Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/B6wSZJvSGeybR7CPqtyVhXyylu0.roa
File: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (raw, json)
Hash identifier: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=
Subject key identifier: 07:AC:12:64:9B:D2:19:EC:9B:47:B0:8F:AA:DC:95:85:7C:B2:96:ED
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0194228D63EAB1128E675C5FCD237181316E
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/B6wSZJvSGeybR7CPqtyVhXyylu0.roa
Signing time: Wed 01 Jan 2025 15:47:59 +0000
ROA not before: Wed 01 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 185.123.252.0/24 maxlen: 24
185.123.253.0/24 maxlen: 24
185.123.254.0/24 maxlen: 24
185.123.255.0/24 maxlen: 24
185.128.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:63:ea:b1:12:8e:67:5c:5f:cd:23:71:81:31:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ac12649bd219ec9b47b08faadc95857cb296ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:7d:1b:31:19:20:23:1d:d8:6a:9b:63:b7:
54:53:64:5c:27:93:28:5c:77:ee:73:e4:01:97:d0:
c0:aa:e3:c7:95:e1:d4:3c:1b:b0:ba:27:f1:4c:1d:
cd:36:a8:70:73:b0:aa:af:f3:05:0b:ae:d7:5a:6e:
b5:49:44:e3:9f:a6:1f:50:cd:5a:18:24:05:b5:61:
31:09:8e:0c:56:54:d3:a2:3e:c8:1b:d8:f5:0f:e8:
81:b0:c8:c1:c9:74:1f:a2:57:18:76:a8:75:b8:c8:
09:9f:96:66:d5:2a:97:cb:95:6a:f6:0d:bd:8d:e7:
12:c6:58:4b:23:1f:10:4b:87:38:fd:df:e1:49:76:
f7:d7:f7:77:f2:1b:2d:fc:35:a9:cd:2c:53:80:a2:
f1:9f:00:a0:e7:d2:e5:2a:bb:ba:8f:8d:f1:74:1b:
00:b2:f4:e9:39:38:ce:1a:cf:9a:d5:cb:21:ed:b9:
62:24:dd:a5:f5:ee:3c:1e:3f:1d:fe:69:d8:dd:b7:
77:2c:58:7c:21:97:50:e4:82:2b:9f:5c:64:d0:38:
77:5d:1c:f4:c6:96:c2:5c:46:85:24:a9:2b:78:f9:
ff:a9:02:73:81:f4:1d:e0:8d:6f:4d:a3:eb:76:f3:
22:66:7b:3b:91:8b:25:d1:4d:56:29:e4:89:99:b3:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:12:64:9B:D2:19:EC:9B:47:B0:8F:AA:DC:95:85:7C:B2:96:ED
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/B6wSZJvSGeybR7CPqtyVhXyylu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.252.0/22
185.128.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:94:88:eb:fd:78:ca:eb:bf:df:b5:7c:d7:2c:bc:e8:6c:93:
86:9d:9c:b5:3b:ef:1d:df:ed:0d:69:ef:1a:2a:67:ce:fb:7d:
f2:98:dc:49:f6:22:8c:bd:47:aa:c2:8f:c4:ce:71:9e:51:0a:
f7:6f:22:fb:10:65:9f:10:74:87:19:b6:4a:47:5b:89:05:86:
4f:08:3a:ba:c9:c9:e6:55:01:69:b0:7c:24:ed:49:f4:d1:80:
dc:18:35:a4:08:9e:89:fa:fb:a8:67:80:70:64:18:04:c4:3d:
68:d8:f6:07:18:38:4d:bd:89:c2:27:8c:6c:fc:fa:ec:0f:e7:
e4:4c:e7:76:11:7c:8d:fc:89:fe:a0:74:fb:e6:9c:ad:25:8c:
5c:b0:73:bf:93:cf:3d:b6:8c:10:19:9c:1c:63:44:88:59:c8:
46:cc:97:e3:9d:a2:d3:b6:ec:7d:be:f9:4c:61:83:33:9d:92:
cd:d2:7e:1b:3c:8c:1e:ca:4c:b7:7b:c2:29:1a:91:f9:66:b9:
89:cc:73:0b:29:6b:93:97:31:b6:29:53:81:10:b7:84:07:0a:
3f:50:56:16:2d:b6:bc:76:5e:72:5f:2d:78:c8:78:c3:a2:0e:
3a:51:47:c7:29:5e:4c:ad:01:33:52:f9:61:43:7b:2b:2a:be:
b7:41:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:20 2025 by rpki-client on console.sobornost.net