:85:8d:5a:c5:4f:08:25:
21:c9:54:6b:39:bf:c4:f4:88:92:ae:a2:2f:87:44:d7:b0:59:
b7:be:27:2c:9e:42:c7:e3:bd:64:98:00:13:97:c2:22:e2:98:
33:c3:0c:75:a3:01:1c:8b:71:4a:bc:8d:5c:02:41:a7:9a:46:
ea:fb:f6:a5:af:0b:4e:1e:bd:89:7a:2a:b3:7a:e2:de:02:a9:
57:76:98:b4:12:19:73:e2:1e:fd:bf:de:ee:f8:65:10:12:c3:
1f:05:8b:f0:6a:4c:0e:33:da:01:12:6f:0c:53:5a:38:ff:e0:
32:f8:17:5b:aa:6b:05:4f:f6:51:52:5d:41:55:75:e5:76:01:
0b:66:c4:dd:2f:b3:e7:0d:4c:ba:74:77:8b:14:ee:c2:d2:36:
f9:b8:c7:2e:c3:8c:1f:7f:12:e9:69:2c:31:43:ec:7b:0f:b6:
78:8c:4e:4d:03:9b:94:50:ca:49:da:b6:77:8f:0c:49:54:d9:
97:3a:a6:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYyX4999ha6VYIbDIVjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1
NGVmYWQwHhcNMjUwMTAyMDM0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjFiZWEwMjNhNzYxNDViMTM3NjgxODRmZmE1MzMzYzE1MzM4MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM1hOFvEw2FWU2Zz411piVWbP1qX
Xk+7ki/VhGYwFgqCPqZ5gBcyolWVwymCCxjx8H1wRTlvexquRVBj1hFyv7zk9FAY
ls+bRQDfMfxS3AT0srDf0zOFsx+TiUcFx515+zkq0flyfUytA/j+Tlk/lzDEtnG3
9jLvP8iaR3zdmpL29lADSggvjT8CktBz+rhsLBPyRm3wXChUfgR1UywEXJ0TtQb/
bpK33q3Klgz2zG1XFQV8sQH0ncQne6ep0C/B7+zMW6bEAxeXWh6duTUeV63oKlcV
B2magFh3/xb6s2jKEM9jo8G471/Y0tRoTqzEDGGMit8r8+9q9OP6QU1qyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAYb6gI6dhRbE3aBhP+lMzwVM4FFMB8GA1UdIwQY
MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt
ZTk5YThkYzMwMjU1LzEvQmh2cUFqcDJGRnNUZG9HRV82VXpQQlV6Z1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1
LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZwYMA0G
CSqGSIb3DQEBCwUAA4IBAQAlRfwAdX4OktYwzNDMmMRBLCzM0tkzmdyLG6j39A0b
LiKNarpIM4Kvn5ddrE9QrBwnntpvuQxaV/gDj6wH6iGGO4WNWsVPCCUhyVRrOb/E
9IiSrqIvh0TXsFm3vicsnkLH471kmAATl8Ii4pgzwwx1owEci3FKvI1cAkGnmkbq
+/alrwtOHr2JeiqzeuLeAqlXdpi0Ehlz4h79v97u+GUQEsMfBYvwakwOM9oBEm8M
U1o4/+Ay+BdbqmsFT/ZRUl1BVXXldgELZsTdL7PnDUy6dHeLFO7C0jb5uMcuw4wf
fxLpaSwxQ+x7D7Z4jE5NA5uUUMpJ2rZ3jwxJVNmXOqal
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net