Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/BO1ltB2867u60oaiDsy_-XsvL88.roa
File: BO1ltB2867u60oaiDsy_-XsvL88.roa (raw, json)
Hash identifier: N3BRFXxAhwO4FPIhN2IGyHjmICRkpQTCZFJQ4I0pqRI=
Subject key identifier: 04:ED:65:B4:1D:BC:EB:BB:BA:D2:86:A2:0E:CC:BF:F9:7B:2F:2F:CF
Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Certificate serial: 019427481CBDC70B670F0569927A3E0D77BF
Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/BO1ltB2867u60oaiDsy_-XsvL88.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12462
IP address blocks: 185.123.120.0/22 maxlen: 24
212.66.160.0/24 maxlen: 24
212.80.160.0/19 maxlen: 24
213.170.32.0/19 maxlen: 24
2a0c:f5c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1c:bd:c7:0b:67:0f:05:69:92:7a:3e:0d:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04ed65b41dbcebbbbad286a20eccbff97b2f2fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:57:3c:ab:cb:7f:f6:b3:46:76:37:f8:2a:d6:
ab:c4:75:e8:ab:f6:89:e0:4d:83:41:7b:98:50:8e:
37:88:b6:f8:33:ee:bf:f0:74:7d:07:09:a1:c4:37:
a3:d6:c9:10:2b:44:3c:07:cf:fd:6e:11:1f:a3:c1:
a2:45:71:ce:aa:2f:1e:b8:2b:90:d7:c6:98:8e:72:
77:f2:b0:ce:db:1e:77:7a:de:06:2d:11:c1:94:a5:
b0:c8:88:ff:5b:f0:2e:59:c4:5a:6d:3e:c5:5f:95:
16:54:4b:9f:95:a4:3b:a6:ce:f9:db:b6:a1:74:d8:
20:14:42:74:f5:38:67:99:54:e3:61:7f:92:20:ec:
41:45:61:ad:7a:c9:31:78:d3:b7:b3:4f:bf:e4:bf:
0f:b2:d6:26:34:4c:ed:55:be:4b:50:c2:99:ee:02:
c8:8e:04:13:51:e6:5b:7d:7f:6f:e0:ed:e5:d6:e9:
f5:77:4d:39:c3:b3:ef:e9:9d:14:e8:18:d3:1b:ce:
84:3a:c5:82:72:f8:0c:9c:f6:b8:d6:80:43:12:c7:
a4:b2:05:dc:9f:45:e4:18:cf:d7:62:5b:71:33:04:
7b:d6:f2:28:4c:fc:de:d1:a9:9f:22:59:67:f4:59:
71:55:40:05:7b:14:fc:44:4d:a7:49:14:56:34:a2:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:ED:65:B4:1D:BC:EB:BB:BA:D2:86:A2:0E:CC:BF:F9:7B:2F:2F:CF
X509v3 Authority Key Identifier:
keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/BO1ltB2867u60oaiDsy_-XsvL88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.120.0/22
212.66.160.0/24
212.80.160.0/19
213.170.32.0/19
IPv6:
2a0c:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
77:83:2e:53:d0:ff:50:a7:2d:91:71:61:ec:b5:f5:d0:ab:ec:
d8:24:74:e6:e2:23:ae:ee:5d:67:4b:b2:fe:07:ad:da:10:50:
1b:b1:71:be:33:b1:2e:03:ca:97:46:15:33:35:be:f9:82:cd:
01:a2:df:35:5c:f6:9b:7c:34:ed:96:a2:ac:5b:01:f8:9b:2d:
ab:6a:8f:ab:e7:ec:08:d3:45:1d:ba:d7:fc:ca:c8:c3:29:6b:
d8:90:cc:1d:45:cf:61:2f:3c:d1:45:17:a5:74:26:57:c5:fa:
c0:09:17:b5:01:84:b8:9c:8a:07:c2:71:76:40:71:3a:1b:b2:
c0:3d:b8:f1:ce:54:11:72:5b:f7:17:9c:8a:b7:7a:89:da:d9:
2d:ae:01:61:f3:38:ca:59:3c:c3:cf:ff:5f:a2:a3:a1:ea:c7:
5b:30:b8:40:27:66:de:bc:66:f3:7b:0e:9f:a9:61:d0:74:ee:
92:4e:fa:90:8b:13:8c:50:f8:7d:5c:ec:69:97:35:57:02:4c:
dd:3e:ae:c0:97:8a:0e:42:90:89:07:c2:bf:ea:ae:3c:2a:9b:
82:b2:5c:74:a6:1f:6f:85:ac:69:7a:e5:af:99:1d:75:e3:83:
92:80:a6:75:05:a6:cb:30:82:08:b1:58:d9:95:c0:d5:0d:40:
bc:41:e9:45
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQnSBy9xwtnDwVpkno+DXe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy
M2UzZGIwHhcNMjUwMTAyMTM1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGVkNjViNDFkYmNlYmJiYmFkMjg2YTIwZWNjYmZmOTdiMmYyZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1c8q8t/9rNGdjf4KtarxHXoq/aJ
4E2DQXuYUI43iLb4M+6/8HR9BwmhxDej1skQK0Q8B8/9bhEfo8GiRXHOqi8euCuQ
18aYjnJ38rDO2x53et4GLRHBlKWwyIj/W/AuWcRabT7FX5UWVEuflaQ7ps7527ah
dNggFEJ09ThnmVTjYX+SIOxBRWGteskxeNO3s0+/5L8PstYmNEztVb5LUMKZ7gLI
jgQTUeZbfX9v4O3l1un1d005w7Pv6Z0U6BjTG86EOsWCcvgMnPa41oBDEseksgXc
n0XkGM/XYltxMwR71vIoTPze0amfIlln9FlxVUAFexT8RE2nSRRWNKIf0wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFATtZbQdvOu7utKGog7Mv/l7Ly/PMB8GA1UdIwQY
MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt
YTg3MWVjYzIxMmE2LzEvQk8xbHRCMjg2N3U2MG9haURzeV8tWHN2TDg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2
LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuXt4AwQA
1EKgAwQF1FCgAwQF1aogMA0EAgACMAcDBQAqDPXAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3gy5T0P9Qpy2RcWHstfXQq+zYJHTm4iOu7l1nS7L+B63aEFAbsXG+M7EuA8qX
RhUzNb75gs0Bot81XPabfDTtlqKsWwH4my2rao+r5+wI00Udutf8ysjDKWvYkMwd
Rc9hLzzRRReldCZXxfrACRe1AYS4nIoHwnF2QHE6G7LAPbjxzlQRclv3F5yKt3qJ
2tktrgFh8zjKWTzDz/9foqOh6sdbMLhAJ2bevGbzew6fqWHQdO6STvqQixOMUPh9
XOxplzVXAkzdPq7Al4oOQpCJB8K/6q48KpuCslx0ph9vhaxpeuWvmR1144OSgKZ1
BabLMIIIsVjZlcDVDUC8QelF
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net