Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/BVudKBwM2E_IoZi2XLAZl3V3h4U.roa
File: BVudKBwM2E_IoZi2XLAZl3V3h4U.roa (raw, json)
Hash identifier: HRSqBSjJdVlb0EJFiMYtgy9dw0bdM9mrjem+9INTVaA=
Subject key identifier: 05:5B:9D:28:1C:0C:D8:4F:C8:A1:98:B6:5C:B0:19:97:75:77:87:85
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 0195E451A1640DFEBB2D55E0B524E06D2804
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/BVudKBwM2E_IoZi2XLAZl3V3h4U.roa
Signing time: Sat 29 Mar 2025 23:51:49 +0000
ROA not before: Sat 29 Mar 2025 23:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 164.138.8.0/24 maxlen: 24
164.138.9.0/24 maxlen: 24
164.138.10.0/24 maxlen: 24
164.138.11.0/24 maxlen: 24
164.138.12.0/24 maxlen: 24
164.138.13.0/24 maxlen: 24
164.138.14.0/24 maxlen: 24
164.138.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e4:51:a1:64:0d:fe:bb:2d:55:e0:b5:24:e0:6d:28:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Mar 29 23:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=055b9d281c0cd84fc8a198b65cb0199775778785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:f2:8a:4d:ce:48:82:39:02:1a:62:a0:57:
93:8d:32:c0:df:f4:70:f6:9f:8d:13:9b:ab:b6:9c:
fc:45:c4:8c:61:53:38:29:0b:01:d9:bc:ad:a5:6d:
f7:9b:92:fe:5d:86:72:60:44:b9:75:ea:f1:4e:cf:
c8:cd:de:bf:5c:80:bc:f1:cc:f7:04:2d:77:34:0e:
4d:dc:fb:22:6b:ae:9a:5a:fd:36:04:38:a5:93:48:
20:2c:11:94:46:92:2c:b1:b5:a7:ac:e2:12:ab:d8:
8f:1f:08:19:56:55:2c:58:92:3e:24:7d:63:83:12:
8a:92:72:fe:a1:92:77:f5:66:43:9f:f1:b6:6d:29:
04:59:96:0f:46:07:7c:0b:2a:2c:2b:c3:c3:66:e7:
ea:c1:62:69:f7:98:30:45:5d:28:e9:ef:b5:f9:15:
83:56:52:29:a3:90:e8:15:6d:80:3b:3c:e7:cc:77:
b8:68:f3:f3:f8:a6:4a:d4:5b:47:9d:90:b9:6d:e8:
a8:54:8d:d0:52:a9:11:48:ad:dd:e3:1a:0e:5d:46:
ba:e2:3e:9a:1b:05:86:6d:b1:af:b7:28:99:8c:7b:
8e:2e:de:4c:1c:3a:ab:a3:ef:d5:d6:87:f1:39:f5:
86:1f:20:00:fb:da:fc:5b:a9:e4:f7:b5:ed:a5:97:
5d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5B:9D:28:1C:0C:D8:4F:C8:A1:98:B6:5C:B0:19:97:75:77:87:85
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/BVudKBwM2E_IoZi2XLAZl3V3h4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.8.0/21
Signature Algorithm: sha256WithRSAEncryption
20:1f:fc:f9:7d:12:fc:62:0e:c5:67:0a:21:29:f8:56:3d:98:
e0:b6:0d:94:21:23:b2:2b:a8:19:3c:7e:c8:8d:80:5d:fb:e2:
dc:a8:77:fe:d0:c4:d0:a8:10:3d:0c:89:e1:6b:c0:6b:fd:55:
31:fb:26:8e:c8:85:18:c6:78:61:8e:f7:fe:3f:29:20:7d:a7:
30:be:8d:ec:bf:2c:72:5d:3e:fa:84:ae:c1:7e:20:3d:50:7a:
49:da:5b:cf:cc:52:32:ad:74:5c:87:21:89:98:90:be:8c:d8:
32:34:ac:5c:e2:0d:ec:01:5f:b3:7f:ba:8f:e6:bd:b6:c6:d7:
3d:a6:96:eb:1d:c1:9e:35:24:f3:fb:95:ef:e3:e4:61:ed:13:
67:29:2c:f7:3b:d7:23:75:26:a7:b2:53:93:8e:83:6f:89:af:
19:4b:11:d3:5e:af:22:0a:65:fd:06:62:f2:7b:31:b8:70:0e:
c4:5c:f6:e9:87:56:c2:39:61:f3:8a:78:14:eb:68:75:69:4e:
e4:11:00:da:6e:94:a6:f0:54:b6:0e:11:e0:ef:41:36:ee:6a:
a9:73:9e:c8:6c:de:f5:a9:d5:6e:df:82:20:b0:a6:d4:54:5d:
ce:17:c5:2b:80:26:38:45:10:08:d8:02:85:34:d2:f6:28:13:
84:d1:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:24:00 2025 by rpki-client on console.sobornost.net