Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/BG_3zKuOT7_cjnF9POkFtbvMS5o.roa
File: BG_3zKuOT7_cjnF9POkFtbvMS5o.roa (raw, json)
Hash identifier: 5BKguR1fraSafJ4sAR4xcrcTLRANwDpsPJzlqiUGbA4=
Subject key identifier: 04:6F:F7:CC:AB:8E:4F:BF:DC:8E:71:7D:3C:E9:05:B5:BB:CC:4B:9A
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019546557DD404E430E2AF9BA7A32CED7029
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/BG_3zKuOT7_cjnF9POkFtbvMS5o.roa
Signing time: Thu 27 Feb 2025 07:36:02 +0000
ROA not before: Thu 27 Feb 2025 07:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211261
IP address blocks: 103.226.194.0/23 maxlen: 23
103.229.168.0/24 maxlen: 24
185.145.71.0/24 maxlen: 24
185.204.200.0/24 maxlen: 24
185.204.201.0/24 maxlen: 24
185.223.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:55:7d:d4:04:e4:30:e2:af:9b:a7:a3:2c:ed:70:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Feb 27 07:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=046ff7ccab8e4fbfdc8e717d3ce905b5bbcc4b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:a8:ab:2e:de:0c:ce:01:da:40:1d:78:19:
e2:55:ea:45:31:75:b9:70:72:a1:4c:7a:3b:f2:c2:
95:19:15:aa:44:35:b6:db:94:f4:19:75:da:04:30:
10:47:66:ba:a8:6a:31:3a:33:76:3b:42:39:72:ef:
2a:01:50:d9:b5:b7:fc:10:4b:44:90:4f:19:c1:01:
c4:96:c5:9d:f4:58:d2:f5:78:8c:ec:59:de:b1:a9:
48:07:67:e1:38:2e:90:57:5f:bb:83:82:fd:92:a1:
22:5c:93:da:02:eb:39:fb:1e:72:ff:83:0c:bd:2e:
15:fb:43:e0:04:d5:18:4e:9a:8f:50:c6:6e:78:fd:
fb:25:32:10:73:72:81:20:7a:64:4b:4f:eb:31:32:
32:f8:5b:b5:7f:6f:9c:8c:6f:a3:b3:48:f7:4d:d7:
e4:f5:6b:9b:72:13:94:62:ad:10:27:11:52:16:35:
73:5e:0b:bd:75:35:c3:18:c8:31:22:76:67:a9:52:
14:61:12:f6:08:46:e3:16:bf:ba:10:2b:ca:ae:d7:
9e:9f:49:25:d1:28:e1:5f:50:3f:32:23:e4:88:11:
21:31:c2:f7:07:91:87:f5:7b:c6:81:7e:7a:01:92:
14:66:5f:cb:06:da:ed:52:57:0a:da:05:f4:6e:f8:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6F:F7:CC:AB:8E:4F:BF:DC:8E:71:7D:3C:E9:05:B5:BB:CC:4B:9A
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/BG_3zKuOT7_cjnF9POkFtbvMS5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.194.0/23
103.229.168.0/24
185.145.71.0/24
185.204.200.0/23
185.223.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ec:82:47:5c:ca:f7:98:48:47:0f:39:b6:63:bd:c7:c7:a4:3b:
35:83:5b:71:2f:61:f3:10:b6:99:d1:e2:99:d5:70:fb:82:4a:
3c:0c:87:5c:d6:77:1f:8d:88:3a:49:e9:bd:6e:5c:e5:42:a6:
d0:ba:72:6e:d7:0a:b1:ed:0a:37:5d:ba:50:97:6d:34:74:92:
6a:c4:78:e4:53:c8:d1:35:a4:83:af:80:6d:4d:d8:0f:d0:a9:
78:5e:67:ba:63:02:f8:57:5d:4f:1a:04:af:a8:d4:36:47:bb:
0f:03:fb:df:93:59:6c:5f:61:bb:4f:cb:8f:67:13:3f:44:ff:
6c:39:fd:ec:96:15:f4:7f:39:34:52:1b:7a:db:44:9c:a3:f1:
55:0d:13:dc:68:a9:c9:79:71:9c:e2:eb:e4:c7:8d:0f:a0:e4:
bd:55:f4:a2:de:9b:29:77:0f:95:f5:f1:9b:70:9e:01:59:02:
89:30:82:48:23:0a:35:0b:a3:0e:e0:42:c4:6d:4c:6b:1b:8c:
d1:9c:06:fa:83:03:01:70:93:ff:09:0a:8c:55:1c:40:50:dc:
14:4e:ba:c7:9e:02:94:14:2c:c0:53:b2:22:a3:e0:58:7c:5f:
c4:41:c4:a0:89:dd:8a:01:db:25:52:d9:bf:77:d1:40:e4:70:
b8:a4:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net