Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/7BY2Il5MQLxppADVL6UF8_ajsQA.roa
File: 7BY2Il5MQLxppADVL6UF8_ajsQA.roa (raw, json)
Hash identifier: l7Kov6RxqewCUOOJkbe9fRRYdDk1EYYz6xC9Vf7eE0k=
Subject key identifier: EC:16:36:22:5E:4C:40:BC:69:A4:00:D5:2F:A5:05:F3:F6:A3:B1:00
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 01951D7CDE2E933B5337C3153E8792B82D4E
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/7BY2Il5MQLxppADVL6UF8_ajsQA.roa
Signing time: Wed 19 Feb 2025 09:14:37 +0000
ROA not before: Wed 19 Feb 2025 09:14:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8356
IP address blocks: 185.109.124.0/22 maxlen: 24
217.198.56.0/21 maxlen: 24
2001:768::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:7c:de:2e:93:3b:53:37:c3:15:3e:87:92:b8:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Feb 19 09:14:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec1636225e4c40bc69a400d52fa505f3f6a3b100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:73:58:dd:3a:c1:41:a9:c0:b4:fb:b8:be:
5e:c4:de:2c:55:c2:e0:37:08:5a:79:ff:e2:ec:18:
9f:c1:fe:7a:93:c6:12:35:3e:b3:ec:bc:7e:17:ed:
54:e7:9a:09:c4:71:20:51:6e:83:42:ef:6e:ad:58:
2a:6c:f5:7a:a8:4a:27:7d:cf:3f:e7:ed:d7:6c:7e:
e2:14:81:49:ab:a6:0b:f6:13:fe:ac:1e:04:9f:2c:
25:f9:ad:e9:c9:b0:28:33:ec:75:64:45:49:78:e6:
8e:47:9c:a4:72:05:29:e7:0f:e1:b5:fa:83:d3:fe:
85:3a:06:a6:00:b5:43:a6:bc:d4:c4:a3:be:20:2d:
4c:60:a7:98:e1:36:d8:a3:55:f8:84:3e:97:af:39:
60:e0:cb:1f:70:35:9b:62:4f:29:5d:16:a6:e4:3a:
d9:b6:15:92:41:ba:7c:16:21:af:bd:1f:ec:32:fe:
0c:b0:fe:69:31:8d:2b:d5:3f:ff:74:f5:37:90:7b:
10:a1:65:c1:e5:40:35:81:88:fc:9f:27:3d:e4:37:
98:83:a3:5c:38:01:ef:ed:52:43:87:21:1c:7e:d1:
1b:25:dd:41:64:b7:16:ab:86:87:8d:ee:d4:50:4a:
5e:79:9a:fe:a6:bf:7c:93:bc:18:fb:70:67:f9:9e:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:36:22:5E:4C:40:BC:69:A4:00:D5:2F:A5:05:F3:F6:A3:B1:00
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/7BY2Il5MQLxppADVL6UF8_ajsQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.124.0/22
217.198.56.0/21
IPv6:
2001:768::/32
Signature Algorithm: sha256WithRSAEncryption
17:c8:ad:ea:b5:8b:c6:22:62:4c:b4:1d:75:a8:ec:fa:96:13:
8e:3d:9d:d7:1f:54:8d:17:21:3a:32:16:6f:d2:ed:5c:a9:c4:
4d:de:80:48:7e:d7:27:18:f8:78:21:59:35:ec:88:db:33:e0:
e7:8d:b2:d5:d5:02:4f:bc:cf:0b:30:2b:3a:2b:78:6c:c2:1e:
0f:29:e4:3c:4d:6d:aa:75:2f:76:93:6d:f1:83:2f:3b:78:2b:
47:45:91:6f:cc:ee:6a:93:6d:a3:81:72:4a:b8:70:40:9f:ea:
80:16:30:e2:54:c2:f9:c0:8d:fc:df:33:55:4c:0a:5e:c0:ff:
d4:4d:bd:62:ab:59:d6:a8:a7:c2:ab:2f:6b:f6:e6:49:88:57:
3e:b6:7f:01:b6:56:53:17:56:14:fc:31:d1:41:6d:78:11:a9:
0f:13:0c:52:fb:39:46:b2:ed:dd:41:04:5f:b0:d6:6c:1f:39:
34:51:84:0b:2b:0d:33:41:ac:5e:86:9a:70:fb:f4:ee:15:1f:
01:f8:d5:db:cf:5c:38:83:ce:5b:6c:50:e6:c3:60:d3:f1:c6:
4e:e1:64:5b:68:af:ea:5c:3c:3a:6b:0b:00:a4:8b:f1:10:72:
2c:bb:5a:a4:6d:c0:b0:cb:2a:e0:46:8e:cf:0f:84:d1:f7:8b:
9b:ad:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net